
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier: Aj0xjuFEq2rIhEwKNBY3Nz3QuoPn2jKnct49w6BxFYU=
Subject key identifier: 32:2D:FC:C3:D9:4B:B6:BB:67:CD:54:A9:47:51:4D:2D:1F:DA:64:CD
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 019843D13A3B7AB349E792C46E143A94A92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number: 0D4E
Signing time: Fri 25 Jul 2025 23:00:42 +0000
Manifest this update: Fri 25 Jul 2025 23:00:42 +0000
Manifest next update: Sat 26 Jul 2025 23:00:42 +0000
Files and hashes: 1: 36LgSmoTYXDGLabuVqpVL_HY_bo.roa (hash: jlUxcS1bmgVem5MV0QJTckeBjIjhWcwd8IXi6NlQXXM=)
2: 3JkM8vUrkCbAmhwQjTJzai8PJt4.roa (hash: rKQRrUjGotUF8dzfvK33idpF0k0Q/0xTsyKVQjD8oBU=)
3: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: jZuT0HU6NmwmipQhHqvOGq5mZ3U3pZ2lDsNdRguB/Ns=)
4: PweeKQ13rUGHJC_k0tEblCu-L1Y.roa (hash: zztt4zPJkl+NH2hKKS9RN49WTNDOVklAQ3aZkKqs4SI=)
5: _BNEuQp4R33znBKyhfxbJ1you-4.roa (hash: 7/CTsMVYKAgpbst8k5D3ZojF839MnOC9rT+hRdFwdXY=)
6: tanL-Od8fSFgUzHWSnn-wJATeQc.roa (hash: y2Z1JlU4KhHRVIn3hdXA35bEXloxesOZQwuLLa14qX0=)
7: w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa (hash: boP/ufWZtG0JrM7c1Odfmtj3ELDe2un6UZNS+6F8TmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:d1:3a:3b:7a:b3:49:e7:92:c4:6e:14:3a:94:a9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Jul 25 23:00:42 2025 GMT
Not After : Jul 26 23:00:42 2025 GMT
Subject: CN=322dfcc3d94bb6bb67cd54a947514d2d1fda64cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:09:16:39:4a:86:b4:0d:6a:dd:53:35:b3:
7c:6a:fe:57:ae:3d:cd:97:da:f8:ef:6d:44:e3:a8:
32:cb:ea:0f:66:46:8d:c7:fc:0d:e4:15:0d:79:e5:
91:2f:ac:2c:6e:6d:ab:5d:1c:08:72:ed:1e:97:3b:
e5:7d:20:f3:fa:fb:1d:72:e9:3a:e2:a6:06:d5:64:
e1:07:b6:61:fb:e9:4a:72:95:96:a6:3c:95:35:fd:
0d:39:95:c7:47:1e:88:5c:47:98:56:bb:91:8b:39:
ab:88:db:42:a5:fd:ec:76:bb:11:1a:44:1b:6c:2e:
33:88:24:a9:6c:78:1f:13:14:c9:64:dc:8e:d9:9e:
ca:83:6d:2d:77:03:da:c2:ff:b3:7c:02:46:08:03:
47:d3:02:70:f9:8c:22:e0:23:6e:87:af:d7:e1:c0:
e9:42:bb:bf:5c:50:91:ff:bb:b9:37:11:61:0a:a3:
4a:1c:e5:ad:b7:0f:f3:c5:e4:a6:1b:e8:64:23:ef:
cb:e1:03:fe:07:c0:55:d8:a3:16:4c:44:a1:cb:c7:
be:f5:0c:7a:8c:8f:0a:47:d0:7e:c4:9e:48:c3:d4:
70:d9:0c:8a:9c:08:31:27:a2:8c:a9:90:1d:99:39:
67:90:e2:35:bf:b4:fc:b9:94:03:a3:dc:98:66:83:
80:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2D:FC:C3:D9:4B:B6:BB:67:CD:54:A9:47:51:4D:2D:1F:DA:64:CD
