Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: P86szQ5lG/K6iNRokVAEnKkAV+jLOcroO7lDDdXSsZc=
Subject key identifier: 56:3E:9E:A9:59:D5:90:93:C9:91:00:33:E9:09:BA:85:30:F6:00:FE
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 019933B6AFEAF83F60E56E11D9E535AA4F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 1680
Signing time: Wed 10 Sep 2025 13:00:34 +0000
Manifest this update: Wed 10 Sep 2025 13:00:34 +0000
Manifest next update: Thu 11 Sep 2025 13:00:34 +0000
Files and hashes: 1: JoFV0lmrgBVp2NchrwUNBCxFqPk.roa (hash: 6FTsXZns8p+PiPkKjnYlGHxMRtUZaiMCOOMvrqE4q2A=)
2: LXcAIZsJjKqYcEZ-B4QhCzqX1y4.roa (hash: qXMNjFLmC2o8C7/tTBWAvWSGp3iRQoR6PHBawFPFtHc=)
3: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: qiW0EAEOJLRwXPl2rdJFTRI8xBavh9Md1aM+DSecK38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:af:ea:f8:3f:60:e5:6e:11:d9:e5:35:aa:4f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Sep 10 13:00:34 2025 GMT
Not After : Sep 11 13:00:34 2025 GMT
Subject: CN=563e9ea959d59093c9910033e909ba8530f600fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:53:b7:d5:b8:67:4a:fe:d6:1d:7f:1d:95:
a8:68:1a:49:2b:83:fb:83:58:41:41:be:3a:04:da:
00:b3:ee:1a:a5:95:e6:74:1e:bb:40:ef:13:e6:25:
00:38:ff:6a:79:25:5b:cd:52:96:28:56:52:7b:17:
d8:20:2c:4e:98:2b:b0:2f:26:12:70:58:c1:47:b6:
fa:85:c9:4f:ba:6f:2f:b3:55:00:b7:a4:66:33:ec:
ea:59:f6:6f:84:40:41:e6:a7:00:9d:97:61:a0:cc:
fc:cc:cb:1d:e9:a8:ff:2a:bc:2e:32:45:56:a2:22:
46:b0:38:42:7c:98:00:c3:64:b8:8c:9f:3b:87:3c:
7c:0e:ab:42:a9:55:12:d5:68:98:e9:80:f7:65:03:
99:ad:ae:82:13:ec:13:af:d8:7d:33:9e:ac:86:b2:
41:60:d7:bf:45:6e:eb:cf:ea:b9:a5:35:34:4e:98:
57:d5:44:e2:48:55:5c:22:fd:7a:ee:00:b2:2f:77:
b8:40:79:25:99:b9:e7:99:6a:b1:a0:20:ce:50:5f:
fd:5c:8e:74:b1:ef:1e:eb:70:01:3c:26:55:e7:40:
9d:21:92:1e:93:6f:1a:dc:57:15:2a:7c:9b:76:76:
8d:18:78:57:54:0b:03:43:0d:eb:2c:8b:2c:37:72:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3E:9E:A9:59:D5:90:93:C9:91:00:33:E9:09:BA:85:30:F6:00:FE
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6f:35:fd:3a:13:6d:29:62:1e:f0:23:3a:eb:78:96:5f:71:
20:03:1f:37:cf:ac:1d:c9:60:69:46:2a:2f:38:d7:09:a8:05:
69:ff:01:f8:fc:e4:65:79:2f:7d:23:0c:72:d2:2a:8a:d7:e3:
ec:68:1c:98:f3:5f:f8:8d:9c:42:5e:db:67:95:fd:4a:b4:3f:
d5:4e:8c:13:20:dc:cf:cc:f8:94:38:53:4d:fc:a7:88:35:e7:
bf:97:84:7b:7c:a6:5b:47:f9:79:0c:e3:2f:7a:b6:7b:34:9c:
cc:5d:6e:8f:bd:5a:67:be:5d:cb:0e:1c:d6:75:5a:1d:a0:4b:
9a:8f:3e:a8:a7:21:4a:3c:77:6f:2a:f8:d9:f2:d9:c6:9e:14:
69:67:ff:e1:7a:62:ce:d6:c4:61:7e:7f:b9:12:48:4e:1b:ea:
af:3a:de:2b:c4:0c:33:6a:b6:27:bc:be:b4:7f:b4:c0:be:22:
44:e0:96:8f:e3:74:c8:db:ff:e3:6c:d8:0b:2a:e2:56:46:30:
49:2a:3d:1d:d2:5f:81:17:03:bf:8a:2e:a5:b2:2c:59:75:89:
62:77:1c:da:f3:41:b6:42:d8:81:d9:65:66:08:3b:6e:5b:7a:
1d:75:25:c4:90:cb:65:8b:d6:9d:af:87:a0:a3:b3:60:63:ed:
4c:b6:5c:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkztq/q+D9g5W4R2eU1qk9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMGM4ZDM1ZGQ2NjY1N2JmZmM5MGI2YWM0MTYwMGZmYTYy
M2Q1YjgwHhcNMjUwOTEwMTMwMDM0WhcNMjUwOTExMTMwMDM0WjAzMTEwLwYDVQQD
Eyg1NjNlOWVhOTU5ZDU5MDkzYzk5MTAwMzNlOTA5YmE4NTMwZjYwMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptZTt9W4Z0r+1h1/HZWoaBpJK4P7
g1hBQb46BNoAs+4apZXmdB67QO8T5iUAOP9qeSVbzVKWKFZSexfYICxOmCuwLyYS
cFjBR7b6hclPum8vs1UAt6RmM+zqWfZvhEBB5qcAnZdhoMz8zMsd6aj/KrwuMkVW
oiJGsDhCfJgAw2S4jJ87hzx8DqtCqVUS1WiY6YD3ZQOZra6CE+wTr9h9M56shrJB
YNe/RW7rz+q5pTU0TphX1UTiSFVcIv167gCyL3e4QHklmbnnmWqxoCDOUF/9XI50
se8e63ABPCZV50CdIZIek28a3FcVKnybdnaNGHhXVAsDQw3rLIssN3KZWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFY+nqlZ1ZCTyZEAM+kJuoUw9gD+MB8GA1UdIwQY
MBaAFIsMjTXdZmV7/8kLasQWAP+mI9W4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2Qt
NDMxODdlMjliMGUzLzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2QtNDMxODdlMjliMGUz
LzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMm81/ToT
bSliHvAjOut4ll9xIAMfN8+sHclgaUYqLzjXCagFaf8B+PzkZXkvfSMMctIqitfj
7GgcmPNf+I2cQl7bZ5X9SrQ/1U6MEyDcz8z4lDhTTfyniDXnv5eEe3ymW0f5eQzj
L3q2ezSczF1uj71aZ75dyw4c1nVaHaBLmo8+qKchSjx3byr42fLZxp4UaWf/4Xpi
ztbEYX5/uRJIThvqrzreK8QMM2q2J7y+tH+0wL4iROCWj+N0yNv/42zYCyriVkYw
SSo9HdJfgRcDv4oupbIsWXWJYncc2vNBtkLYgdllZgg7blt6HXUlxJDLZYvWna+H
oKOzYGPtTLZc1Q==
-----END CERTIFICATE-----
Generated at Wed Sep 10 21:55:52 2025 by rpki-client