Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: WPDuxmh9x3bgbUs8j3I4TbSMmYBOXwZrcsh6WEyISjo=
Subject key identifier: F5:41:9A:8F:B1:BF:6E:5F:86:E6:02:EF:1C:C3:DE:24:75:91:B8:56
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019926D7E10EA28121258099FE2755B056D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 151F
Signing time: Mon 08 Sep 2025 01:01:46 +0000
Manifest this update: Mon 08 Sep 2025 01:01:46 +0000
Manifest next update: Tue 09 Sep 2025 01:01:46 +0000
Files and hashes: 1: 25GdIX8pGRrdAAaubJO0FxbYG-s.roa (hash: J7SjJPVMXuJzyuyQBNTx3E62SBRqK9gpWeifxFumUs0=)
2: 6WSzq5tklzrrb4CQ30LLV8NUx2g.roa (hash: UmnImARopszt+4WaNMMPCsufWGExd3hc37DvZdbg1tI=)
3: 8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa (hash: 0g/v1GDnSb/mpf5pKYYz9HEAiGcoNER98ihb6wrQqWo=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: LzQwq+Ne8uyAUNo1y4C8Xhn8G6GV/hoHfT9MWQDfYs8=)
5: OREDNoQ0vwPI3XM_zRsW3yzoE_A.roa (hash: 1cT3zKRDrAQDDxV5Rq7SD/mINGk0AiyR89E6Ur7LkVA=)
6: mQQXMqosDbrfiBBQFe3pss-9NtQ.roa (hash: qAb1oy5TaR+lNTajDgndtpEVHAu7ZMdgoTop9g6Wh6Y=)
7: uSaVwi6W5g3viY9NscHN3tqDzCk.roa (hash: t4D+qU5YVF27z4TGr3wG3ucQjp23my4+sKI2eFqOYYg=)
8: uumQQQ1viq_-gfcaqAufH6g_C7w.roa (hash: AM9mJlfYhSa7Wcw8Wx9nTWnnL8T0GQwXceLp5ft6/NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:d7:e1:0e:a2:81:21:25:80:99:fe:27:55:b0:56:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Sep 8 01:01:46 2025 GMT
Not After : Sep 9 01:01:46 2025 GMT
Subject: CN=f5419a8fb1bf6e5f86e602ef1cc3de247591b856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:b9:4c:ef:98:5a:63:99:7b:12:d5:09:1d:
b0:d2:12:e3:a9:7a:2e:4e:0a:89:e4:99:4e:ad:91:
aa:ee:f6:bb:56:7d:c5:03:ba:f5:80:ba:23:ee:70:
41:08:f9:2a:88:d2:e0:72:97:71:6b:40:73:fa:4d:
bf:2c:e5:04:08:b6:3d:85:27:fc:fb:20:78:90:31:
6f:07:5d:e1:fa:21:a6:4c:ea:b5:fd:a4:19:a4:4e:
9e:5a:27:8c:61:e7:d9:a8:35:dd:5b:60:1e:21:c5:
6d:0b:72:e2:58:f2:83:49:43:36:50:c4:36:89:61:
ca:f4:73:40:1b:c8:44:03:51:11:bc:04:84:3b:00:
8b:04:be:a9:76:27:67:d7:1e:82:a7:25:90:07:10:
20:1e:f9:2e:1b:da:ca:4c:08:81:36:46:c2:53:d5:
2a:de:bc:50:26:68:4d:e3:2d:61:58:f3:44:0e:44:
f2:54:c6:a1:df:aa:8c:50:7f:88:c2:bb:80:7a:bc:
a4:ae:50:18:79:b7:2c:75:1c:f7:5e:39:bc:98:e5:
93:55:ab:a7:b1:2d:17:e9:ed:28:b8:14:86:4c:5c:
a9:67:a0:46:9e:c6:a4:8c:51:fb:54:bd:35:de:15:
