Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
File: iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft (raw, json)
Hash identifier: vV6Ekl6pJAFezkiy9KGluVYsTLTZLpXJPBj98JGKsA4=
Subject key identifier: E8:28:97:CB:75:CF:44:D7:4A:29:E5:64:F6:25:75:01:19:FA:03:61
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Certificate issuer: /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial: 019A725CE72CDBE8982EE218000D521EEBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
Manifest number: 149F
Signing time: Tue 11 Nov 2025 10:01:22 +0000
Manifest this update: Tue 11 Nov 2025 10:01:22 +0000
Manifest next update: Wed 12 Nov 2025 10:01:22 +0000
Files and hashes: 1: FVISxrqgKm1jzuVDA1W7GgFPx7A.roa (hash: vGtytU+11DFVtQgoaWrwrm8B3AMwfHF+sCYR/tFEDO8=)
2: Tnn_1K3DEyaHOQw-9I2Ewjwk8pM.roa (hash: ezAVN3jQ2UsBPNShAKwAjIb8r5x8njUYP6cthQNSdTk=)
3: iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl (hash: /1oJQh3Aq/TZfnQs1HjZCnBG9oyCMpibsYNLEPmVk1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e7:2c:db:e8:98:2e:e2:18:00:0d:52:1e:eb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Validity
Not Before: Nov 11 10:01:22 2025 GMT
Not After : Nov 12 10:01:22 2025 GMT
Subject: CN=e82897cb75cf44d74a29e564f625750119fa0361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:51:bf:23:e6:47:54:91:0f:ca:e1:c0:d5:
60:d1:94:6a:18:b3:8a:bd:dd:ec:c2:93:f0:0b:02:
d6:6d:c8:b6:eb:81:fd:40:f2:26:08:e0:f3:01:b8:
39:20:c9:47:63:39:2e:69:e1:b8:0a:94:24:7d:66:
57:51:bf:67:e7:1b:86:19:95:22:7b:95:84:52:8c:
df:55:d7:da:30:54:a3:4e:ae:b1:48:6b:da:5e:cc:
95:3b:a9:33:9d:55:b7:30:38:0f:05:ff:d9:9a:3b:
ff:b2:19:a1:6b:0c:66:5f:9c:f0:76:d3:ef:4c:dc:
cb:6c:56:74:fd:d6:95:c1:29:6b:72:ef:ec:cb:a7:
31:f7:6a:0a:d2:89:63:85:e3:28:75:28:d4:d1:ff:
ce:67:c3:2d:61:94:8d:77:01:66:62:d8:0b:32:9a:
fa:7d:83:da:0d:c2:e8:72:3b:35:9e:3b:4c:3c:22:
5a:93:a9:70:94:55:53:4d:f6:17:e4:2f:37:cb:25:
68:a0:61:dd:d3:33:f6:a5:62:83:1e:8b:99:d4:24:
0e:f7:60:71:cf:71:9f:6f:1f:2f:99:41:cc:ff:38:
0f:06:66:d4:e0:8c:bb:2b:dd:e2:c4:79:58:0c:18:
d2:dd:0b:73:be:43:46:30:99:a9:90:ed:39:5f:df:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:28:97:CB:75:CF:44:D7:4A:29:E5:64:F6:25:75:01:19:FA:03:61
X509v3 Authority Key Identifier:
keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:03:e5:9d:77:20:61:2f:36:50:f7:22:4d:7d:78:8c:91:37:
5d:36:00:c6:e1:78:5a:e5:d8:da:03:d3:52:1c:0a:68:77:48:
80:c7:87:3f:d3:fe:72:d2:e1:2a:46:87:82:ac:02:8e:6c:63:
e0:5e:56:d1:cb:e5:bc:e1:03:23:b6:46:79:97:a9:15:4e:b7:
d6:61:4e:13:a0:22:23:e9:f5:0c:05:73:7c:12:b4:8f:5a:a6:
d9:28:18:19:4f:3d:f8:03:42:3f:8f:e0:87:80:65:f4:30:1b:
67:96:6a:dc:d8:c1:bf:ab:59:44:78:86:a7:be:b9:03:87:0f:
a4:df:a8:b0:da:91:30:3e:bc:bf:c2:56:f2:5f:7a:e5:75:6c:
d7:c1:87:bf:a7:fc:01:9d:04:1f:14:f6:93:64:cb:cd:da:97:
06:03:97:3a:49:09:11:cf:0a:4a:52:00:51:70:6d:3c:66:b6:
6d:4c:af:02:3b:ed:c3:ce:87:4f:64:ca:9b:7b:09:e3:33:b1:
74:73:87:9d:87:4f:8a:a0:30:18:63:c5:72:e1:55:5b:14:e1:
71:fb:d2:00:f7:f6:7a:86:c4:12:cd:d8:1f:dc:66:e0:c2:4a:
0b:6d:9d:e8:9e:02:19:28:39:1a:03:f4:49:b6:04:01:b9:79:
f5:e8:72:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXOcs2+iYLuIYAA1SHuvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMGQ4MWYzZTBmMmQxOGYzYjU5MGRjYzUzNmQ1ZTk0Y2Zl
MDcwMTIwHhcNMjUxMTExMTAwMTIyWhcNMjUxMTEyMTAwMTIyWjAzMTEwLwYDVQQD
EyhlODI4OTdjYjc1Y2Y0NGQ3NGEyOWU1NjRmNjI1NzUwMTE5ZmEwMzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqpRvyPmR1SRD8rhwNVg0ZRqGLOK
vd3swpPwCwLWbci264H9QPImCODzAbg5IMlHYzkuaeG4CpQkfWZXUb9n5xuGGZUi
e5WEUozfVdfaMFSjTq6xSGvaXsyVO6kznVW3MDgPBf/Zmjv/shmhawxmX5zwdtPv
TNzLbFZ0/daVwSlrcu/sy6cx92oK0oljheModSjU0f/OZ8MtYZSNdwFmYtgLMpr6
fYPaDcLocjs1njtMPCJak6lwlFVTTfYX5C83yyVooGHd0zP2pWKDHouZ1CQO92Bx
z3Gfbx8vmUHM/zgPBmbU4Iy7K93ixHlYDBjS3QtzvkNGMJmpkO05X9+XSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgol8t1z0TXSinlZPYldQEZ+gNhMB8GA1UdIwQY
MBaAFIsNgfPg8tGPO1kNzFNtXpTP4HASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wNTE3ZjktOWExZS00NjAwLWIwNDMt
ZjY1NDFmNzc4NTg1LzEvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wNTE3ZjktOWExZS00NjAwLWIwNDMtZjY1NDFmNzc4NTg1
LzEvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgPlnXcg
YS82UPciTX14jJE3XTYAxuF4WuXY2gPTUhwKaHdIgMeHP9P+ctLhKkaHgqwCjmxj
4F5W0cvlvOEDI7ZGeZepFU631mFOE6AiI+n1DAVzfBK0j1qm2SgYGU89+ANCP4/g
h4Bl9DAbZ5Zq3NjBv6tZRHiGp765A4cPpN+osNqRMD68v8JW8l965XVs18GHv6f8
AZ0EHxT2k2TLzdqXBgOXOkkJEc8KSlIAUXBtPGa2bUyvAjvtw86HT2TKm3sJ4zOx
dHOHnYdPiqAwGGPFcuFVWxThcfvSAPf2eobEEs3YH9xm4MJKC22d6J4CGSg5GgP0
SbYEAbl59ehyJQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:44:17 2025 by rpki-client