Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: 0IbcC3ySQye6oeaaMWRBkwd69dWAgrgKRQDEc44BkgM=
Subject key identifier: AA:4D:9A:C1:9A:B4:E8:81:FE:D8:7F:7C:E1:24:3F:CC:0C:D9:0F:14
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 019A26677D7FBCB124F7231AA6B2E83CFB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 081A
Signing time: Mon 27 Oct 2025 16:01:47 +0000
Manifest this update: Mon 27 Oct 2025 16:01:47 +0000
Manifest next update: Tue 28 Oct 2025 16:01:47 +0000
Files and hashes: 1: XWaEMNo4oCmJKw7xuT_lUqU1a9o.roa (hash: vlh1Ps1w/BBZ8U+fD5oVlO0yHpfRUnw+NHa2xAJ40qE=)
2: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: epl4Y+b6uE/JvRcullkLfrOhW2qnjYUUhG1gzK6WPX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:7d:7f:bc:b1:24:f7:23:1a:a6:b2:e8:3c:fb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Oct 27 16:01:47 2025 GMT
Not After : Oct 28 16:01:47 2025 GMT
Subject: CN=aa4d9ac19ab4e881fed87f7ce1243fcc0cd90f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:68:2b:a9:c5:cf:dc:e5:bf:03:ed:c7:3f:
56:6e:fa:7d:1c:1c:b1:34:82:cb:0e:9c:d2:f8:17:
d7:be:c2:43:69:9b:a9:13:cc:90:30:30:e4:18:06:
85:4a:00:bc:72:df:36:51:91:9c:44:68:3c:64:9c:
5f:63:0b:f3:60:69:7c:39:6b:6a:b3:11:c1:23:97:
50:54:f5:c8:7b:09:79:9d:74:78:b2:c6:15:f7:89:
f3:bc:b6:e2:92:ab:28:df:fb:ce:f3:bb:c7:67:79:
17:9e:94:1b:08:fe:5a:ce:a9:e6:6f:5f:0d:48:40:
7f:af:17:c0:5b:a3:b3:4b:a7:02:f5:0a:3a:02:1b:
97:1d:20:42:d8:22:be:8a:58:c3:61:ae:ad:7e:39:
6a:d0:b5:35:9a:16:b7:8a:0b:68:a2:67:36:b4:3a:
d0:1e:cb:36:12:27:c3:3c:0f:59:86:b9:94:e1:10:
0a:13:76:cc:4d:69:3a:ce:5a:70:c9:d7:dc:37:0c:
89:ad:ad:da:da:c5:30:0a:87:d6:c1:47:45:ed:ec:
3d:fa:ae:14:eb:b7:aa:4e:8b:1e:96:74:e8:78:c0:
81:18:7a:32:8a:e1:8a:3f:20:f3:d5:79:f0:86:ef:
08:a5:4b:af:eb:4c:e2:10:76:8e:8d:11:fc:6b:15:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4D:9A:C1:9A:B4:E8:81:FE:D8:7F:7C:E1:24:3F:CC:0C:D9:0F:14
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b6:18:f0:73:5b:a6:23:5c:71:32:70:cd:95:f1:50:98:d2:
fc:6a:64:c0:72:ac:ef:2a:69:a8:72:4c:e7:4e:c2:84:ed:55:
5e:30:f5:39:66:fb:26:7f:ee:76:be:c1:19:7c:b5:7d:1c:c0:
1f:b5:6c:df:d0:76:2c:47:4a:e4:57:50:9f:43:2c:a7:e4:c2:
2d:84:bc:80:14:69:60:a5:12:a2:da:9d:73:90:86:9c:8d:86:
7f:67:1a:89:08:1b:8d:8d:3d:5f:49:bc:18:64:79:ee:18:aa:
67:22:be:3f:7a:fd:e2:42:9d:d5:ca:ec:d1:ca:dc:e6:d0:8a:
42:59:dc:60:ea:b0:8e:10:97:12:eb:b7:a6:eb:13:41:ab:89:
22:3f:99:04:e7:51:4b:3f:bb:70:c0:32:03:77:35:76:53:37:
ef:59:32:61:50:6c:dc:eb:1b:a2:8b:11:9d:54:f2:d3:cd:02:
da:eb:f8:d3:6e:37:6b:73:66:20:54:fc:57:af:60:13:b5:68:
d6:57:0a:33:5e:cc:26:d1:93:ee:e9:3f:97:b2:73:a0:68:df:
3e:97:c2:09:0f:ad:88:4a:72:4c:fa:5f:1f:47:5d:f8:2f:f8:
11:e7:2c:f2:c8:81:9d:63:22:33:6b:5e:7c:bf:9a:d8:1b:a1:
5d:a9:52:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomZ31/vLEk9yMaprLoPPt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2ZhMzczNzFkN2Q0NTkzYmEyOTBlZjQ1NjY5ZWEwZGUy
OTM3ODIwHhcNMjUxMDI3MTYwMTQ3WhcNMjUxMDI4MTYwMTQ3WjAzMTEwLwYDVQQD
EyhhYTRkOWFjMTlhYjRlODgxZmVkODdmN2NlMTI0M2ZjYzBjZDkwZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl89oK6nFz9zlvwPtxz9Wbvp9HByx
NILLDpzS+BfXvsJDaZupE8yQMDDkGAaFSgC8ct82UZGcRGg8ZJxfYwvzYGl8OWtq
sxHBI5dQVPXIewl5nXR4ssYV94nzvLbikqso3/vO87vHZ3kXnpQbCP5azqnmb18N
SEB/rxfAW6OzS6cC9Qo6AhuXHSBC2CK+iljDYa6tfjlq0LU1mha3igtoomc2tDrQ
Hss2EifDPA9ZhrmU4RAKE3bMTWk6zlpwydfcNwyJra3a2sUwCofWwUdF7ew9+q4U
67eqToselnToeMCBGHoyiuGKPyDz1Xnwhu8IpUuv60ziEHaOjRH8axXbIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpNmsGatOiB/th/fOEkP8wM2Q8UMB8GA1UdIwQY
MBaAFIh/o3Nx19RZO6KQ70VmnqDeKTeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDct
YTFlMjRhYWY2MTBmLzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDctYTFlMjRhYWY2MTBm
LzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarYY8HNb
piNccTJwzZXxUJjS/GpkwHKs7yppqHJM507ChO1VXjD1OWb7Jn/udr7BGXy1fRzA
H7Vs39B2LEdK5FdQn0Msp+TCLYS8gBRpYKUSotqdc5CGnI2Gf2caiQgbjY09X0m8
GGR57hiqZyK+P3r94kKd1crs0crc5tCKQlncYOqwjhCXEuu3pusTQauJIj+ZBOdR
Sz+7cMAyA3c1dlM371kyYVBs3OsboosRnVTy080C2uv40243a3NmIFT8V69gE7Vo
1lcKM17MJtGT7uk/l7JzoGjfPpfCCQ+tiEpyTPpfH0dd+C/4Eecs8siBnWMiM2te
fL+a2BuhXalSAQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 18:07:47 2025 by rpki-client