0e:75:e9:81:86:12:c1:48:75:a9:7d:53:4e:04:a0:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:41:9A:8F:B1:BF:6E:5F:86:E6:02:EF:1C:C3:DE:24:75:91:B8:56
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:70:fb:b8:90:e8:8c:85:88:c5:c0:88:4d:77:dc:c6:7d:d7:
95:d0:a0:41:1a:60:e1:45:99:d0:29:0a:c4:b7:44:ce:e8:8f:
8f:5b:7a:6f:b2:65:02:8c:2a:e0:41:b5:86:e6:9d:f6:af:79:
6f:ff:bb:65:49:5a:d3:09:ec:a5:c6:5c:6f:58:11:8a:48:b6:
50:bd:b8:e2:ce:9c:63:78:24:89:38:db:cf:a0:68:ee:d9:16:
d3:24:ed:fe:17:57:aa:f9:c0:f0:69:9c:0c:7c:c9:f9:48:14:
9e:fc:00:3e:79:78:fb:6c:89:69:3f:ef:c7:d3:4d:c1:83:8b:
46:8e:27:3f:3c:8a:74:e2:80:b1:ba:84:90:52:d6:88:46:23:
03:a1:b6:56:a3:19:05:55:3b:51:b7:ab:e4:a6:1c:11:17:e3:
1b:ea:24:b5:bb:1b:9e:6b:fe:f2:81:26:a4:70:7c:27:2f:46:
8a:37:c9:2c:c7:d3:95:fe:3a:84:33:53:6d:9a:67:68:ee:00:
3f:cf:b7:bc:8f:ee:65:a0:81:48:6f:fa:76:0a:ff:34:26:0c:
27:8e:89:ba:54:67:29:82:2c:4d:65:31:94:18:ad:5f:9b:a6:
f0:2f:e3:0f:a1:63:6b:64:2d:2a:08:4b:14:fa:2f:ec:01:af:
31:29:ff:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkm1+EOooEhJYCZ/idVsFbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZTg2ZmY5OTczYzkzYWJlNjM5OGYwMzE5NjZjMjlkNzVh
M2JhODYwHhcNMjUwOTA4MDEwMTQ2WhcNMjUwOTA5MDEwMTQ2WjAzMTEwLwYDVQQD
EyhmNTQxOWE4ZmIxYmY2ZTVmODZlNjAyZWYxY2MzZGUyNDc1OTFiODU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRK5TO+YWmOZexLVCR2w0hLjqXou
TgqJ5JlOrZGq7va7Vn3FA7r1gLoj7nBBCPkqiNLgcpdxa0Bz+k2/LOUECLY9hSf8
+yB4kDFvB13h+iGmTOq1/aQZpE6eWieMYefZqDXdW2AeIcVtC3LiWPKDSUM2UMQ2
iWHK9HNAG8hEA1ERvASEOwCLBL6pdidn1x6CpyWQBxAgHvkuG9rKTAiBNkbCU9Uq
3rxQJmhN4y1hWPNEDkTyVMah36qMUH+IwruAerykrlAYebcsdRz3Xjm8mOWTVaun
sS0X6e0ouBSGTFypZ6BGnsakjFH7VL013hUOdemBhhLBSHWpfVNOBKDT6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVBmo+xv25fhuYC7xzD3iR1kbhWMB8GA1UdIwQY
MBaAFCHob/mXPJOr5jmPAxlmwp11o7qGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWIt
MzJmZWViNTY2ZWU2LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWItMzJmZWViNTY2ZWU2
LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnD7uJDo
jIWIxcCITXfcxn3XldCgQRpg4UWZ0CkKxLdEzuiPj1t6b7JlAowq4EG1huad9q95
b/+7ZUla0wnspcZcb1gRiki2UL244s6cY3gkiTjbz6Bo7tkW0yTt/hdXqvnA8Gmc
DHzJ+UgUnvwAPnl4+2yJaT/vx9NNwYOLRo4nPzyKdOKAsbqEkFLWiEYjA6G2VqMZ
BVU7Uber5KYcERfjG+oktbsbnmv+8oEmpHB8Jy9GijfJLMfTlf46hDNTbZpnaO4A
P8+3vI/uZaCBSG/6dgr/NCYMJ46JulRnKYIsTWUxlBitX5um8C/jD6Fja2QtKghL
FPov7AGvMSn/yQ==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:15:23 2025 by rpki-client