Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: IgnvTFon8fRsvHb7fw97c4uTmrhRmr05wp/35lDgrLE=
Subject key identifier: 90:76:02:AA:10:20:FB:89:3E:F4:19:1F:47:60:12:37:60:51:F8:0B
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 019A722641754BCFDBDCFF5D7D301C0F24C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 0F88
Signing time: Tue 11 Nov 2025 09:01:41 +0000
Manifest this update: Tue 11 Nov 2025 09:01:41 +0000
Manifest next update: Wed 12 Nov 2025 09:01:41 +0000
Files and hashes: 1: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: AXqdgFfa7oRCu16OjvVLTQb3uw8yALFUpzOUZeNAdQA=)
2: t9nkji_Xq4DRGMttbRDw-jVfqPI.roa (hash: MJaMfbYXB+V545skyyIWbRiW1FYp9UFjL+ooREdIKpc=)
3: x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa (hash: bx0oE168u4Tmbz20f8oi8B9aCfZBYtjemV0iReEb4PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:41:75:4b:cf:db:dc:ff:5d:7d:30:1c:0f:24:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Nov 11 09:01:41 2025 GMT
Not After : Nov 12 09:01:41 2025 GMT
Subject: CN=907602aa1020fb893ef4191f476012376051f80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:81:56:9c:36:b1:b1:ca:13:bd:97:e8:df:
20:39:1d:36:0f:a8:46:33:87:9e:00:c3:98:07:3c:
8b:5c:ba:7e:e9:44:19:a6:a9:3d:c9:5e:18:cc:82:
db:68:2d:cd:7d:0c:2a:ce:b6:2e:35:d9:f7:d8:b1:
f4:f9:40:c2:b1:39:0b:87:99:ac:e5:02:6e:1e:89:
fb:5f:a1:b8:2f:c3:72:2a:9d:42:ce:fe:62:a2:df:
c2:9e:27:7c:d5:b5:dc:63:9b:7a:37:cc:dd:c9:9a:
b6:36:33:49:c9:aa:ee:c2:a6:3d:90:5d:59:ea:ff:
c1:22:73:0b:bc:20:47:ce:92:30:07:3f:70:04:97:
c1:3b:6a:95:b4:ac:83:a6:53:05:d3:96:87:24:b5:
89:e8:f2:09:2b:3f:d3:c5:ad:f5:27:b1:71:08:ea:
68:67:60:49:e6:10:4a:54:d4:e8:30:30:bb:e4:4e:
77:b6:db:ef:12:dc:35:c7:6e:19:a7:12:f1:65:fc:
2a:8d:d4:96:01:92:53:7c:5b:96:d3:45:e7:5d:18:
7a:52:f0:b8:5e:63:8a:39:12:ee:fc:3e:1d:db:57:
ca:cf:28:0a:2a:23:0c:df:7c:55:d3:34:ff:ee:bc:
ee:b3:4d:a4:0a:5d:1d:e7:c0:55:da:62:da:82:02:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:76:02:AA:10:20:FB:89:3E:F4:19:1F:47:60:12:37:60:51:F8:0B
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9d:e3:2a:c8:5d:20:41:5c:77:02:67:66:52:e4:ad:8e:40:
a8:a6:8c:6b:a1:c4:f9:dd:60:26:46:44:91:ca:44:e7:f9:f5:
02:85:06:f2:79:a2:de:80:30:f9:45:19:51:d5:99:c1:f1:1e:
b8:55:d6:ff:bb:9e:97:6a:f0:7a:ef:3d:26:a9:be:b1:5c:89:
89:d1:86:80:c0:6b:94:87:8e:de:39:1b:b5:9c:54:78:66:4b:
bb:f8:77:fd:0f:8a:1f:b3:a4:9b:e9:2e:99:bf:45:af:1f:ec:
11:c8:15:f9:b6:f9:dc:ef:3e:91:96:9b:e8:0d:0a:5e:b0:ff:
08:bf:40:75:2a:2b:45:e7:a1:b6:e1:a0:f6:af:35:2e:fb:4d:
bd:5c:0f:fb:a3:ab:a2:b6:75:b0:16:98:be:c6:cd:4d:5d:1a:
31:7a:c9:a9:17:98:8e:22:f1:d7:05:50:94:85:4c:8d:84:4e:
b3:80:89:52:4b:53:33:e9:42:e0:73:7e:8f:9a:ae:ac:af:72:
be:35:66:f6:14:01:9e:bb:d1:d2:95:43:c3:ab:b8:cd:8c:19:
b2:c3:73:e2:72:a4:50:03:9a:a2:78:89:97:d7:cd:09:b5:db:
21:42:2f:be:54:1f:44:96:30:ed:1f:cb:d7:11:17:cd:60:09:
eb:f3:12:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJkF1S8/b3P9dfTAcDyTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2E1ODEyNGNlOWNjNDM3ODM5NTUyNTVlN2Y1ODM5MDVj
ZGIxNGUwHhcNMjUxMTExMDkwMTQxWhcNMjUxMTEyMDkwMTQxWjAzMTEwLwYDVQQD
Eyg5MDc2MDJhYTEwMjBmYjg5M2VmNDE5MWY0NzYwMTIzNzYwNTFmODBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxuBVpw2sbHKE72X6N8gOR02D6hG
M4eeAMOYBzyLXLp+6UQZpqk9yV4YzILbaC3NfQwqzrYuNdn32LH0+UDCsTkLh5ms
5QJuHon7X6G4L8NyKp1Czv5iot/Cnid81bXcY5t6N8zdyZq2NjNJyaruwqY9kF1Z
6v/BInMLvCBHzpIwBz9wBJfBO2qVtKyDplMF05aHJLWJ6PIJKz/Txa31J7FxCOpo
Z2BJ5hBKVNToMDC75E53ttvvEtw1x24ZpxLxZfwqjdSWAZJTfFuW00XnXRh6UvC4
XmOKORLu/D4d21fKzygKKiMM33xV0zT/7rzus02kCl0d58BV2mLaggKB8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJB2AqoQIPuJPvQZH0dgEjdgUfgLMB8GA1UdIwQY
MBaAFIk6WBJM6cxDeDlVJV5/WDkFzbFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hMzUyYmEtYzIyOC00YTE1LTkxNjgt
MzAzYjhiYzI4YmZhLzEvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hMzUyYmEtYzIyOC00YTE1LTkxNjgtMzAzYjhiYzI4YmZh
LzEvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJ3jKshd
IEFcdwJnZlLkrY5AqKaMa6HE+d1gJkZEkcpE5/n1AoUG8nmi3oAw+UUZUdWZwfEe
uFXW/7uel2rweu89Jqm+sVyJidGGgMBrlIeO3jkbtZxUeGZLu/h3/Q+KH7Okm+ku
mb9Frx/sEcgV+bb53O8+kZab6A0KXrD/CL9AdSorReehtuGg9q81LvtNvVwP+6Or
orZ1sBaYvsbNTV0aMXrJqReYjiLx1wVQlIVMjYROs4CJUktTM+lC4HN+j5qurK9y
vjVm9hQBnrvR0pVDw6u4zYwZssNz4nKkUAOaoniJl9fNCbXbIUIvvlQfRJYw7R/L
1xEXzWAJ6/MSLQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:57:43 2025 by rpki-client