Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
File: iPhM2j8rn5Z9noqEhdmeaht_fG4.mft (raw, json)
Hash identifier: iz4xRyfWqzd6HNh4wfaZl3RcdEjAiauOVNPrwwli2CM=
Subject key identifier: 1D:91:6C:51:F4:1D:10:CC:9F:FA:B4:F7:0F:A6:49:20:B1:36:A8:17
Authority key identifier: 88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E
Certificate issuer: /CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
Certificate serial: 019A71B77AA3C4B5216467C62E2944F59E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
Manifest number: 0405
Signing time: Tue 11 Nov 2025 07:00:41 +0000
Manifest this update: Tue 11 Nov 2025 07:00:41 +0000
Manifest next update: Wed 12 Nov 2025 07:00:41 +0000
Files and hashes: 1: iPhM2j8rn5Z9noqEhdmeaht_fG4.crl (hash: To33yzuV0YBogHjxMxvVKE+s/u0Fn5AwRbz77zsOrTg=)
2: txmFyUOnE8z2a-lXpSSWeNlZGdM.roa (hash: tHzEEY6u+Izo5THIfW02uc7TbpIzTWXGA5LdSe/FigM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:7a:a3:c4:b5:21:64:67:c6:2e:29:44:f5:9e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
Validity
Not Before: Nov 11 07:00:41 2025 GMT
Not After : Nov 12 07:00:41 2025 GMT
Subject: CN=1d916c51f41d10cc9ffab4f70fa64920b136a817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:b2:00:da:16:71:77:61:81:84:43:a1:83:
57:90:1f:c8:ea:4f:53:44:27:fe:34:28:67:41:df:
7c:21:61:be:ce:fc:57:65:ac:93:9c:57:69:4c:d6:
47:39:5f:0c:6a:50:1a:6c:9f:d0:4e:93:56:bb:02:
49:b9:a8:81:97:ce:77:4b:15:91:bd:d3:97:f9:2a:
ea:81:43:38:51:5a:ad:fd:51:8b:28:a2:4f:c6:65:
d5:c4:41:3f:36:27:0f:90:8d:f9:47:a0:b6:7a:2d:
cb:11:dc:0d:6d:14:89:47:01:fd:20:ef:4d:18:84:
e9:cd:60:24:72:23:1c:68:e0:3f:d5:08:97:23:1d:
12:e0:28:5b:b3:e3:e4:8f:06:e6:ad:9d:1e:ef:28:
42:4f:dc:72:ba:7a:49:b8:6e:f5:9c:5f:d7:a0:60:
4a:62:31:63:72:59:73:50:93:d7:8d:29:73:25:7a:
ce:4b:25:de:a8:39:23:ec:fa:57:0a:a3:28:26:9b:
62:84:6c:c3:4c:ac:d9:62:d2:18:dd:ed:76:c1:87:
64:2c:3b:58:ad:0e:38:03:bc:37:09:9f:27:0e:e8:
f7:51:20:67:50:01:56:04:38:25:32:7e:73:33:bd:
00:03:8f:bd:d9:8e:1d:e8:54:47:8b:13:ff:db:92:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:91:6C:51:F4:1D:10:CC:9F:FA:B4:F7:0F:A6:49:20:B1:36:A8:17
X509v3 Authority Key Identifier:
keyid:88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:af:22:57:ff:1c:8a:e9:49:2a:de:3c:81:1f:02:21:26:63:
47:84:18:49:e0:44:21:f2:6d:ec:6b:ab:01:c4:44:08:aa:27:
5e:18:d5:98:be:3f:95:f4:df:4c:ea:3f:42:91:fa:b0:98:84:
61:11:b9:78:29:db:e7:fa:b9:09:80:40:7e:3e:67:96:28:ce:
fa:6a:f6:db:99:3d:7d:21:34:34:85:59:5e:34:e4:72:b0:f1:
26:e9:e1:04:e9:9a:97:a9:f0:a4:c7:d8:33:ea:66:68:d8:e5:
5d:90:d0:96:0c:27:d4:c1:f0:ed:0b:a0:cc:ca:ef:99:28:c9:
ad:19:8b:a0:fa:1e:5d:ee:83:40:cd:0d:72:04:44:60:83:0b:
c9:2b:a3:6d:1c:53:62:5f:5a:4a:71:f3:ae:a2:c8:ae:37:f1:
f4:d6:2b:49:93:d6:51:21:e8:42:4a:eb:33:ff:29:85:9e:02:
22:7d:2d:d9:39:f4:ca:f7:45:ff:f0:74:64:3a:58:87:93:e7:
34:15:5d:08:ee:00:f9:36:c1:4a:16:e4:32:26:0c:1a:19:18:
00:56:0d:3a:d5:90:ed:cf:33:a3:78:4d:4a:77:97:e8:f8:ff:
87:78:16:50:c1:7d:6b:15:3b:10:43:59:3b:00:88:24:dc:1e:
29:42:58:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt3qjxLUhZGfGLilE9Z5jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Zjg0Y2RhM2YyYjlmOTY3ZDllOGE4NDg1ZDk5ZTZhMWI3
ZjdjNmUwHhcNMjUxMTExMDcwMDQxWhcNMjUxMTEyMDcwMDQxWjAzMTEwLwYDVQQD
EygxZDkxNmM1MWY0MWQxMGNjOWZmYWI0ZjcwZmE2NDkyMGIxMzZhODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjKyANoWcXdhgYRDoYNXkB/I6k9T
RCf+NChnQd98IWG+zvxXZayTnFdpTNZHOV8MalAabJ/QTpNWuwJJuaiBl853SxWR
vdOX+SrqgUM4UVqt/VGLKKJPxmXVxEE/NicPkI35R6C2ei3LEdwNbRSJRwH9IO9N
GITpzWAkciMcaOA/1QiXIx0S4Chbs+PkjwbmrZ0e7yhCT9xyunpJuG71nF/XoGBK
YjFjcllzUJPXjSlzJXrOSyXeqDkj7PpXCqMoJptihGzDTKzZYtIY3e12wYdkLDtY
rQ44A7w3CZ8nDuj3USBnUAFWBDglMn5zM70AA4+92Y4d6FRHixP/25KtMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2RbFH0HRDMn/q09w+mSSCxNqgXMB8GA1UdIwQY
MBaAFIj4TNo/K5+WfZ6KhIXZnmobf3xuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBoTTJqOHJuNVo5bm9xRWhkbWVhaHRfZkc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mMjM4MzEtNmViNS00NDI3LTgxYjAt
MzRkMzQxYzVlYjYxLzEvaVBoTTJqOHJuNVo5bm9xRWhkbWVhaHRfZkc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mMjM4MzEtNmViNS00NDI3LTgxYjAtMzRkMzQxYzVlYjYx
LzEvaVBoTTJqOHJuNVo5bm9xRWhkbWVhaHRfZkc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcq8iV/8c
iulJKt48gR8CISZjR4QYSeBEIfJt7GurAcRECKonXhjVmL4/lfTfTOo/QpH6sJiE
YRG5eCnb5/q5CYBAfj5nlijO+mr225k9fSE0NIVZXjTkcrDxJunhBOmal6nwpMfY
M+pmaNjlXZDQlgwn1MHw7QugzMrvmSjJrRmLoPoeXe6DQM0NcgREYIMLySujbRxT
Yl9aSnHzrqLIrjfx9NYrSZPWUSHoQkrrM/8phZ4CIn0t2Tn0yvdF//B0ZDpYh5Pn
NBVdCO4A+TbBShbkMiYMGhkYAFYNOtWQ7c8zo3hNSneX6Pj/h3gWUMF9axU7EENZ
OwCIJNweKUJYoQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:33 2025 by rpki-client