Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: VnNO4q5BXLZ6S7WJ3BlLceOFi2V6OWWnPfvGDBGNsLM=
Subject key identifier: B9:F0:DE:12:80:26:8F:64:AA:10:10:A0:2D:C1:47:4A:1C:66:BC:35
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 019A72258DD72839F26459576C3E798964FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:00:55 +0000
Manifest this update: Tue 11 Nov 2025 09:00:55 +0000
Manifest next update: Wed 12 Nov 2025 09:00:55 +0000
Files and hashes: 1: ThUJ8aSmMtP4aHcJCzzypfLa8ic.roa (hash: dNkVlGDZVTIktuBX7rmx/RdrVxwALHhLlc8K3va90zE=)
2: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: NHWtBp9CO9BHjZebEMlWQdHH339S+lQCl6mHVdLPUlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8d:d7:28:39:f2:64:59:57:6c:3e:79:89:64:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Nov 11 09:00:55 2025 GMT
Not After : Nov 12 09:00:55 2025 GMT
Subject: CN=b9f0de1280268f64aa1010a02dc1474a1c66bc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:ed:53:66:6b:2d:2b:a5:fc:30:11:22:ba:
ba:54:c7:0b:76:2a:36:49:97:db:b5:12:e5:a7:4f:
26:a6:1a:57:b9:90:4a:04:e1:ae:c1:af:34:0a:9d:
a6:09:dc:32:ad:ae:00:c9:34:84:ef:1a:f9:64:77:
c7:72:b6:1c:fd:9a:65:cc:21:d0:f3:1b:8c:f6:34:
db:e1:da:05:b9:fe:06:de:8a:41:e5:11:93:a2:13:
9a:4e:af:2e:45:bb:e1:1f:a2:d0:72:b4:c5:91:d7:
db:7e:3d:8e:1e:2e:fb:b7:a5:bb:71:25:e3:4c:84:
52:92:fd:d7:c6:1a:d0:07:a3:86:c2:9e:63:89:2d:
bb:3b:94:cb:b3:69:c9:a9:f1:5a:8b:d0:97:8d:2a:
4e:84:f6:6d:8c:67:bc:67:11:54:a3:1e:a6:0f:b9:
ee:a5:71:a0:ee:44:18:b3:b6:90:af:3f:64:d2:80:
9a:f7:d0:51:54:d1:a8:bf:bd:6c:98:9d:8e:ed:ef:
38:54:b4:35:8d:42:2c:4c:4b:1c:f0:32:22:58:20:
dc:31:e1:41:23:6a:40:0e:af:be:05:ef:8c:28:97:
79:c5:a2:46:82:bc:43:9a:7e:1b:5d:dd:f0:6a:ea:
97:59:4a:f0:ba:1f:ea:a7:05:2f:e3:52:e9:22:50:
a9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F0:DE:12:80:26:8F:64:AA:10:10:A0:2D:C1:47:4A:1C:66:BC:35
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ae:ab:8f:eb:30:86:c5:cd:9f:03:47:48:ef:fd:c0:68:c3:
22:3d:a9:7f:10:c9:24:a6:e9:f0:42:fc:b1:35:eb:f1:e7:d7:
a2:6a:4e:f4:98:43:9d:c3:3a:59:5a:a8:bb:3e:9a:11:cc:f5:
10:5d:63:eb:63:27:15:92:2e:ac:79:a8:51:30:c2:27:ae:ab:
df:9d:16:b7:36:ff:c0:51:d7:09:2c:eb:f0:52:3d:a8:e4:45:
48:e2:58:36:40:8c:f7:28:c6:fd:27:4e:e1:d0:3b:7f:89:9c:
28:69:26:01:c9:1f:f8:6b:25:b2:db:7d:71:9b:78:54:a6:45:
c2:99:e8:30:df:31:1f:2d:4c:73:63:a8:49:c4:38:ae:b3:a2:
f9:56:4b:a5:af:d3:6a:5d:43:c1:42:ef:d7:7a:d4:ac:63:bb:
a8:ea:85:c5:1c:6f:99:2d:c6:1d:f1:d8:02:3a:0c:f2:23:52:
f4:0c:29:c5:e5:dd:46:9f:d5:86:57:d4:5a:2f:24:68:20:00:
cb:44:a6:41:b5:b6:2f:24:80:01:54:83:1b:93:1a:2c:bb:fd:
2d:8b:56:53:00:91:2c:12:bd:fd:ab:cb:11:2a:e4:4d:39:2f:
15:45:33:07:9f:d4:bc:99:57:4c:39:4e:a8:c3:91:6b:86:9b:
3f:53:4e:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJY3XKDnyZFlXbD55iWT+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MWFmODVmODFkZDNmM2IyNGFiMTRlZDFmNDJjN2NjNDY2
NTAyZjAwHhcNMjUxMTExMDkwMDU1WhcNMjUxMTEyMDkwMDU1WjAzMTEwLwYDVQQD
EyhiOWYwZGUxMjgwMjY4ZjY0YWExMDEwYTAyZGMxNDc0YTFjNjZiYzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWDtU2ZrLSul/DARIrq6VMcLdio2
SZfbtRLlp08mphpXuZBKBOGuwa80Cp2mCdwyra4AyTSE7xr5ZHfHcrYc/ZplzCHQ
8xuM9jTb4doFuf4G3opB5RGTohOaTq8uRbvhH6LQcrTFkdfbfj2OHi77t6W7cSXj
TIRSkv3XxhrQB6OGwp5jiS27O5TLs2nJqfFai9CXjSpOhPZtjGe8ZxFUox6mD7nu
pXGg7kQYs7aQrz9k0oCa99BRVNGov71smJ2O7e84VLQ1jUIsTEsc8DIiWCDcMeFB
I2pADq++Be+MKJd5xaJGgrxDmn4bXd3wauqXWUrwuh/qpwUv41LpIlCp7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnw3hKAJo9kqhAQoC3BR0ocZrw1MB8GA1UdIwQY
MBaAFIga+F+B3T87JKsU7R9Cx8xGZQLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUt
ZjI1NTY1OGJiODgxLzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUtZjI1NTY1OGJiODgx
LzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPK6rj+sw
hsXNnwNHSO/9wGjDIj2pfxDJJKbp8EL8sTXr8efXompO9JhDncM6WVqouz6aEcz1
EF1j62MnFZIurHmoUTDCJ66r350Wtzb/wFHXCSzr8FI9qORFSOJYNkCM9yjG/SdO
4dA7f4mcKGkmAckf+Gslstt9cZt4VKZFwpnoMN8xHy1Mc2OoScQ4rrOi+VZLpa/T
al1DwULv13rUrGO7qOqFxRxvmS3GHfHYAjoM8iNS9AwpxeXdRp/VhlfUWi8kaCAA
y0SmQbW2LySAAVSDG5MaLLv9LYtWUwCRLBK9/avLESrkTTkvFUUzB5/UvJlXTDlO
qMORa4abP1NOVw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:04 2025 by rpki-client