Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
File: IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json)
Hash identifier: 3iHdkKreeIkex1TnvzJoOH3BVUXTJGQzztYCrj3W148=
Subject key identifier: FB:BF:30:D3:73:B5:97:3C:F6:E2:4C:60:E7:F6:A9:D6:30:60:E4:FB
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 019A70DC54D5CF456C10AF4E4013E6B977A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 03:01:18 +0000
Manifest this update: Tue 11 Nov 2025 03:01:18 +0000
Manifest next update: Wed 12 Nov 2025 03:01:18 +0000
Files and hashes: 1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: TlKJlSvlz76JYooI1j4qkWdcjXekxNakmp/zgZ6cD8A=)
2: b2NrS79baNCWt7CG0X8Vv_sUMl8.roa (hash: Q1DMA/fao+0mavfnJZ9O2x4iQmJQmqUT84da1WRhc7E=)
3: spimqMKhC9PB1IAAapTxgzK4qRM.roa (hash: Uoz42yC9AHKp3g+1i18MCMkNcCBemOpgqQDvUXFhvIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:54:d5:cf:45:6c:10:af:4e:40:13:e6:b9:77:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Nov 11 03:01:18 2025 GMT
Not After : Nov 12 03:01:18 2025 GMT
Subject: CN=fbbf30d373b5973cf6e24c60e7f6a9d63060e4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:e0:5c:0b:e1:d8:13:52:41:68:34:cf:6a:
d5:5c:70:63:ac:fa:3a:a2:89:d7:96:ed:9d:d6:47:
3e:6a:5d:11:66:cc:b7:86:b2:bc:ce:d9:1b:77:58:
71:98:70:7f:22:36:d4:ce:94:54:1d:bf:4f:77:0f:
99:e8:62:7a:a1:dd:e6:18:88:ad:f4:28:d4:fd:e5:
2e:e0:09:4f:11:58:45:42:02:7b:5f:74:7e:fc:4c:
fd:5c:8e:b7:83:65:40:ed:b4:7c:94:fe:22:25:47:
ac:6a:bc:3a:3d:b9:0f:83:0a:15:0d:15:4f:37:d1:
8f:e6:86:72:c6:f3:ad:c2:dd:02:c9:86:52:f8:40:
06:da:54:07:5f:e3:d7:09:1e:17:68:36:23:2c:2e:
97:ad:d5:cc:9f:f5:53:ba:89:c2:49:5d:05:3c:f5:
67:46:16:59:f0:e8:f9:33:4c:8a:26:e8:85:52:f2:
b0:65:b5:c8:c0:a7:7c:0a:84:fe:87:c8:7e:36:fc:
f2:ab:4a:ce:1f:7b:c8:21:9d:1f:54:b8:24:ae:50:
03:ba:37:36:c3:b2:f4:72:f8:39:70:c9:38:75:6a:
e1:2d:ae:31:b5:ae:45:1b:42:5f:99:11:bc:16:6b:
39:61:02:f0:25:19:ff:2e:42:8b:4d:68:87:8c:9f:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BF:30:D3:73:B5:97:3C:F6:E2:4C:60:E7:F6:A9:D6:30:60:E4:FB
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3b:79:5d:0c:3b:10:30:4a:20:6c:b7:34:71:68:d0:a9:5c:
da:7b:e8:99:44:3a:19:fd:fa:2d:95:7b:f0:2f:a1:ac:01:e2:
a9:9a:4e:63:b0:f7:dc:91:9a:d0:32:6f:9b:4f:d8:a1:20:5d:
71:d8:92:90:da:a6:bf:30:0f:8f:02:c4:7a:b4:ec:49:3d:ec:
49:1d:70:6f:21:47:53:e9:6d:c6:be:b9:95:bd:cb:aa:77:52:
3d:52:14:74:bf:83:25:30:91:3c:2b:53:6a:55:78:88:b3:d7:
57:f2:88:5e:cd:88:66:e0:ef:80:3d:67:8b:c3:c4:3d:6c:67:
61:f3:e2:d8:ff:a3:16:5b:97:1f:42:dc:6f:72:1e:e8:d6:43:
36:56:ed:bb:a5:ce:9b:2b:95:c4:2a:80:42:19:bd:dd:ab:b2:
60:b0:cc:bb:68:68:7f:5a:95:b5:65:ff:5c:8d:a6:f3:ed:5d:
ae:b0:85:f0:2a:28:b1:82:b6:15:d9:78:2f:4b:bc:48:08:ea:
b1:31:bd:f3:f2:89:e0:47:5e:99:64:f9:be:d5:99:e7:e4:9b:
7d:f0:51:17:3e:6e:8f:fb:68:2c:d4:3b:b4:e7:a5:13:6f:47:
ca:40:64:2d:1b:d4:ca:21:69:5b:de:73:bf:fe:64:20:39:ce:
eb:1e:0f:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3FTVz0VsEK9OQBPmuXehMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzZiMmI4YWZhNjAzNmQyYzhlODMxNzczNmZhYWE3MmQ4
MGM0ZjIwHhcNMjUxMTExMDMwMTE4WhcNMjUxMTEyMDMwMTE4WjAzMTEwLwYDVQQD
EyhmYmJmMzBkMzczYjU5NzNjZjZlMjRjNjBlN2Y2YTlkNjMwNjBlNGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFzgXAvh2BNSQWg0z2rVXHBjrPo6
oonXlu2d1kc+al0RZsy3hrK8ztkbd1hxmHB/IjbUzpRUHb9Pdw+Z6GJ6od3mGIit
9CjU/eUu4AlPEVhFQgJ7X3R+/Ez9XI63g2VA7bR8lP4iJUesarw6PbkPgwoVDRVP
N9GP5oZyxvOtwt0CyYZS+EAG2lQHX+PXCR4XaDYjLC6XrdXMn/VTuonCSV0FPPVn
RhZZ8Oj5M0yKJuiFUvKwZbXIwKd8CoT+h8h+Nvzyq0rOH3vIIZ0fVLgkrlADujc2
w7L0cvg5cMk4dWrhLa4xta5FG0JfmRG8Fms5YQLwJRn/LkKLTWiHjJ8kWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPu/MNNztZc89uJMYOf2qdYwYOT7MB8GA1UdIwQY
MBaAFCI2srivpgNtLI6DF3NvqqctgMTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82Zjg5NWItNzk3Ny00NDVkLWI3MmMt
OGI1ZWY0MWQ4YzI1LzEvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82Zjg5NWItNzk3Ny00NDVkLWI3MmMtOGI1ZWY0MWQ4YzI1
LzEvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTt5XQw7
EDBKIGy3NHFo0Klc2nvomUQ6Gf36LZV78C+hrAHiqZpOY7D33JGa0DJvm0/YoSBd
cdiSkNqmvzAPjwLEerTsST3sSR1wbyFHU+ltxr65lb3LqndSPVIUdL+DJTCRPCtT
alV4iLPXV/KIXs2IZuDvgD1ni8PEPWxnYfPi2P+jFluXH0Lcb3Ie6NZDNlbtu6XO
myuVxCqAQhm93auyYLDMu2hof1qVtWX/XI2m8+1drrCF8CoosYK2Fdl4L0u8SAjq
sTG98/KJ4EdemWT5vtWZ5+SbffBRFz5uj/toLNQ7tOelE29HykBkLRvUyiFpW95z
v/5kIDnO6x4P4g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:56 2025 by rpki-client