
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File: iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier: u6bcZD9v5FSInw+1xDGRH9pGebjg5+yaZ4k9EkQLYzk=
Subject key identifier: F1:6F:04:97:87:26:40:46:2D:D6:56:77:7C:51:0F:48:F8:5F:D0:86
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial: 019936EFA9A3E411905B73032299A7F11DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number: 0D33
Signing time: Thu 11 Sep 2025 04:01:40 +0000
Manifest this update: Thu 11 Sep 2025 04:01:40 +0000
Manifest next update: Fri 12 Sep 2025 04:01:40 +0000
Files and hashes: 1: NGjcJESkWKoe17DLj5CiFkjFkhs.roa (hash: GPilr/syUwSnDgvatxbmfR2uNG9m+2J2hRVuK9V/K4A=)
2: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: xPY+vy5EQi/hli7IGc0EP2i7l1aqPCHWMMPBNgpqQiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:a9:a3:e4:11:90:5b:73:03:22:99:a7:f1:1d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Validity
Not Before: Sep 11 04:01:40 2025 GMT
Not After : Sep 12 04:01:40 2025 GMT
Subject: CN=f16f0497872640462dd656777c510f48f85fd086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:83:60:d5:57:d9:d0:51:04:f7:86:1c:03:
bd:d2:3c:71:1f:d9:72:48:67:db:8a:6f:a0:22:21:
f9:8f:67:e9:6f:9d:e2:7a:f8:29:08:a0:c1:64:01:
5e:16:f0:b0:96:4d:4e:b5:ca:12:da:7a:27:bc:72:
0c:bf:57:c3:2c:84:09:90:a0:64:90:7a:4d:13:14:
e4:1d:0d:ba:59:6d:4d:b0:82:00:a7:75:e9:55:23:
b1:42:48:85:b5:03:7f:2f:56:34:88:8e:cd:3f:70:
e8:09:70:a2:40:f4:61:cf:57:04:15:3f:22:2b:08:
7f:df:16:dc:e0:d4:17:c0:dc:b6:6f:21:94:f8:f2:
7a:91:48:e9:dc:e1:06:21:56:99:58:23:52:bd:9e:
ac:ef:87:25:8d:81:20:28:a7:49:e7:54:fc:04:7e:
39:52:7c:4d:d7:8f:f6:89:4c:10:92:94:96:17:d9:
4b:ed:91:09:61:fd:91:40:bc:35:ef:88:c0:0b:2e:
2b:70:0e:aa:e9:8a:8f:6d:59:26:bb:dc:f7:c1:13:
90:fa:ac:23:a9:73:5f:bb:1f:8f:fd:f5:d7:c9:69:
9b:f1:b4:57:95:96:7f:ee:0d:0e:06:8d:60:ee:4a:
00:25:da:a3:1a:ff:8d:e7:b2:be:bc:3b:0d:94:0c:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6F:04:97:87:26:40:46:2D:D6:56:77:7C:51:0F:48:F8:5F:D0:86
X509v3 Authority Key Identifier:
keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0a:b0:9b:33:c0:a5:42:bc:29:dd:9c:d6:12:2f:fd:e2:ee:
f9:46:16:90:90:16:fd:37:15:1d:aa:c5:de:21:33:40:c9:1f:
2d:5b:12:79:bc:c4:15:4d:17:03:6f:63:28:88:06:d6:da:2d:
8c:b1:db:b7:6c:ec:fb:e3:c0:a9:67:3c:4c:2c:6f:05:b6:f1:
28:6f:39:73:4f:e7:94:b6:94:75:8b:2c:af:ac:c6:cc:4f:e2:
bd:44:9d:a2:28:69:32:75:72:0c:06:ec:a9:15:98:eb:1e:37:
e7:0b:27:af:69:96:e2:6d:bb:88:b7:3e:f0:4d:df:92:0f:2f:
55:90:40:45:69:46:8a:ec:c7:14:cf:be:5b:68:52:53:e2:82:
31:61:60:85:9e:20:ba:56:70:7a:7b:f5:aa:66:b0:f2:3c:cd:
15:34:91:9a:3e:e0:dc:07:aa:ff:2b:b0:96:55:bb:f9:05:9f:
31:6a:05:14:60:d5:d5:27:76:2b:76:13:ee:95:fd:5b:c4:23:
56:e7:d2:46:e9:f4:53:18:47:16:69:7d:14:73:88:b1:6c:93:
07:5d:13:ed:e7:fa:c8:0d:16:10:9e:5e:da:19:34:e6:be:1e:
46:ff:4e:23:b3:21:a2:f5:71:8e:b6:59:cc:df:6d:14:f5:23:
05:d5:bd:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk276mj5BGQW3MDIpmn8R2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZTEzOWFmMDg5OWY1ZDZiNWIzMjU4MTM3M2VkYTMwMzdl
YTMwYzAwHhcNMjUwOTExMDQwMTQwWhcNMjUwOTEyMDQwMTQwWjAzMTEwLwYDVQQD
EyhmMTZmMDQ5Nzg3MjY0MDQ2MmRkNjU2Nzc3YzUxMGY0OGY4NWZkMDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjyDYNVX2dBRBPeGHAO90jxxH9ly
SGfbim+gIiH5j2fpb53ievgpCKDBZAFeFvCwlk1OtcoS2nonvHIMv1fDLIQJkKBk
kHpNExTkHQ26WW1NsIIAp3XpVSOxQkiFtQN/L1Y0iI7NP3DoCXCiQPRhz1cEFT8i
Kwh/3xbc4NQXwNy2byGU+PJ6kUjp3OEGIVaZWCNSvZ6s74cljYEgKKdJ51T8BH45
UnxN14/2iUwQkpSWF9lL7ZEJYf2RQLw174jACy4rcA6q6YqPbVkmu9z3wROQ+qwj
qXNfux+P/fXXyWmb8bRXlZZ/7g0OBo1g7koAJdqjGv+N57K+vDsNlAyGKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFvBJeHJkBGLdZWd3xRD0j4X9CGMB8GA1UdIwQY
MBaAFIrhOa8ImfXWtbMlgTc+2jA36jDAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEt
ZjllMmMyZmRiZjM1LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEtZjllMmMyZmRiZjM1
LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAqwmzPA
pUK8Kd2c1hIv/eLu+UYWkJAW/TcVHarF3iEzQMkfLVsSebzEFU0XA29jKIgG1tot
jLHbt2zs++PAqWc8TCxvBbbxKG85c0/nlLaUdYssr6zGzE/ivUSdoihpMnVyDAbs
qRWY6x435wsnr2mW4m27iLc+8E3fkg8vVZBARWlGiuzHFM++W2hSU+KCMWFghZ4g
ulZwenv1qmaw8jzNFTSRmj7g3Aeq/yuwllW7+QWfMWoFFGDV1Sd2K3YT7pX9W8Qj
VufSRun0UxhHFml9FHOIsWyTB10T7ef6yA0WEJ5e2hk05r4eRv9OI7MhovVxjrZZ
zN9tFPUjBdW9Uw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 06:13:06 2025 by rpki-client