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5f:0c:a8:73:ab:e6:f6:eb:27:bf:7f:de:0d:17:23:fb:44:
42:66:1e:d9:44:af:ba:37:40:53:00:3c:95:dc:38:b8:de:f4:
08:bc:09:92:c6:78:f1:7e:d8:d1:3a:56:9d:dc:20:11:fa:ca:
29:30:1e:bb:17:b0:a6:a2:ad:c0:af:29:47:63:64:c2:c6:bd:
a2:50:7c:8e:a5:f9:28:68:a6:11:06:29:05:47:e8:72:65:a6:
2d:03:a8:9a:6a:aa:27:13:75:c8:b9:50:5b:46:82:a2:2f:17:
bf:62:62:d9:e9:b0:55:bc:ed:2c:c9:7b:d8:44:c5:03:d9:4d:
f3:df:06:e6:57:36:43:01:52:d7:e6:a8:7b:db:4f:f6:d6:59:
98:5d:e1:4a:43:2b:e5:02:d3:ea:1d:7c:7b:29:b8:25:34:d2:
b3:e1:5c:1a:22:b3:2b:ea:4e:cb:d0:b2:94:fc:eb:d9:41:45:
1e:a6:84:84:d9:b5:9c:ac:c6:ff:4f:52:56:24:6a:f2:ae:33:
a3:ce:af:04:ea:1e:08:e1:b7:6d:fe:f5:a5:d9:06:f2:bc:8d:
8f:9b:d7:33:6e:e3:43:00:e5:d0:88:d7:55:1c:9c:e2:14:a3:
49:00:9f:e0:47:a9:8d:d8:8a:89:91:c9:8f:38:3d:6a:cf:8d:
d1:f2:71:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhD0To7erNJ55LEbhQ6lKkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMmM0NTg1YmQ4OGZiMjdjYWRmMjllZTViYjk1ZDY1NzVm
Y2VmODMwHhcNMjUwNzI1MjMwMDQyWhcNMjUwNzI2MjMwMDQyWjAzMTEwLwYDVQQD
EygzMjJkZmNjM2Q5NGJiNmJiNjdjZDU0YTk0NzUxNGQyZDFmZGE2NGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTQJFjlKhrQNat1TNbN8av5Xrj3N
l9r4721E46gyy+oPZkaNx/wN5BUNeeWRL6wsbm2rXRwIcu0elzvlfSDz+vsdcuk6
4qYG1WThB7Zh++lKcpWWpjyVNf0NOZXHRx6IXEeYVruRizmriNtCpf3sdrsRGkQb
bC4ziCSpbHgfExTJZNyO2Z7Kg20tdwPawv+zfAJGCANH0wJw+Ywi4CNuh6/X4cDp
Qru/XFCR/7u5NxFhCqNKHOWttw/zxeSmG+hkI+/L4QP+B8BV2KMWTEShy8e+9Qx6
jI8KR9B+xJ5Iw9Rw2QyKnAgxJ6KMqZAdmTlnkOI1v7T8uZQDo9yYZoOAvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIt/MPZS7a7Z81UqUdRTS0f2mTNMB8GA1UdIwQY
MBaAFCIsRYW9iPsnyt8p7lu5XWV1/O+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUt
YzY0N2E4YzFkZGZhLzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUtYzY0N2E4YzFkZGZh
LzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtl8MqHOr
5vbrJ79/3g0XI/tEQmYe2USvujdAUwA8ldw4uN70CLwJksZ48X7Y0TpWndwgEfrK
KTAeuxewpqKtwK8pR2Nkwsa9olB8jqX5KGimEQYpBUfocmWmLQOommqqJxN1yLlQ
W0aCoi8Xv2Ji2emwVbztLMl72ETFA9lN898G5lc2QwFS1+aoe9tP9tZZmF3hSkMr
5QLT6h18eym4JTTSs+FcGiKzK+pOy9CylPzr2UFFHqaEhNm1nKzG/09SViRq8q4z
o86vBOoeCOG3bf71pdkG8ryNj5vXM27jQwDl0IjXVRyc4hSjSQCf4EepjdiKiZHJ
jzg9as+N0fJxIA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 02:58:30 2025 by rpki-client