Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
File: IjCHszf3R2yNYwSusIzuBX9L9pE.mft (raw, json)
Hash identifier: dsbONe8/NUNaURG1VeSRVq9fB3pZRdEN59n3M2vP8V8=
Subject key identifier: 61:05:49:3C:13:4B:FF:0F:41:61:6C:B4:8A:E5:76:62:E8:2A:70:CF
Authority key identifier: 22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
Certificate issuer: /CN=223087b337f7476c8d6304aeb08cee057f4bf691
Certificate serial: 019A729407C1BCA8818BCCFD7418F29A036A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
Manifest number: 01D5
Signing time: Tue 11 Nov 2025 11:01:35 +0000
Manifest this update: Tue 11 Nov 2025 11:01:35 +0000
Manifest next update: Wed 12 Nov 2025 11:01:35 +0000
Files and hashes: 1: Da7F_pVCBMO9Pya93Jt3tHR6Oco.roa (hash: UlhnFczuqpWrkcvlwjEVQtMKK1bvCGUHj/RuLRvxfcM=)
2: IjCHszf3R2yNYwSusIzuBX9L9pE.crl (hash: R7GjciDFRusFPKXxhMEPcD0pI7iJA/bq11L7WpIOyFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:07:c1:bc:a8:81:8b:cc:fd:74:18:f2:9a:03:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=223087b337f7476c8d6304aeb08cee057f4bf691
Validity
Not Before: Nov 11 11:01:35 2025 GMT
Not After : Nov 12 11:01:35 2025 GMT
Subject: CN=6105493c134bff0f41616cb48ae57662e82a70cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:16:9b:c9:bc:17:9c:bd:a5:3a:3f:30:49:
fb:99:cc:f9:8e:31:93:16:6d:b8:be:c4:a1:c1:c3:
38:0e:d2:bf:5e:39:39:6d:c0:07:7d:21:e1:c4:d0:
c0:cb:ea:cf:49:82:21:f1:92:99:71:39:74:ce:76:
19:aa:2a:89:bb:e1:66:ad:6f:df:30:35:e4:fc:ad:
c1:58:f0:bf:70:64:7b:1a:a9:e1:e1:c0:e6:f3:c3:
75:b0:20:03:ee:41:b6:49:c0:b2:b1:9e:7b:52:d6:
86:7a:ac:f4:60:46:8f:6f:12:fc:67:31:3b:00:dd:
a4:3c:70:c0:49:76:c3:2a:47:ea:1b:68:cc:55:43:
5d:b4:0c:26:24:dc:dd:20:5b:2d:9b:c2:7e:ef:ab:
58:a5:7a:4d:15:6c:f5:0d:1c:ff:55:5b:b4:92:a7:
e2:20:e9:58:6c:e7:9f:bc:6d:ea:9b:42:e3:2b:e8:
12:10:8a:04:6e:9f:38:43:ad:b9:83:d3:4c:9e:0b:
ea:06:9c:7d:20:19:4d:d7:bf:d2:c6:ad:77:c1:e5:
32:1d:01:85:cf:7f:89:2d:78:f2:8f:73:79:ba:66:
40:e3:8a:47:5f:bd:fc:5a:80:eb:ba:49:8b:47:fa:
01:6a:c6:40:2b:e0:c8:84:7c:6f:a4:9c:84:cf:77:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:05:49:3C:13:4B:FF:0F:41:61:6C:B4:8A:E5:76:62:E8:2A:70:CF
X509v3 Authority Key Identifier:
keyid:22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c0:c1:ba:51:3b:4a:5e:56:2f:ca:36:5f:5a:c3:99:f7:f4:
