Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
File: ieIaK4oluXG9t0GgquMlmSMEGU4.mft (raw, json)
Hash identifier: oRVxocBZvrMHU3v1yJylfYiqy7NCT931Qe/Pk1KAey8=
Subject key identifier: 21:F4:D5:48:D3:5F:55:FC:64:80:FB:F4:53:A6:A4:C3:8E:4E:07:C0
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e
Certificate serial: 019A2AB0A2B6555A5606301FC1A08F52F944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
Manifest number: 170A
Signing time: Tue 28 Oct 2025 12:00:10 +0000
Manifest this update: Tue 28 Oct 2025 12:00:10 +0000
Manifest next update: Wed 29 Oct 2025 12:00:10 +0000
Files and hashes: 1: 1jV2xqilASPXHu5Grr3x0X0ICp8.roa (hash: 8Jrll8bHg095WBKUtpaKs7HT5xMgUtd6Q0GjYhqobro=)
2: JHsea8ldAse1CeGI2SumLCiOnDc.roa (hash: VKEuoq4G9HXNJupJnEjoPZw8yd6ADu3vGNugbT7oOUM=)
3: R-7dmcw3c20-6mUEaV6t8HKtYR8.roa (hash: 0JAMHSeaJgJlarzLGa/qydN1dZySJoZZ59FCJPt3tQ0=)
4: ieIaK4oluXG9t0GgquMlmSMEGU4.crl (hash: psyv7UZ+oReI/VM2yeaaHIjT7upPkC61bGMorxX38+g=)
5: zV9LNmGcv52EaJiYnvcEchkoyS4.roa (hash: 7+tk5OKGsDgPRtMzzmdAb84WHEzjIJ3n9hyI8CnIig8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b0:a2:b6:55:5a:56:06:30:1f:c1:a0:8f:52:f9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
Validity
Not Before: Oct 28 12:00:10 2025 GMT
Not After : Oct 29 12:00:10 2025 GMT
Subject: CN=21f4d548d35f55fc6480fbf453a6a4c38e4e07c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:58:af:56:b0:a4:4d:0d:76:3c:be:e1:d5:
62:47:19:9d:10:1e:4f:0e:9d:97:22:cc:96:8f:6c:
bd:1b:14:97:b7:4a:70:81:d7:be:4a:a9:57:2a:2b:
ba:f9:d3:bd:23:1c:9f:18:8f:ca:8d:e8:ed:e6:ff:
27:6d:64:13:68:8f:fb:d5:e8:e5:6e:e3:d5:bb:81:
ca:f1:1e:4c:fc:09:aa:6f:80:f8:70:3e:e5:a2:98:
0a:8b:e6:4e:c8:38:e8:98:dd:77:b3:a7:e9:64:40:
ad:0d:4b:c8:3d:35:1d:c0:89:9c:da:5e:e6:4a:19:
78:d3:4c:48:ea:04:77:0a:8e:da:64:a3:5f:7f:bc:
dd:a6:7d:5e:cc:2f:7d:ee:38:2e:7a:b6:69:30:4e:
0f:dc:41:c8:29:ab:05:f2:ce:e7:de:bc:a0:35:aa:
34:fa:28:63:16:31:13:fd:8a:5c:b0:38:7e:36:4f:
ec:95:26:d2:0a:9f:8f:29:e8:ff:b1:f7:48:17:d8:
16:0b:2e:ea:ad:b1:cf:10:a2:83:22:a8:bb:2d:f7:
59:bb:e2:b7:1c:20:f8:1f:d0:ee:28:09:52:14:7f:
8e:81:80:4e:e3:19:4a:04:0d:b4:ed:f6:3c:b3:d4:
04:2f:0b:61:1e:55:d7:71:09:94:f3:d4:70:5f:d7:
54:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F4:D5:48:D3:5F:55:FC:64:80:FB:F4:53:A6:A4:C3:8E:4E:07:C0
X509v3 Authority Key Identifier:
keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:68:f3:23:40:35:10:67:87:a7:68:e0:de:7d:ec:81:86:b8:
23:f6:b2:77:ce:be:95:fb:16:83:de:eb:66:93:39:0b:23:7b:
26:d0:2f:d9:eb:20:d5:a2:b0:0a:b1:de:84:fe:f4:fb:c9:1e:
9f:66:e8:a5:53:86:4c:9f:d4:e4:57:77:21:c2:bc:fa:4e:c3:
1f:32:97:5d:5e:ab:08:b4:42:cd:de:28:b5:d3:65:39:01:af:
6e:5b:6b:57:26:c4:e5:50:72:c4:86:02:a9:d6:a0:17:b1:dc:
02:5a:6f:2d:d2:94:79:1b:c9:ea:56:a1:d6:dd:5e:e0:90:f8:
9a:ba:ee:1d:eb:f2:0b:f6:8b:82:87:8d:f1:c4:99:bb:1b:09:
1c:71:27:5e:91:8f:73:db:16:aa:ff:9b:1b:94:0a:ac:26:96:
07:c8:01:55:6f:24:78:6e:3e:c7:d8:e3:a6:7c:0e:2e:10:0b:
9c:39:bb:b5:48:4a:ec:3d:57:0d:da:7f:7a:26:de:c1:fd:3c:
56:9f:fa:73:59:e6:e6:e1:87:68:2b:23:61:bc:1d:45:73:b7:
be:a7:be:7f:b6:3a:ec:ba:5e:e3:c2:c7:95:64:ed:d9:9a:f7:
c4:0d:a6:b0:0e:96:59:44:59:d2:95:f7:49:f3:d0:ca:06:4c:
50:11:d4:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqsKK2VVpWBjAfwaCPUvlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZTIxYTJiOGEyNWI5NzFiZGI3NDFhMGFhZTMyNTk5MjMw
NDE5NGUwHhcNMjUxMDI4MTIwMDEwWhcNMjUxMDI5MTIwMDEwWjAzMTEwLwYDVQQD
EygyMWY0ZDU0OGQzNWY1NWZjNjQ4MGZiZjQ1M2E2YTRjMzhlNGUwN2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBRYr1awpE0Ndjy+4dViRxmdEB5P
Dp2XIsyWj2y9GxSXt0pwgde+SqlXKiu6+dO9IxyfGI/Kjejt5v8nbWQTaI/71ejl
buPVu4HK8R5M/Amqb4D4cD7lopgKi+ZOyDjomN13s6fpZECtDUvIPTUdwImc2l7m
Shl400xI6gR3Co7aZKNff7zdpn1ezC997jguerZpME4P3EHIKasF8s7n3rygNao0
+ihjFjET/YpcsDh+Nk/slSbSCp+PKej/sfdIF9gWCy7qrbHPEKKDIqi7LfdZu+K3
HCD4H9DuKAlSFH+OgYBO4xlKBA207fY8s9QELwthHlXXcQmU89RwX9dU2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCH01UjTX1X8ZID79FOmpMOOTgfAMB8GA1UdIwQY
MBaAFIniGiuKJblxvbdBoKrjJZkjBBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjIt
MWFkNDdjY2QyZDlhLzEvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjItMWFkNDdjY2QyZDlh
LzEvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2jzI0A1
EGeHp2jg3n3sgYa4I/ayd86+lfsWg97rZpM5CyN7JtAv2esg1aKwCrHehP70+8ke
n2bopVOGTJ/U5Fd3IcK8+k7DHzKXXV6rCLRCzd4otdNlOQGvbltrVybE5VByxIYC
qdagF7HcAlpvLdKUeRvJ6lah1t1e4JD4mrruHevyC/aLgoeN8cSZuxsJHHEnXpGP
c9sWqv+bG5QKrCaWB8gBVW8keG4+x9jjpnwOLhALnDm7tUhK7D1XDdp/eibewf08
Vp/6c1nm5uGHaCsjYbwdRXO3vqe+f7Y67Lpe48LHlWTt2Zr3xA2msA6WWURZ0pX3
SfPQygZMUBHUxw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 13:24:16 2025 by rpki-client