
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json)
Hash identifier: 9dj7kW8Q+NWCMuC+CX/Tf4Slm9ailoL0KdpbeHmnjuE=
Subject key identifier: C4:31:B8:20:1E:78:81:D6:EE:29:0F:DE:04:7B:9A:F1:5E:CC:BA:21
Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10
Certificate serial: 019922C3ABDF99782327900CDF9184DE6EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
Manifest number: 5B
Signing time: Sun 07 Sep 2025 06:01:12 +0000
Manifest this update: Sun 07 Sep 2025 06:01:12 +0000
Manifest next update: Mon 08 Sep 2025 06:01:12 +0000
Files and hashes: 1: 6q7TVMacTBaYR4P4ix3oetf6VRE.roa (hash: uLRq0asuqIHTiwS92wqc71gnPUUH1B7QJ0+2fDVufHI=)
2: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: vgWIzdRcMW8nbetrelc9Ehr90E6L9txPPi6ABBwf0sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:ab:df:99:78:23:27:90:0c:df:91:84:de:6e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10
Validity
Not Before: Sep 7 06:01:12 2025 GMT
Not After : Sep 8 06:01:12 2025 GMT
Subject: CN=c431b8201e7881d6ee290fde047b9af15eccba21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:9c:de:ce:e2:27:22:73:55:ea:98:a4:80:
cf:24:9c:08:2b:49:2f:da:07:8f:16:86:14:e1:7c:
c6:03:77:74:c9:b1:c5:35:fd:1d:72:63:63:a4:cc:
c5:f4:77:92:b8:d6:7f:75:2c:6a:10:ba:8a:53:1f:
5f:74:fd:25:c1:ff:5b:61:95:52:37:7d:ce:6d:08:
a4:bd:96:0a:74:a8:dc:07:b6:b9:a0:2f:08:7e:1f:
0c:0b:ed:95:1c:78:08:39:77:7e:6d:f3:83:17:c2:
01:c9:85:d6:bf:0e:c8:98:e4:13:84:ff:dd:14:c0:
fa:2f:a9:15:23:59:7c:78:89:b5:4f:2c:c4:70:42:
0e:20:e6:e5:da:a4:fe:c6:0c:72:54:38:eb:1b:47:
fb:c4:de:d1:d2:f4:c2:62:a8:ed:99:16:20:0c:7f:
3b:cc:96:00:53:98:37:90:b9:c0:2f:a5:67:93:c3:
27:df:1a:ac:3e:8a:bb:70:97:94:56:7e:80:3e:f9:
3d:c8:17:cc:35:df:f8:ca:63:77:00:9d:8a:36:b9:
41:bf:16:6b:92:c8:45:09:e8:72:36:32:6c:d7:0b:
c5:96:ba:61:c4:2f:6a:0d:30:a2:ed:ea:c2:81:1a:
8d:95:32:91:f3:2f:e4:6c:04:d7:93:b4:ac:f2:75:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:31:B8:20:1E:78:81:D6:EE:29:0F:DE:04:7B:9A:F1:5E:CC:BA:21
X509v3 Authority Key Identifier:
keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7c:3d:58:66:cd:38:63:19:63:b2:14:6a:dd:ea:a2:96:ca:
f1:bd:95:9c:96:c8:23:84:5f:6e:25:30:3c:92:20:1d:ef:a1:
8c:3c:cd:d3:3d:f5:1a:3f:92:e8:ad:52:55:35:2c:c9:f2:ab:
3c:18:c3:ee:8f:b6:db:7b:4f:cc:57:8e:13:fb:05:c5:7f:30:
78:85:a4:f8:a1:fa:f3:e7:a8:50:ad:91:c9:cc:a0:63:17:8b:
fc:03:69:cf:42:ea:29:ea:0d:9b:67:e1:ad:c0:ea:b4:3d:77:
ce:68:3f:a8:6d:bf:5a:0a:6c:ba:fe:b3:76:f8:de:bf:8b:76:
62:ab:fc:d2:cc:be:ee:93:78:9f:7c:dd:88:09:6d:8b:c0:19:
40:7b:c2:0d:35:da:2a:9c:04:a3:b9:09:78:7b:63:0e:4b:0b:
dc:5f:61:ec:d8:b8:96:48:6f:60:60:ca:df:85:95:e0:e0:df:
aa:96:b2:d4:31:7a:4e:38:e6:3c:24:c5:fc:db:b7:9c:9a:8d:
30:25:a7:2c:d4:78:b2:3f:58:31:cf:a6:9d:12:20:93:c9:65:
d3:c3:3a:6e:38:70:97:98:78:fe:b4:63:3e:49:cb:0b:bc:a4:
74:09:67:d6:ad:e1:50:08:7c:a4:00:6f:f0:cd:c2:b2:f7:7e:
4e:0d:2f:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw6vfmXgjJ5AM35GE3m6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOWZhZjkzNTI0YmI4MDc3NGZmY2U5MzQxZjQ5NWE4ZmIz
MThmMTAwHhcNMjUwOTA3MDYwMTEyWhcNMjUwOTA4MDYwMTEyWjAzMTEwLwYDVQQD
EyhjNDMxYjgyMDFlNzg4MWQ2ZWUyOTBmZGUwNDdiOWFmMTVlY2NiYTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllGc3s7iJyJzVeqYpIDPJJwIK0kv
2gePFoYU4XzGA3d0ybHFNf0dcmNjpMzF9HeSuNZ/dSxqELqKUx9fdP0lwf9bYZVS
N33ObQikvZYKdKjcB7a5oC8Ifh8MC+2VHHgIOXd+bfODF8IByYXWvw7ImOQThP/d
FMD6L6kVI1l8eIm1TyzEcEIOIObl2qT+xgxyVDjrG0f7xN7R0vTCYqjtmRYgDH87
zJYAU5g3kLnAL6Vnk8Mn3xqsPoq7cJeUVn6APvk9yBfMNd/4ymN3AJ2KNrlBvxZr
kshFCehyNjJs1wvFlrphxC9qDTCi7erCgRqNlTKR8y/kbATXk7Ss8nU1dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQxuCAeeIHW7ikP3gR7mvFezLohMB8GA1UdIwQY
MBaAFCCfr5NSS7gHdP/Ok0H0laj7MY8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS81YTJjYmQtM2IyNi00NTg2LThhNmUt
ZDE2NGRkZTUzNTFmLzEvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS81YTJjYmQtM2IyNi00NTg2LThhNmUtZDE2NGRkZTUzNTFm
LzEvSUotdmsxSkx1QWQwXzg2VFFmU1ZxUHN4anhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXw9WGbN
OGMZY7IUat3qopbK8b2VnJbII4RfbiUwPJIgHe+hjDzN0z31Gj+S6K1SVTUsyfKr
PBjD7o+223tPzFeOE/sFxX8weIWk+KH68+eoUK2RycygYxeL/ANpz0LqKeoNm2fh
rcDqtD13zmg/qG2/Wgpsuv6zdvjev4t2Yqv80sy+7pN4n3zdiAlti8AZQHvCDTXa
KpwEo7kJeHtjDksL3F9h7Ni4lkhvYGDK34WV4ODfqpay1DF6TjjmPCTF/Nu3nJqN
MCWnLNR4sj9YMc+mnRIgk8ll08M6bjhwl5h4/rRjPknLC7ykdAln1q3hUAh8pABv
8M3Csvd+Tg0v4A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:21 2025 by rpki-client