Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
File: ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft (raw, json)
Hash identifier: 8Rv3NfIU9YwmyBHytRWQ+t+r+N8RjdWshnN3S/nHaxo=
Subject key identifier: D5:96:DF:6F:15:D2:01:AC:CF:03:68:AA:45:62:D8:1B:1F:9F:E5:8B
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Certificate issuer: /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial: 019A7225CBEAF0446602E4762ABE8292D725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
Manifest number: 0863
Signing time: Tue 11 Nov 2025 09:01:10 +0000
Manifest this update: Tue 11 Nov 2025 09:01:10 +0000
Manifest next update: Wed 12 Nov 2025 09:01:10 +0000
Files and hashes: 1: 46cUFKURmF9XnPH8sSx3t3pgjTo.roa (hash: 0QimrSPj6EgGm2B8/lr6EDBnOBJIibCqv64JLqj1ceI=)
2: ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl (hash: +o/IgCOMuhjcLlS38jMD6palp8zV92auFq8juL/5I3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:cb:ea:f0:44:66:02:e4:76:2a:be:82:92:d7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Validity
Not Before: Nov 11 09:01:10 2025 GMT
Not After : Nov 12 09:01:10 2025 GMT
Subject: CN=d596df6f15d201accf0368aa4562d81b1f9fe58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:f4:50:19:8b:8e:3e:f9:0a:36:4e:2e:4b:
bd:54:53:5c:f3:00:36:23:29:9f:9d:d8:00:e8:b9:
49:c4:2c:07:89:e9:e9:68:93:66:35:9d:40:28:73:
cb:f1:a5:d1:a4:6b:10:90:31:d5:e3:ca:ac:c6:00:
a3:c8:85:71:54:c2:3c:64:22:2a:fc:2a:35:60:2c:
2b:c2:90:7c:49:c4:68:fc:a3:e3:87:f6:97:fd:5b:
b8:ec:8f:3b:a0:87:5f:12:b1:a1:cd:7a:6b:df:45:
2b:c3:5a:4b:fc:62:c8:c9:1d:88:12:b0:d9:a9:90:
e5:51:58:20:8c:64:61:42:71:38:ae:07:03:f0:ba:
e9:b4:0a:38:ef:af:c2:3c:94:41:fd:57:2c:6b:66:
83:1c:b8:26:86:7a:cf:63:02:c6:29:fc:66:b9:0d:
c6:39:0d:d0:59:d8:1d:6e:83:a0:96:d5:61:bb:7a:
97:41:f9:fa:c5:3b:ae:12:c6:db:4d:44:5c:fa:18:
1e:0e:7d:09:a3:ca:72:44:7a:6c:05:1b:70:49:f4:
45:34:ec:fe:e6:60:7c:64:6a:7c:9e:f2:b4:17:17:
6f:f2:e4:18:67:7b:8f:3a:e3:d9:da:29:b5:fc:7b:
81:25:cc:e9:99:21:cf:dc:ec:6a:9d:74:4f:a9:6c:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:96:DF:6F:15:D2:01:AC:CF:03:68:AA:45:62:D8:1B:1F:9F:E5:8B
X509v3 Authority Key Identifier:
keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:89:03:86:75:de:84:57:46:da:94:92:68:3f:6e:fc:e0:0d:
74:81:d9:d6:ab:fc:25:0e:e3:d5:c1:48:cc:41:be:b0:0f:91:
