Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
File: ioludoVA84eh3U_52qS4W6SKkG8.mft (raw, json)
Hash identifier: AKk/OaRZb7PEUtuk79Yp/PJlw3HcmCmuD0Tj+epAlyg=
Subject key identifier: AB:76:AE:FB:9D:56:51:9B:87:00:2E:E7:08:A1:C4:94:65:F4:13:2B
Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Certificate issuer: /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Certificate serial: 019953E82F1193CA4C4A957F6FA5E888C703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
Manifest number: 0FCE
Signing time: Tue 16 Sep 2025 19:02:29 +0000
Manifest this update: Tue 16 Sep 2025 19:02:29 +0000
Manifest next update: Wed 17 Sep 2025 19:02:29 +0000
Files and hashes: 1: hkbUVfjNOPVhJfq1uQFH-hPB5mE.roa (hash: tqCspEzEqiN+432BqUgHfq1nCv1kB3CNAbRtD1yo228=)
2: ioludoVA84eh3U_52qS4W6SKkG8.crl (hash: udvWt00eRtlkaWsIGGwmHfeizbk3OTykms5gKyHwnME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:e8:2f:11:93:ca:4c:4a:95:7f:6f:a5:e8:88:c7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Validity
Not Before: Sep 16 19:02:29 2025 GMT
Not After : Sep 17 19:02:29 2025 GMT
Subject: CN=ab76aefb9d56519b87002ee708a1c49465f4132b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:36:1e:d0:61:ee:dc:d2:06:50:af:35:da:
83:73:b9:1b:61:86:7f:b0:b3:bd:46:cd:3b:f3:05:
43:fc:17:c8:84:d2:96:4e:03:47:37:81:18:5a:c0:
a9:e0:2a:17:11:cb:38:91:06:11:4a:80:0d:2a:b5:
ea:4f:f5:d7:3e:99:54:b3:22:d4:bb:7b:e8:ff:a2:
c3:7f:bc:13:83:c6:3f:ca:b1:9e:1b:83:5e:a2:b4:
26:bb:7f:96:85:ec:b2:45:07:3e:3e:cc:ab:52:e3:
a0:db:1c:79:ff:b3:50:9e:5e:a4:11:e3:5c:df:90:
d1:e8:ec:50:fe:2a:c5:7d:75:45:3c:02:fa:ea:c8:
44:a3:67:0c:78:ce:c4:7a:0b:a2:06:ea:40:62:47:
1a:da:11:fd:c9:97:33:f8:1c:43:ca:5d:e7:70:99:
b9:71:1c:5c:da:c4:d0:c6:c8:b7:b3:e6:ec:d7:04:
58:6d:9c:98:8d:e7:16:c9:99:f5:2c:69:93:33:97:
b4:c1:ef:1e:75:13:87:c0:00:8f:8e:cb:6a:e8:4f:
f8:ed:7c:64:40:c5:15:66:b1:01:70:b0:c3:17:39:
48:b5:b8:c6:54:cd:de:61:e2:67:bf:5b:26:30:4b:
d6:55:2e:19:2e:4d:d6:e8:a1:4f:e9:2f:25:1b:7a:
95:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:76:AE:FB:9D:56:51:9B:87:00:2E:E7:08:A1:C4:94:65:F4:13:2B
X509v3 Authority Key Identifier:
keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0d:2d:d4:27:73:70:04:91:39:e9:04:c7:5e:4f:61:92:4f:
96:5a:ca:43:29:ff:14:ea:ba:b8:67:b9:43:3e:e3:99:a8:13:
fe:0a:cd:2b:92:d5:68:d7:d0:90:a4:bb:1a:1e:24:c2:dc:a7:
