Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json)
Hash identifier: xH+wtSkHBN4IFZ5C9RWyyUASbca9H8GTw7HLLaP1Vxo=
Subject key identifier: F0:C4:DF:FC:94:65:FF:81:DA:A1:60:26:4D:B5:C3:0D:32:A5:E0:D3
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 019A71B8E28409E2103ADB6D6F8382CB8580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
Manifest number: 0996
Signing time: Tue 11 Nov 2025 07:02:13 +0000
Manifest this update: Tue 11 Nov 2025 07:02:13 +0000
Manifest next update: Wed 12 Nov 2025 07:02:13 +0000
Files and hashes: 1: EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa (hash: WGOFdfPIgmzQx9aGUgM6u6XYxnkTJOLa0M2Z4HLrsFA=)
2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: JIvjuvTlcYACBEsiHCiuvORAoq4zCaKeKZZ3DFts+/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e2:84:09:e2:10:3a:db:6d:6f:83:82:cb:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Nov 11 07:02:13 2025 GMT
Not After : Nov 12 07:02:13 2025 GMT
Subject: CN=f0c4dffc9465ff81daa160264db5c30d32a5e0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b2:29:f2:b3:4b:84:7c:d8:67:d4:6d:18:b9:
0f:86:d4:ce:53:01:89:ae:82:5c:44:bf:c1:fb:8b:
b9:a0:ee:a5:3a:5a:1b:24:2c:cb:77:86:3e:9f:31:
27:61:76:86:63:da:4d:90:55:29:2c:f6:a0:eb:1c:
56:ef:58:2d:1f:05:a1:97:2b:2d:5c:4c:67:61:56:
66:3f:c9:88:0f:5e:b8:f0:6d:3f:76:98:26:c0:e7:
65:44:90:a2:bc:54:85:6d:6f:2a:7c:17:04:4d:72:
ba:ae:7b:27:ba:ec:3a:96:d9:c1:e0:2d:d7:43:74:
8f:5a:b4:c1:9c:0d:c1:e8:4b:00:4b:4f:e1:99:54:
ab:58:ce:f1:d5:b1:8f:c5:0c:98:e1:d2:cd:76:ac:
80:b0:01:88:f3:1f:89:20:41:ec:d8:ca:c0:f5:79:
4f:8a:b6:8e:02:50:d3:6a:68:0a:95:e1:83:2d:5b:
66:a9:f9:b9:c3:56:e7:37:5e:53:10:89:3b:e2:ed:
b0:03:b0:c3:1a:c6:e0:99:eb:9c:01:c0:79:10:48:
62:cb:97:fb:59:3b:5a:84:64:2b:c1:d0:0e:b5:df:
b6:fc:0a:40:8d:d6:ca:89:6b:5d:50:49:49:ef:a1:
1c:7b:57:2c:c6:5b:4e:23:1a:06:f5:87:10:ee:23:
3e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C4:DF:FC:94:65:FF:81:DA:A1:60:26:4D:B5:C3:0D:32:A5:E0:D3
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:06:56:49:79:60:6d:cc:98:8a:77:9b:bd:0f:bf:7b:b8:30:
b2:6f:4f:ea:03:5a:92:f1:4f:4e:c2:d8:3a:f7:a5:0c:29:cd:
6e:3b:d6:f8:1e:4f:12:52:2d:85:d5:90:d6:1f:8a:60:4b:a9:
48:ea:f3:c2:b5:a1:f8:48:aa:29:2a:96:a3:a3:38:e2:bc:68:
b4:d4:ea:70:1a:8d:38:7a:ca:52:ee:ce:2c:f0:69:1d:58:04:
79:b9:51:2c:5e:d5:83:62:3a:a3:e4:07:79:5e:54:3f:ec:24:
72:01:a9:ee:ac:01:34:50:ae:26:0b:7f:48:b4:7d:66:c0:13:
82:a8:24:a4:af:a8:19:ad:d3:e4:d9:4c:67:93:cd:12:19:7b:
d5:15:c6:42:af:91:42:8e:c6:2b:17:26:b2:ba:9a:3d:c5:06:
17:f7:64:b6:1a:c9:9e:45:b2:19:85:7f:e6:2d:c8:01:bd:cf:
80:08:b4:07:f9:c4:91:d8:7a:b1:70:b7:7b:71:68:17:fe:b0:
54:e4:01:55:c8:cf:21:ed:9b:5b:60:7a:2e:37:7c:d4:40:66:
38:86:ae:9a:8e:0e:fc:79:af:56:b8:ba:f0:4f:87:6f:da:88:
d7:6e:fc:48:1f:35:0f:1c:32:38:c3:09:53:fe:92:88:e6:30:
60:bb:38:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuOKECeIQOtttb4OCy4WAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyOWZiMGZiM2QyNzhlMWIyODBhNzc3ZGUyMDBlZmJkMDhi
YWFjMzAwHhcNMjUxMTExMDcwMjEzWhcNMjUxMTEyMDcwMjEzWjAzMTEwLwYDVQQD
EyhmMGM0ZGZmYzk0NjVmZjgxZGFhMTYwMjY0ZGI1YzMwZDMyYTVlMGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87Ip8rNLhHzYZ9RtGLkPhtTOUwGJ
roJcRL/B+4u5oO6lOlobJCzLd4Y+nzEnYXaGY9pNkFUpLPag6xxW71gtHwWhlyst
XExnYVZmP8mID1648G0/dpgmwOdlRJCivFSFbW8qfBcETXK6rnsnuuw6ltnB4C3X
Q3SPWrTBnA3B6EsAS0/hmVSrWM7x1bGPxQyY4dLNdqyAsAGI8x+JIEHs2MrA9XlP
iraOAlDTamgKleGDLVtmqfm5w1bnN15TEIk74u2wA7DDGsbgmeucAcB5EEhiy5f7
WTtahGQrwdAOtd+2/ApAjdbKiWtdUElJ76Ece1csxltOIxoG9YcQ7iM+aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDE3/yUZf+B2qFgJk21ww0ypeDTMB8GA1UdIwQY
MBaAFCKfsPs9J44bKAp3feIA770IuqwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82YzU0YTktOWZlNS00ODkzLTlkYTct
N2I5ODY2MzNhYzVlLzEvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82YzU0YTktOWZlNS00ODkzLTlkYTctN2I5ODY2MzNhYzVl
LzEvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQZWSXlg
bcyYinebvQ+/e7gwsm9P6gNakvFPTsLYOvelDCnNbjvW+B5PElIthdWQ1h+KYEup
SOrzwrWh+EiqKSqWo6M44rxotNTqcBqNOHrKUu7OLPBpHVgEeblRLF7Vg2I6o+QH
eV5UP+wkcgGp7qwBNFCuJgt/SLR9ZsATgqgkpK+oGa3T5NlMZ5PNEhl71RXGQq+R
Qo7GKxcmsrqaPcUGF/dkthrJnkWyGYV/5i3IAb3PgAi0B/nEkdh6sXC3e3FoF/6w
VOQBVcjPIe2bW2B6Ljd81EBmOIaumo4O/HmvVri68E+Hb9qI1278SB81DxwyOMMJ
U/6SiOYwYLs4Sg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:45 2025 by rpki-client