
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
File: ieIaK4oluXG9t0GgquMlmSMEGU4.mft (raw, json)
Hash identifier: +ZqF6TrIQ8vGFY7smp+Kz3kUkSBrhUdGlwr//Lscj9U=
Subject key identifier: EC:1D:C2:F0:DF:33:6F:D6:EA:AE:17:CE:6A:E3:6E:B3:8D:C9:1C:6F
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e
Certificate serial: 01992BC67DEEE843AAC35D4303F71DD98A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
Manifest number: 1686
Signing time: Tue 09 Sep 2025 00:00:52 +0000
Manifest this update: Tue 09 Sep 2025 00:00:52 +0000
Manifest next update: Wed 10 Sep 2025 00:00:52 +0000
Files and hashes: 1: 1jV2xqilASPXHu5Grr3x0X0ICp8.roa (hash: 8Jrll8bHg095WBKUtpaKs7HT5xMgUtd6Q0GjYhqobro=)
2: JHsea8ldAse1CeGI2SumLCiOnDc.roa (hash: VKEuoq4G9HXNJupJnEjoPZw8yd6ADu3vGNugbT7oOUM=)
3: R-7dmcw3c20-6mUEaV6t8HKtYR8.roa (hash: 0JAMHSeaJgJlarzLGa/qydN1dZySJoZZ59FCJPt3tQ0=)
4: ieIaK4oluXG9t0GgquMlmSMEGU4.crl (hash: Fy12l3wYxKUL6c3EGf95wOP/D9O1Oalwv7LIjHOPH9U=)
5: zV9LNmGcv52EaJiYnvcEchkoyS4.roa (hash: 7+tk5OKGsDgPRtMzzmdAb84WHEzjIJ3n9hyI8CnIig8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:c6:7d:ee:e8:43:aa:c3:5d:43:03:f7:1d:d9:8a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
Validity
Not Before: Sep 9 00:00:52 2025 GMT
Not After : Sep 10 00:00:52 2025 GMT
Subject: CN=ec1dc2f0df336fd6eaae17ce6ae36eb38dc91c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:9b:87:34:df:54:7f:59:00:a2:7a:09:fe:
83:84:eb:85:e9:58:80:b9:80:4e:1e:03:ca:27:59:
36:39:66:04:90:e1:8e:cc:37:d0:61:b3:5f:0a:cd:
cd:a3:60:82:0b:fe:ca:cc:32:9a:88:cb:05:a1:90:
a5:d8:e5:59:3e:f1:aa:fd:cf:ed:4c:2d:23:8d:4c:
36:70:b2:53:4e:3a:e2:5e:30:c3:71:57:cc:ae:67:
8f:05:6b:32:59:88:64:22:b0:94:84:85:a8:f6:74:
58:53:b2:f5:0b:39:2c:e8:c1:49:08:aa:06:ea:2f:
da:e6:2b:e7:eb:68:81:d6:8c:e6:aa:5e:cc:25:ee:
38:6f:e2:f1:0b:35:1b:88:c9:49:27:2a:5c:ee:e0:
3f:05:a8:fd:b7:df:5b:66:18:aa:9d:27:08:55:64:
90:85:42:09:35:12:2e:7f:11:af:e9:7d:36:79:06:
5c:6e:e0:36:7e:64:95:0c:8a:e8:21:48:7a:9a:be:
ac:fc:4b:1c:c7:67:f2:4f:66:e1:ec:aa:92:18:a4:
6e:fc:d3:27:14:57:76:83:fb:d2:d2:0f:99:cb:9d:
6b:aa:6b:00:a2:0f:dd:ce:4b:71:74:7f:bd:0a:6c:
af:f1:aa:c0:79:be:0e:5a:38:45:d8:fc:15:85:82:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1D:C2:F0:DF:33:6F:D6:EA:AE:17:CE:6A:E3:6E:B3:8D:C9:1C:6F
X509v3 Authority Key Identifier:
keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d5:61:a6:54:4b:73:b8:dc:18:db:69:d4:5e:b0:88:75:40:
bc:eb:3d:bc:15:7c:f3:c3:a8:08:ea:bd:98:ab:2e:3a:02:70:
b5:31:7e:3a:b4:9d:70:1e:c2:93:dd:9f:66:d8:9b:53:21:04:
0f:95:32:c6:2b:f6:13:c2:85:f3:d6:04:8d:e7:cd:c3:d9:df:
e1:9c:8c:b6:f0:ec:24:4e:81:8e:7d:90:28:ef:9e:e5:bf:d4:
d5:b4:b2:2a:f9:c9:03:cc:95:74:70:ef:e5:ab:8e:c9:8d:6e:
f4:83:51:36:9e:de:37:8e:1e:40:58:74:f7:8c:dd:77:9c:22:
80:9c:d8:5c:97:2f:db:6a:b1:71:82:ea:7e:2f:9a:2c:6c:ea:
83:f9:3a:17:2f:94:c0:ed:a4:13:be:26:7f:ca:12:b2:7d:3e:
a9:17:34:cd:bc:79:fa:52:80:6a:04:67:41:a3:25:c7:48:dc:
70:73:2a:ab:a0:0d:ae:30:ba:1f:9e:ee:10:67:ed:fc:97:34:
fe:fc:b9:cd:f5:c3:20:83:ed:7f:ff:78:7a:4e:0c:2f:60:9f:
07:08:22:7c:a6:ba:d9:89:51:68:96:2f:a2:69:59:b1:01:2d:
ae:7e:3c:e1:74:2c:6e:c7:64:dc:f5:82:b6:b3:ff:fb:ca:48:
a9:f4:2e:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkrxn3u6EOqw11DA/cd2YpTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZTIxYTJiOGEyNWI5NzFiZGI3NDFhMGFhZTMyNTk5MjMw
NDE5NGUwHhcNMjUwOTA5MDAwMDUyWhcNMjUwOTEwMDAwMDUyWjAzMTEwLwYDVQQD
EyhlYzFkYzJmMGRmMzM2ZmQ2ZWFhZTE3Y2U2YWUzNmViMzhkYzkxYzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PKbhzTfVH9ZAKJ6Cf6DhOuF6ViA
uYBOHgPKJ1k2OWYEkOGOzDfQYbNfCs3No2CCC/7KzDKaiMsFoZCl2OVZPvGq/c/t
TC0jjUw2cLJTTjriXjDDcVfMrmePBWsyWYhkIrCUhIWo9nRYU7L1Czks6MFJCKoG
6i/a5ivn62iB1ozmql7MJe44b+LxCzUbiMlJJypc7uA/Baj9t99bZhiqnScIVWSQ
hUIJNRIufxGv6X02eQZcbuA2fmSVDIroIUh6mr6s/Escx2fyT2bh7KqSGKRu/NMn
FFd2g/vS0g+Zy51rqmsAog/dzktxdH+9Cmyv8arAeb4OWjhF2PwVhYJLUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwdwvDfM2/W6q4XzmrjbrONyRxvMB8GA1UdIwQY
MBaAFIniGiuKJblxvbdBoKrjJZkjBBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjIt
MWFkNDdjY2QyZDlhLzEvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjItMWFkNDdjY2QyZDlh
LzEvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedVhplRL
c7jcGNtp1F6wiHVAvOs9vBV888OoCOq9mKsuOgJwtTF+OrSdcB7Ck92fZtibUyEE
D5Uyxiv2E8KF89YEjefNw9nf4ZyMtvDsJE6Bjn2QKO+e5b/U1bSyKvnJA8yVdHDv
5auOyY1u9INRNp7eN44eQFh094zdd5wigJzYXJcv22qxcYLqfi+aLGzqg/k6Fy+U
wO2kE74mf8oSsn0+qRc0zbx5+lKAagRnQaMlx0jccHMqq6ANrjC6H57uEGft/Jc0
/vy5zfXDIIPtf/94ek4ML2CfBwgifKa62YlRaJYvomlZsQEtrn484XQsbsdk3PWC
trP/+8pIqfQuDQ==
-----END CERTIFICATE-----
Generated at Tue Sep 9 07:46:35 2025 by rpki-client