c0:f2:af:25:6f:d2:b4:d2:e4:c9:83:f7:e1:4f:d3:0d:5b:13:
db:0c:39:b6:9b:9e:e8:86:d2:61:c7:58:05:90:47:c7:2f:9b:
6f:b2:26:9b:19:22:e4:ac:8f:4d:3d:8f:c6:6f:b0:e9:06:9a:
9f:a3:2f:0c:0e:9d:3b:3b:e8:5e:c3:45:e6:29:93:ed:8d:a2:
44:6e:75:5b:fa:c2:89:6c:3c:c2:7a:e2:14:87:80:e9:47:ee:
2c:56:b5:9f:15:e2:65:2a:37:95:58:3c:67:65:e6:38:8f:b3:
4b:51:1d:0a:c1:9b:67:be:24:6a:05:d8:8a:f1:32:a8:43:44:
97:9e:e6:05:57:25:94:55:7f:31:f3:1f:6b:0e:1e:aa:7a:f7:
b7:52:8d:ae:18:ae:73:f5:1f:cf:2c:2a:e0:23:6b:ab:78:4c:
de:e1:1b:e6:09:1d:66:b4:df:5e:12:c7:6b:5e:0f:f1:ae:9d:
f1:d2:50:76:83:2f:05:01:c8:55:56:fe:d8:2c:f4:1b:1c:5d:
0b:14:20:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlT6C8Rk8pMSpV/b6XoiMcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhODk2ZTc2ODU0MGYzODdhMWRkNGZmOWRhYTRiODViYTQ4
YTkwNmYwHhcNMjUwOTE2MTkwMjI5WhcNMjUwOTE3MTkwMjI5WjAzMTEwLwYDVQQD
EyhhYjc2YWVmYjlkNTY1MTliODcwMDJlZTcwOGExYzQ5NDY1ZjQxMzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6w2HtBh7tzSBlCvNdqDc7kbYYZ/
sLO9Rs078wVD/BfIhNKWTgNHN4EYWsCp4CoXEcs4kQYRSoANKrXqT/XXPplUsyLU
u3vo/6LDf7wTg8Y/yrGeG4NeorQmu3+WheyyRQc+PsyrUuOg2xx5/7NQnl6kEeNc
35DR6OxQ/irFfXVFPAL66shEo2cMeM7EeguiBupAYkca2hH9yZcz+BxDyl3ncJm5
cRxc2sTQxsi3s+bs1wRYbZyYjecWyZn1LGmTM5e0we8edROHwACPjstq6E/47Xxk
QMUVZrEBcLDDFzlItbjGVM3eYeJnv1smMEvWVS4ZLk3W6KFP6S8lG3qVUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKt2rvudVlGbhwAu5wihxJRl9BMrMB8GA1UdIwQY
MBaAFIqJbnaFQPOHod1P+dqkuFukipBvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW9sdWRvVkE4NGVoM1VfNTJxUzRXNlNLa0c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNjFjYjYtOGYxNi00Mzk3LTk2ZmEt
OGY2OTk0NTY2ZjY3LzEvaW9sdWRvVkE4NGVoM1VfNTJxUzRXNlNLa0c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lNjFjYjYtOGYxNi00Mzk3LTk2ZmEtOGY2OTk0NTY2ZjY3
LzEvaW9sdWRvVkE4NGVoM1VfNTJxUzRXNlNLa0c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQ0t1Cdz
cASROekEx15PYZJPllrKQyn/FOq6uGe5Qz7jmagT/grNK5LVaNfQkKS7Gh4kwtyn
wPKvJW/StNLkyYP34U/TDVsT2ww5tpue6IbSYcdYBZBHxy+bb7Immxki5KyPTT2P
xm+w6Qaan6MvDA6dOzvoXsNF5imT7Y2iRG51W/rCiWw8wnriFIeA6UfuLFa1nxXi
ZSo3lVg8Z2XmOI+zS1EdCsGbZ74kagXYivEyqENEl57mBVcllFV/MfMfaw4eqnr3
t1KNrhiuc/Ufzywq4CNrq3hM3uEb5gkdZrTfXhLHa14P8a6d8dJQdoMvBQHIVVb+
2Cz0GxxdCxQgMA==
-----END CERTIFICATE-----
Generated at Tue Sep 16 20:33:54 2025 by rpki-client