Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
File: IAxw024BOwfk5tjsPqTuQTtKqpg.mft (raw, json)
Hash identifier: 5pgNCBqWpdKOm7wSxZqxt57ix4qkCZM8G8WKMDQpVME=
Subject key identifier: 72:4E:96:B2:0F:DD:96:17:7B:9C:BA:DC:D8:B1:2A:FC:D9:45:A4:24
Authority key identifier: 20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
Certificate issuer: /CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Certificate serial: 019A725C5BB583D347508C4B610C540B01FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:00:46 +0000
Manifest this update: Tue 11 Nov 2025 10:00:46 +0000
Manifest next update: Wed 12 Nov 2025 10:00:46 +0000
Files and hashes: 1: IAxw024BOwfk5tjsPqTuQTtKqpg.crl (hash: XSSHwpWJJLVjGSiYprPK8C0PBw10JiYNJ/7KG1+prjg=)
2: xInhnEQ1Wnjyaeg0NstEg1xaXmc.roa (hash: v0sQzu+7Kta5k4gVJi492esLH7WHwA4RWeUkfyAHe34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5b:b5:83:d3:47:50:8c:4b:61:0c:54:0b:01:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Validity
Not Before: Nov 11 10:00:46 2025 GMT
Not After : Nov 12 10:00:46 2025 GMT
Subject: CN=724e96b20fdd96177b9cbadcd8b12afcd945a424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:de:73:3c:56:e9:ff:07:5a:5f:e8:30:0e:f1:
ee:1b:35:33:87:1a:b6:96:77:80:e7:53:ba:28:e1:
7f:6a:c0:ef:52:b6:4c:06:09:c9:46:e1:24:7d:c8:
11:e8:56:de:93:b4:ef:7f:35:4f:c7:5a:3d:8c:c6:
e5:24:6a:6d:1a:3e:25:93:0b:28:e3:87:08:32:44:
41:46:b7:4f:25:8b:9a:85:af:3e:2d:49:e1:c5:f2:
33:dc:0b:1c:08:ff:cc:7f:84:b2:3e:79:07:ba:0d:
4d:8c:2e:0e:54:5e:23:85:22:80:9a:f6:0c:37:ac:
72:a3:fc:d9:cc:11:a5:6b:c0:cd:f3:19:4a:11:28:
bd:cd:18:49:04:d4:89:58:9b:17:25:b4:c9:ce:10:
56:b5:2d:94:b0:15:05:33:a4:ea:08:18:b4:85:1f:
02:16:01:ab:ce:23:c1:9a:50:fd:57:3e:ff:51:66:
85:cb:28:97:33:a2:02:6d:85:e9:d6:e1:57:4c:10:
32:08:e4:d5:d8:3d:cc:1a:93:7a:97:c7:63:b1:88:
d5:ea:d9:3b:29:74:6d:fa:1c:ac:f5:86:b7:91:eb:
ec:dc:76:4c:bb:10:76:39:fd:29:a4:86:08:be:5e:
c6:0e:e2:c7:11:35:92:b3:7f:35:a1:98:0e:55:81:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4E:96:B2:0F:DD:96:17:7B:9C:BA:DC:D8:B1:2A:FC:D9:45:A4:24
X509v3 Authority Key Identifier:
keyid:20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:dc:be:cf:50:db:8b:72:80:2d:a7:26:27:f2:a2:ef:07:27:
0e:cf:09:8e:b1:c8:fd:21:a8:63:19:3f:0e:c4:12:64:54:59:
65:f8:3c:d2:a5:ec:b4:80:11:27:9e:09:69:d3:e4:b5:67:17:
