Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
File: iNCLhhV8ayjmrJguDD_rGj7DKBA.mft (raw, json)
Hash identifier: UtOUf6jDcP2WZytWxTu+vCvqraHYmdPNf0+LW5xkP48=
Subject key identifier: E0:7A:39:F6:34:4F:07:2D:20:56:66:89:F5:5F:F8:01:5F:E9:87:EA
Authority key identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
Certificate issuer: /CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Certificate serial: 019A73012BDD1746D9D9EBFD90F855AEDFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
Manifest number: 0620
Signing time: Tue 11 Nov 2025 13:00:47 +0000
Manifest this update: Tue 11 Nov 2025 13:00:47 +0000
Manifest next update: Wed 12 Nov 2025 13:00:47 +0000
Files and hashes: 1: Ajbz3OGkwZMEFq0jmclXR5Gr8N4.roa (hash: VyX/vNC7tiH5t3Mk3m61yLf9U3OPk8ttEhnvx5R6lEc=)
2: iNCLhhV8ayjmrJguDD_rGj7DKBA.crl (hash: /ivvHdgTUK3sD7BWajhaRxcu8tGnwv9ddoDB5ji0Wtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:2b:dd:17:46:d9:d9:eb:fd:90:f8:55:ae:df:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Validity
Not Before: Nov 11 13:00:47 2025 GMT
Not After : Nov 12 13:00:47 2025 GMT
Subject: CN=e07a39f6344f072d20566689f55ff8015fe987ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cb:f1:a4:55:ac:5d:7c:ee:e7:1f:61:c9:28:
73:b0:50:81:39:6a:c5:bf:35:a1:b9:56:08:73:12:
4c:55:22:6f:2f:d8:28:6b:c8:a9:23:6b:70:fd:c2:
54:a2:ec:79:fe:53:a5:56:fa:26:2f:08:45:cd:6a:
d2:7c:25:b9:b6:28:af:a5:2f:6b:8e:38:b9:08:4b:
6e:33:cc:f6:42:f1:b8:85:c4:b8:ef:04:44:23:b0:
15:51:2b:7a:20:70:36:2a:ce:8c:37:b4:2e:6e:ae:
49:7b:46:dd:3a:28:90:b3:a8:ca:47:f2:d4:3d:fe:
da:45:f0:88:52:b5:03:3e:5b:1b:2c:da:8c:57:f6:
ff:bf:f2:70:d1:24:bd:6a:29:79:45:4f:20:ce:a8:
74:07:a7:ce:6a:f3:90:73:ef:da:b1:76:90:24:f9:
16:6a:98:f5:57:fa:6b:72:ad:37:66:59:1f:6c:3a:
cf:3b:d1:fb:c7:53:0a:e6:71:b1:c5:8c:ba:f9:90:
d8:f4:68:40:d2:7c:a6:53:ed:2b:38:1b:c5:1c:ce:
e7:22:d2:0a:e7:14:e0:72:c5:5b:8e:c5:94:66:7e:
02:80:e1:ec:0f:5d:7a:a0:68:6e:f8:9e:ba:86:50:
00:ce:4f:d0:f4:00:b5:ed:60:b0:33:0f:17:e6:00:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7A:39:F6:34:4F:07:2D:20:56:66:89:F5:5F:F8:01:5F:E9:87:EA
X509v3 Authority Key Identifier:
keyid:88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c5:1f:6a:5e:bf:61:9a:0a:e1:90:fb:87:35:0f:a6:2b:a1:
dc:90:8f:05:63:18:e8:bf:23:b0:66:ea:64:64:38:9a:45:e3:
a2:dd:8b:57:27:23:fb:e7:97:06:8a:4a:ad:b7:be:24:a4:0d:
ce:b2:31:13:14:f2:ac:5f:88:eb:8d:0c:8b:7b:a7:10:9a:2a:
84:7d:7e:5e:2e:a2:c8:84:a5:6f:0e:4e:50:14:46:ca:f4:80:
4c:8b:15:69:ef:0f:e1:9d:74:94:63:c0:60:90:51:c4:21:d9:
57:45:92:3f:6a:d5:37:b3:6c:4c:35:ff:0d:dc:46:71:ba:b8:
ff:7e:75:15:f1:79:29:49:a7:94:f7:0d:cf:fd:ea:04:d9:c6:
ec:32:93:7e:f3:ec:20:1b:b0:39:02:f2:c7:09:52:b0:0b:ba:
5c:d7:71:f9:8c:fd:17:d9:76:74:85:09:86:5b:c6:31:12:ee:
4d:bf:87:df:85:17:d3:35:a3:92:2e:a4:71:d0:07:6a:b3:f5:
07:c3:c8:f8:56:64:70:92:6e:57:72:82:ed:ca:5e:ba:e9:75:
4b:47:92:ba:c7:68:5a:fc:ee:9e:ae:bc:f9:60:99:ea:d6:68:
ed:f8:bb:30:b5:44:ed:16:cb:b0:41:8f:a0:b1:06:fc:20:67:
7e:b4:0e:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzASvdF0bZ2ev9kPhVrt/7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZDA4Yjg2MTU3YzZiMjhlNmFjOTgyZTBjM2ZlYjFhM2Vj
MzI4MTAwHhcNMjUxMTExMTMwMDQ3WhcNMjUxMTEyMTMwMDQ3WjAzMTEwLwYDVQQD
EyhlMDdhMzlmNjM0NGYwNzJkMjA1NjY2ODlmNTVmZjgwMTVmZTk4N2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcvxpFWsXXzu5x9hyShzsFCBOWrF
vzWhuVYIcxJMVSJvL9goa8ipI2tw/cJUoux5/lOlVvomLwhFzWrSfCW5tiivpS9r
jji5CEtuM8z2QvG4hcS47wREI7AVUSt6IHA2Ks6MN7Qubq5Je0bdOiiQs6jKR/LU
Pf7aRfCIUrUDPlsbLNqMV/b/v/Jw0SS9ail5RU8gzqh0B6fOavOQc+/asXaQJPkW
apj1V/prcq03ZlkfbDrPO9H7x1MK5nGxxYy6+ZDY9GhA0nymU+0rOBvFHM7nItIK
5xTgcsVbjsWUZn4CgOHsD116oGhu+J66hlAAzk/Q9AC17WCwMw8X5gDVlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOB6OfY0TwctIFZmifVf+AFf6YfqMB8GA1UdIwQY
MBaAFIjQi4YVfGso5qyYLgw/6xo+wygQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83NjA0NTItZjYzYy00OGFhLWEzZTAt
MzhkMGNmOGZiOGI4LzEvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83NjA0NTItZjYzYy00OGFhLWEzZTAtMzhkMGNmOGZiOGI4
LzEvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8Ufal6/
YZoK4ZD7hzUPpiuh3JCPBWMY6L8jsGbqZGQ4mkXjot2LVycj++eXBopKrbe+JKQN
zrIxExTyrF+I640Mi3unEJoqhH1+Xi6iyISlbw5OUBRGyvSATIsVae8P4Z10lGPA
YJBRxCHZV0WSP2rVN7NsTDX/DdxGcbq4/351FfF5KUmnlPcNz/3qBNnG7DKTfvPs
IBuwOQLyxwlSsAu6XNdx+Yz9F9l2dIUJhlvGMRLuTb+H34UX0zWjki6kcdAHarP1
B8PI+FZkcJJuV3KC7cpeuul1S0eSusdoWvzunq68+WCZ6tZo7fi7MLVE7RbLsEGP
oLEG/CBnfrQOtw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:15 2025 by rpki-client