Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
File: iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json)
Hash identifier: iPh+/r4IVeotN32SRmlzEyUcCeUJsu1ekMDxTyZsm4M=
Subject key identifier: 76:AF:EB:6F:FF:06:BB:16:D6:32:AE:70:46:18:60:A5:26:5C:DD:5D
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial: 019A71130F4AE5DE5EDDAB5B367294023918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
Manifest number: 59
Signing time: Tue 11 Nov 2025 04:01:05 +0000
Manifest this update: Tue 11 Nov 2025 04:01:05 +0000
Manifest next update: Wed 12 Nov 2025 04:01:05 +0000
Files and hashes: 1: 0i9rX2feVpxn00o6Ok1LCwfKG9s.roa (hash: CXVbkTnTW3iOhYJS4A/hhGnO0DbUsClXOzGNTAyAP1Q=)
2: JFPB3uodgu0Gtl2wY044BZR5QnM.roa (hash: BoazJepaaj+nQ3+vbpvJADkcm/ka8XF9GvGPFx6HQMM=)
3: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: wG2nYvds531RAvbO5uZlPuyHbjjYz8D8uc2Vr7uCr4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:0f:4a:e5:de:5e:dd:ab:5b:36:72:94:02:39:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Validity
Not Before: Nov 11 04:01:05 2025 GMT
Not After : Nov 12 04:01:05 2025 GMT
Subject: CN=76afeb6fff06bb16d632ae70461860a5265cdd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:38:f0:be:94:7b:38:91:72:09:b7:d0:9f:bb:
3d:b3:e8:f6:26:6d:75:32:07:e0:53:73:bc:5b:6c:
99:b2:6a:23:73:c6:35:29:bd:fb:4f:aa:26:ed:37:
9c:fb:31:ac:8a:75:98:91:ae:5c:71:2f:53:b0:40:
d9:02:38:e3:3a:c0:26:af:0c:72:99:af:18:dc:8c:
6f:64:7a:62:40:34:35:5c:cb:0e:00:10:e2:8e:97:
9d:49:7d:2d:b2:30:7f:ca:18:fb:e4:be:24:0e:83:
c7:95:90:c5:78:6b:c9:8a:5d:e9:06:7b:1f:86:8d:
3c:1b:3f:7b:ba:64:2f:37:2b:d9:7a:28:a0:25:81:
7f:8a:75:84:bd:7e:b0:6a:6f:4c:f6:1d:5c:75:8a:
90:c4:0f:8d:84:0a:c5:97:df:ad:33:38:15:b7:27:
71:d1:86:0c:f2:d2:b8:c0:dd:71:9c:a0:b9:e5:04:
b1:1d:64:86:10:34:fa:f5:c1:11:a2:ac:d1:42:af:
d6:88:3c:73:9d:e4:f7:db:82:9b:c8:22:31:59:1e:
9f:6a:2f:e4:4a:51:45:79:d1:75:d3:46:53:82:08:
73:73:b7:fa:fe:04:17:0c:e7:c1:e5:e2:ed:88:ff:
26:48:0b:03:11:ae:8a:e7:7a:aa:91:3c:c3:05:15:
7e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AF:EB:6F:FF:06:BB:16:D6:32:AE:70:46:18:60:A5:26:5C:DD:5D
X509v3 Authority Key Identifier:
keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:86:2e:ee:dd:78:3f:e4:49:4c:27:b8:d0:0e:c9:35:b0:64:
35:f1:28:9f:3f:6a:e9:03:b6:71:5d:c6:f4:6b:e1:9d:65:39:
c8:33:62:61:7d:17:0d:bc:3e:2c:61:fe:0d:d4:e8:fb:58:4e:
78:88:e4:60:27:11:20:e4:93:45:98:b3:fd:d2:cd:4d:36:b9:
2d:59:5c:98:b4:56:e3:34:3b:82:c7:6c:f7:7e:59:bf:70:84:
52:08:0c:c9:84:38:39:e2:a7:70:93:76:ad:48:28:7c:f2:b4:
2b:dd:af:26:a6:d6:cb:53:b7:00:2e:93:50:de:ed:14:f4:e9:
1d:ec:b8:21:8a:87:94:7f:02:bf:ad:f3:b0:64:b6:ea:e7:c2:
c3:21:c3:8c:27:c1:1e:fd:ad:19:ec:f6:44:d6:3d:6a:3d:91:
2e:97:f2:93:c0:54:95:2a:52:32:f6:4e:dc:11:ab:ee:19:02:
49:5b:b0:a0:b4:48:d7:41:b7:13:ad:9e:93:ea:20:53:ef:ae:
a1:ae:5c:c1:56:aa:64:b7:d0:c6:a9:1f:8d:3b:b6:22:66:a6:
87:4d:f5:7e:11:35:7d:bc:49:e7:6a:95:b3:88:00:61:79:6b:
14:7d:2d:a2:13:dc:7f:ad:33:f3:70:d1:d2:d8:5c:61:1f:81:
99:e1:37:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEw9K5d5e3atbNnKUAjkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmI0MTBhM2JmYzczNDBiNjY3YjRmMjIxYzdjYjgwNjI2
Nzg5NmUwHhcNMjUxMTExMDQwMTA1WhcNMjUxMTEyMDQwMTA1WjAzMTEwLwYDVQQD
Eyg3NmFmZWI2ZmZmMDZiYjE2ZDYzMmFlNzA0NjE4NjBhNTI2NWNkZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DjwvpR7OJFyCbfQn7s9s+j2Jm11
MgfgU3O8W2yZsmojc8Y1Kb37T6om7Tec+zGsinWYka5ccS9TsEDZAjjjOsAmrwxy
ma8Y3IxvZHpiQDQ1XMsOABDijpedSX0tsjB/yhj75L4kDoPHlZDFeGvJil3pBnsf
ho08Gz97umQvNyvZeiigJYF/inWEvX6wam9M9h1cdYqQxA+NhArFl9+tMzgVtydx
0YYM8tK4wN1xnKC55QSxHWSGEDT69cERoqzRQq/WiDxzneT324KbyCIxWR6fai/k
SlFFedF100ZTgghzc7f6/gQXDOfB5eLtiP8mSAsDEa6K53qqkTzDBRV+rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHav62//BrsW1jKucEYYYKUmXN1dMB8GA1UdIwQY
MBaAFIj7QQo7/HNAtme08iHHy4BiZ4luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDIt
YjM4YzgwOTUxOTgxLzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDItYjM4YzgwOTUxOTgx
LzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4Yu7t14
P+RJTCe40A7JNbBkNfEonz9q6QO2cV3G9GvhnWU5yDNiYX0XDbw+LGH+DdTo+1hO
eIjkYCcRIOSTRZiz/dLNTTa5LVlcmLRW4zQ7gsds935Zv3CEUggMyYQ4OeKncJN2
rUgofPK0K92vJqbWy1O3AC6TUN7tFPTpHey4IYqHlH8Cv63zsGS26ufCwyHDjCfB
Hv2tGez2RNY9aj2RLpfyk8BUlSpSMvZO3BGr7hkCSVuwoLRI10G3E62ek+ogU++u
oa5cwVaqZLfQxqkfjTu2Imamh031fhE1fbxJ52qVs4gAYXlrFH0tohPcf60z83DR
0thcYR+BmeE3ow==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:34 2025 by rpki-client