4e:80:a5:44:df:89:10:80:7b:0d:7f:a3:5e:15:cd:b5:11:b5:
d6:ad:68:1d:df:23:99:15:03:bb:3b:6b:57:d9:8d:e5:8d:83:
85:59:7a:94:47:d1:9e:66:9a:78:b8:93:e8:9a:10:5e:cc:30:
9a:21:e3:32:0a:83:9d:40:f5:b5:fa:4e:c1:02:85:3b:2b:c9:
1a:ef:c3:0a:80:dc:05:44:27:34:d7:f8:7e:28:5d:00:ff:ad:
1d:ab:3b:64:fa:a7:53:ad:93:53:13:c4:ed:02:c4:03:9b:e4:
bf:bf:58:a2:00:95:34:9e:48:30:27:f4:d9:0a:82:62:44:8c:
b7:eb:4c:6c:16:f6:35:f3:d0:da:b7:8e:c1:f2:94:57:0f:a9:
6e:ae:ba:8f:78:d9:da:51:5e:bc:26:87:24:97:cf:37:18:45:
b4:a1:fd:3a:38:7b:d0:5a:f5:db:f8:67:d5:aa:71:45:0d:17:
aa:c8:07:49:3f:65:d5:89:3a:6d:0b:91:30:b0:a4:2c:92:bb:
6b:8a:f6:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXFu1g9NHUIxLYQxUCwH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMGM3MGQzNmUwMTNiMDdlNGU2ZDhlYzNlYTRlZTQxM2I0
YWFhOTgwHhcNMjUxMTExMTAwMDQ2WhcNMjUxMTEyMTAwMDQ2WjAzMTEwLwYDVQQD
Eyg3MjRlOTZiMjBmZGQ5NjE3N2I5Y2JhZGNkOGIxMmFmY2Q5NDVhNDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd5zPFbp/wdaX+gwDvHuGzUzhxq2
lneA51O6KOF/asDvUrZMBgnJRuEkfcgR6Fbek7TvfzVPx1o9jMblJGptGj4lkwso
44cIMkRBRrdPJYuaha8+LUnhxfIz3AscCP/Mf4SyPnkHug1NjC4OVF4jhSKAmvYM
N6xyo/zZzBGla8DN8xlKESi9zRhJBNSJWJsXJbTJzhBWtS2UsBUFM6TqCBi0hR8C
FgGrziPBmlD9Vz7/UWaFyyiXM6ICbYXp1uFXTBAyCOTV2D3MGpN6l8djsYjV6tk7
KXRt+hys9Ya3kevs3HZMuxB2Of0ppIYIvl7GDuLHETWSs381oZgOVYFStwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJOlrIP3ZYXe5y63NixKvzZRaQkMB8GA1UdIwQY
MBaAFCAMcNNuATsH5ObY7D6k7kE7SqqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUF4dzAyNEJPd2ZrNXRqc1BxVHVRVHRLcXBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kNWVlMGQtNDc1Zi00MWQ3LTljMjUt
MTU4MDNmZmIxNzQ2LzEvSUF4dzAyNEJPd2ZrNXRqc1BxVHVRVHRLcXBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9kNWVlMGQtNDc1Zi00MWQ3LTljMjUtMTU4MDNmZmIxNzQ2
LzEvSUF4dzAyNEJPd2ZrNXRqc1BxVHVRVHRLcXBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJty+z1Db
i3KALacmJ/Ki7wcnDs8JjrHI/SGoYxk/DsQSZFRZZfg80qXstIARJ54JadPktWcX
ToClRN+JEIB7DX+jXhXNtRG11q1oHd8jmRUDuztrV9mN5Y2DhVl6lEfRnmaaeLiT
6JoQXswwmiHjMgqDnUD1tfpOwQKFOyvJGu/DCoDcBUQnNNf4fihdAP+tHas7ZPqn
U62TUxPE7QLEA5vkv79YogCVNJ5IMCf02QqCYkSMt+tMbBb2NfPQ2reOwfKUVw+p
bq66j3jZ2lFevCaHJJfPNxhFtKH9Ojh70Fr12/hn1apxRQ0XqsgHST9l1Yk6bQuR
MLCkLJK7a4r23g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:57 2025 by rpki-client