Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: QTBtTw26jAU7vpQwX5afanBs/nVFgyjvFGHFcVsNgQI=
Subject key identifier: 2B:FD:15:C3:CE:ED:62:A1:0F:B5:35:05:88:F2:7D:1C:82:78:F5:62
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 019A1C50C4F91B28163A514514EC27106DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 0EA2
Signing time: Sat 25 Oct 2025 17:00:46 +0000
Manifest this update: Sat 25 Oct 2025 17:00:46 +0000
Manifest next update: Sun 26 Oct 2025 17:00:46 +0000
Files and hashes: 1: RZ_4-lCargPhDnsOSk7--hEov_g.roa (hash: gD59YlfjEOMaA7jKCDG57LDieQBZUtUGKFnW719fGG8=)
2: abKcOp3qmm4ybUnw1tBA-G8yOrc.roa (hash: /klckxmc/giyHaniwWbEf+LlQIwRtUPvFDW14KDXips=)
3: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: xcxkMhQfjmv6CALJ+VktYl0Y5tuMhD8Je3BFqIbEl7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:50:c4:f9:1b:28:16:3a:51:45:14:ec:27:10:6d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Oct 25 17:00:46 2025 GMT
Not After : Oct 26 17:00:46 2025 GMT
Subject: CN=2bfd15c3ceed62a10fb5350588f27d1c8278f562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ae:80:e1:5f:f3:c4:94:d3:3d:b0:dd:16:71:
47:90:30:bd:92:d7:d6:74:c8:34:f6:19:aa:65:1d:
d7:50:77:96:8d:78:57:02:7d:16:22:ba:7c:2b:58:
5f:75:c7:1f:95:a1:ff:59:75:78:49:4b:66:6c:83:
b7:8c:a4:2c:4f:8f:0c:ed:af:de:7e:20:32:33:a5:
a1:8c:5a:d3:e1:da:79:ef:40:4e:42:87:8c:e6:30:
af:c4:94:67:ee:60:50:f0:87:ad:89:0d:a5:a1:00:
53:c2:39:b6:dc:7f:e0:65:65:d9:44:54:bc:9f:47:
2f:bf:7d:94:21:dc:62:9b:a5:e0:d6:35:8e:11:ab:
5a:5b:d1:88:40:49:9b:45:39:f5:6f:79:9e:06:0c:
3a:44:c3:b3:10:7d:13:15:c3:27:85:a2:2a:48:78:
7d:68:07:ff:a7:12:39:e3:7b:9e:fe:b6:29:62:4b:
1b:39:8b:70:f2:74:45:89:d1:c5:93:3f:1f:4a:5d:
4f:28:37:10:91:ed:a0:74:43:d0:dc:63:b7:ea:88:
11:89:ea:07:4b:d9:10:66:c3:ac:72:ff:3e:85:4d:
bb:b5:7e:5a:ca:10:b7:23:f5:94:d1:2e:c5:42:63:
05:56:fa:5e:0d:6c:fb:76:75:f4:8b:3c:fd:32:a5:
47:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FD:15:C3:CE:ED:62:A1:0F:B5:35:05:88:F2:7D:1C:82:78:F5:62
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f7:b7:c4:2a:ee:f4:d6:37:a8:c3:15:50:a4:98:51:07:b6:
a5:bc:a4:ed:d5:12:7d:b9:5c:e8:5a:a1:53:de:de:86:5b:5e:
c3:17:7b:4f:92:1f:9b:69:5b:1b:2a:0e:e2:2d:97:3e:c4:3c:
ab:06:4c:32:a6:42:ea:57:bc:b2:b4:a0:09:6c:a1:fe:fe:b1:
a3:73:6c:3d:37:95:6b:1d:ce:99:1f:7d:20:0f:8b:9a:d9:7b:
17:57:7f:a4:a8:42:87:b5:3e:53:68:be:82:ea:d6:60:5a:1e:
c4:10:95:6c:71:06:99:fd:9a:df:de:d9:42:b9:31:5b:98:ef:
12:1c:f3:8a:8f:13:f3:26:47:da:1d:36:9b:0c:11:9d:b8:35:
0d:4d:0b:56:a5:b7:5f:88:f2:d8:d9:d2:0d:dd:49:84:09:5c:
4c:79:97:1b:c6:b5:97:cb:5a:6e:71:f7:55:a9:b0:d4:61:86:
38:c5:97:ff:41:2e:9f:9a:b5:15:d9:1e:a2:f6:33:f2:fa:26:
df:83:8b:6e:08:7f:9d:54:2b:0f:d2:7c:f0:96:21:9f:f5:82:
c9:54:72:e4:ab:1f:4f:f8:04:69:91:17:d4:e4:10:b9:ff:68:
f2:e2:e0:2a:fb:4d:76:d9:c8:c7:b8:f7:ab:12:ac:8f:b5:57:
e9:fc:84:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocUMT5GygWOlFFFOwnEG27MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2E1ZjA0ODZiMThhMjQ0OGYyMzU4YTI3NDZjMWFiZDlm
YjJlNWUwHhcNMjUxMDI1MTcwMDQ2WhcNMjUxMDI2MTcwMDQ2WjAzMTEwLwYDVQQD
EygyYmZkMTVjM2NlZWQ2MmExMGZiNTM1MDU4OGYyN2QxYzgyNzhmNTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K6A4V/zxJTTPbDdFnFHkDC9ktfW
dMg09hmqZR3XUHeWjXhXAn0WIrp8K1hfdccflaH/WXV4SUtmbIO3jKQsT48M7a/e
fiAyM6WhjFrT4dp570BOQoeM5jCvxJRn7mBQ8IetiQ2loQBTwjm23H/gZWXZRFS8
n0cvv32UIdxim6Xg1jWOEataW9GIQEmbRTn1b3meBgw6RMOzEH0TFcMnhaIqSHh9
aAf/pxI543ue/rYpYksbOYtw8nRFidHFkz8fSl1PKDcQke2gdEPQ3GO36ogRieoH
S9kQZsOscv8+hU27tX5ayhC3I/WU0S7FQmMFVvpeDWz7dnX0izz9MqVHwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCv9FcPO7WKhD7U1BYjyfRyCePViMB8GA1UdIwQY
MBaAFIh6XwSGsYokSPI1iidGwavZ+y5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjct
MzNhYmM1M2MwZTc5LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjctMzNhYmM1M2MwZTc5
LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPe3xCru
9NY3qMMVUKSYUQe2pbyk7dUSfblc6FqhU97ehltewxd7T5Ifm2lbGyoO4i2XPsQ8
qwZMMqZC6le8srSgCWyh/v6xo3NsPTeVax3OmR99IA+Lmtl7F1d/pKhCh7U+U2i+
gurWYFoexBCVbHEGmf2a397ZQrkxW5jvEhzzio8T8yZH2h02mwwRnbg1DU0LVqW3
X4jy2NnSDd1JhAlcTHmXG8a1l8tabnH3Vamw1GGGOMWX/0Eun5q1FdkeovYz8vom
34OLbgh/nVQrD9J88JYhn/WCyVRy5KsfT/gEaZEX1OQQuf9o8uLgKvtNdtnIx7j3
qxKsj7VX6fyElw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 00:04:40 2025 by rpki-client