1f:c3:63:a4:dd:7a:0e:93:14:a0:7b:c7:0d:46:d6:2a:e8:74:
f6:ee:26:f0:a3:01:32:20:40:52:18:ec:24:9a:0e:60:35:8b:
5f:42:f5:d4:bf:96:fe:87:22:68:2d:a2:51:b4:b7:0d:4b:c8:
4e:72:33:2c:20:f9:ac:23:97:42:4a:3f:0e:c2:7b:2b:2e:c8:
5d:96:d3:da:81:17:92:90:77:40:6d:6b:3a:f5:d7:30:df:e0:
13:5f:88:60:26:dd:ec:86:ca:d0:a4:01:cb:59:50:b5:9b:5c:
fb:fb:ab:54:7e:89:c7:4b:4d:95:a9:63:97:37:3e:b5:5c:eb:
ec:ab:1e:b2:06:e2:ac:cc:34:1f:04:00:1b:c7:ae:e0:c6:fd:
dd:ab:ee:3c:6f:19:15:9e:40:28:8f:44:85:74:22:24:9f:f3:
9a:da:42:14:19:73:cd:c7:b9:3f:c9:85:f4:39:3e:3d:5a:94:
96:81:e0:2c:e4:d3:a7:2a:d2:76:4f:45:00:74:81:af:ac:a2:
37:57:86:c4:29:80:3f:da:18:5b:f9:f7:94:a5:51:80:02:ad:
77:07:88:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJcvq8ERmAuR2Kr6CktclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYjZiZDY1ZmUyYTg2ZmQ0MmY5YzRmNTA0ZTFlZWQ1ODU3
MGY5M2QwHhcNMjUxMTExMDkwMTEwWhcNMjUxMTEyMDkwMTEwWjAzMTEwLwYDVQQD
EyhkNTk2ZGY2ZjE1ZDIwMWFjY2YwMzY4YWE0NTYyZDgxYjFmOWZlNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXr0UBmLjj75CjZOLku9VFNc8wA2
IymfndgA6LlJxCwHienpaJNmNZ1AKHPL8aXRpGsQkDHV48qsxgCjyIVxVMI8ZCIq
/Co1YCwrwpB8ScRo/KPjh/aX/Vu47I87oIdfErGhzXpr30Urw1pL/GLIyR2IErDZ
qZDlUVggjGRhQnE4rgcD8LrptAo476/CPJRB/Vcsa2aDHLgmhnrPYwLGKfxmuQ3G
OQ3QWdgdboOgltVhu3qXQfn6xTuuEsbbTURc+hgeDn0Jo8pyRHpsBRtwSfRFNOz+
5mB8ZGp8nvK0Fxdv8uQYZ3uPOuPZ2im1/HuBJczpmSHP3OxqnXRPqWyQJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWW328V0gGszwNoqkVi2Bsfn+WLMB8GA1UdIwQY
MBaAFIq2vWX+Kob9QvnE9QTh7tWFcPk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJhOVpmNHFodjFDLWNUMUJPSHUxWVZ3LVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80NWE5YzUtMmNjMS00ZjQ1LWJhODAt
YWQ1ODE4OWRlNzU0LzEvaXJhOVpmNHFodjFDLWNUMUJPSHUxWVZ3LVQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80NWE5YzUtMmNjMS00ZjQ1LWJhODAtYWQ1ODE4OWRlNzU0
LzEvaXJhOVpmNHFodjFDLWNUMUJPSHUxWVZ3LVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYkDhnXe
hFdG2pSSaD9u/OANdIHZ1qv8JQ7j1cFIzEG+sA+RH8NjpN16DpMUoHvHDUbWKuh0
9u4m8KMBMiBAUhjsJJoOYDWLX0L11L+W/ociaC2iUbS3DUvITnIzLCD5rCOXQko/
DsJ7Ky7IXZbT2oEXkpB3QG1rOvXXMN/gE1+IYCbd7IbK0KQBy1lQtZtc+/urVH6J
x0tNlaljlzc+tVzr7KsesgbirMw0HwQAG8eu4Mb93avuPG8ZFZ5AKI9EhXQiJJ/z
mtpCFBlzzce5P8mF9Dk+PVqUloHgLOTTpyrSdk9FAHSBr6yiN1eGxCmAP9oYW/n3
lKVRgAKtdweIqQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:55 2025 by rpki-client