71:ee:10:b0:10:cb:98:c2:0e:cb:66:db:93:9f:36:90:dd:34:
86:3f:28:ac:01:27:50:1d:a4:d3:f8:b0:ab:8b:45:d8:b6:ee:
50:7e:08:3c:89:f7:a1:f7:d0:e7:b2:82:bb:20:28:5d:3d:38:
b3:a3:9a:99:f6:17:8e:da:ff:1c:b5:c7:df:0f:de:2a:23:24:
23:c7:2e:9c:ad:f1:8b:4d:30:83:81:d7:96:0f:08:5c:a1:2e:
14:45:78:c1:4e:b8:5e:26:af:77:66:2a:9d:c9:8c:4b:a0:8c:
b9:0f:bb:bc:86:34:c8:c1:d4:5d:aa:cb:14:4c:6f:b8:c4:2e:
ca:21:56:bf:be:da:12:30:1f:d8:68:27:82:07:bd:b9:11:09:
3f:cb:a9:6e:b5:70:a9:cb:b5:6e:09:c7:36:a4:80:9c:f3:82:
0a:9c:06:2f:00:eb:22:cb:c3:f2:40:fa:6d:86:62:17:d8:3c:
50:59:1f:6e:a9:07:75:b1:a1:2d:86:78:b4:c7:9f:66:68:5f:
78:22:22:cc:48:0d:5b:57:11:ba:fd:5c:0b:17:56:53:c9:9f:
c8:43:46:75:6a:9b:93:4f:94:54:5f:25:77:ae:e2:7d:14:9f:
eb:d3:69:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpylAfBvKiBi8z9dBjymgNqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzA4N2IzMzdmNzQ3NmM4ZDYzMDRhZWIwOGNlZTA1N2Y0
YmY2OTEwHhcNMjUxMTExMTEwMTM1WhcNMjUxMTEyMTEwMTM1WjAzMTEwLwYDVQQD
Eyg2MTA1NDkzYzEzNGJmZjBmNDE2MTZjYjQ4YWU1NzY2MmU4MmE3MGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WkWm8m8F5y9pTo/MEn7mcz5jjGT
Fm24vsShwcM4DtK/Xjk5bcAHfSHhxNDAy+rPSYIh8ZKZcTl0znYZqiqJu+FmrW/f
MDXk/K3BWPC/cGR7Gqnh4cDm88N1sCAD7kG2ScCysZ57UtaGeqz0YEaPbxL8ZzE7
AN2kPHDASXbDKkfqG2jMVUNdtAwmJNzdIFstm8J+76tYpXpNFWz1DRz/VVu0kqfi
IOlYbOefvG3qm0LjK+gSEIoEbp84Q625g9NMngvqBpx9IBlN17/Sxq13weUyHQGF
z3+JLXjyj3N5umZA44pHX738WoDrukmLR/oBasZAK+DIhHxvpJyEz3dUSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEFSTwTS/8PQWFstIrldmLoKnDPMB8GA1UdIwQY
MBaAFCIwh7M390dsjWMErrCM7gV/S/aRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYzk0ZmEtMDUxZS00OGQ1LWFjZDMt
YzUxMjUxNDJhZTU4LzEvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iYzk0ZmEtMDUxZS00OGQ1LWFjZDMtYzUxMjUxNDJhZTU4
LzEvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsDBulE7
Sl5WL8o2X1rDmff0ce4QsBDLmMIOy2bbk582kN00hj8orAEnUB2k0/iwq4tF2Lbu
UH4IPIn3offQ57KCuyAoXT04s6OamfYXjtr/HLXH3w/eKiMkI8cunK3xi00wg4HX
lg8IXKEuFEV4wU64Xiavd2YqncmMS6CMuQ+7vIY0yMHUXarLFExvuMQuyiFWv77a
EjAf2Ggngge9uREJP8upbrVwqcu1bgnHNqSAnPOCCpwGLwDrIsvD8kD6bYZiF9g8
UFkfbqkHdbGhLYZ4tMefZmhfeCIizEgNW1cRuv1cCxdWU8mfyENGdWqbk0+UVF8l
d67ifRSf69NpXg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:36 2025 by rpki-client