Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
File: IB_mmB68vJI8jkn0hFJEHQgOZvA.mft (raw, json)
Hash identifier: TZ5ftXpGNq13KEabRFkNn4rR+wbZTsOO1uzOIOpQM7k=
Subject key identifier: F6:A7:FB:BC:71:D7:4E:16:F3:4E:E6:F8:52:51:FD:0F:81:B1:05:4C
Authority key identifier: 20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0
Certificate issuer: /CN=201fe6981ebcbc923c8e49f48452441d080e66f0
Certificate serial: 019A2AB143464A94A759CF5EE34534B85BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
Manifest number: 10F5
Signing time: Tue 28 Oct 2025 12:00:51 +0000
Manifest this update: Tue 28 Oct 2025 12:00:51 +0000
Manifest next update: Wed 29 Oct 2025 12:00:51 +0000
Files and hashes: 1: GDKGeKleHqIsNhWuvQIPnj1S5ik.roa (hash: 027frokon21vo4MMUC96Z9OEZpQ3AsbdGWojRJwBl/8=)
2: IB_mmB68vJI8jkn0hFJEHQgOZvA.crl (hash: mvB0ON0RHt55JQdB+PfO7eftRDO4yA52qoXHED1DPlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:43:46:4a:94:a7:59:cf:5e:e3:45:34:b8:5b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe6981ebcbc923c8e49f48452441d080e66f0
Validity
Not Before: Oct 28 12:00:51 2025 GMT
Not After : Oct 29 12:00:51 2025 GMT
Subject: CN=f6a7fbbc71d74e16f34ee6f85251fd0f81b1054c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:5b:37:a4:b2:07:05:de:c7:7e:0a:7a:8c:
13:40:1c:f1:e8:fa:5e:9b:7b:d9:80:7a:ab:4c:75:
c1:7d:2c:2e:51:5d:61:a5:e4:7f:cf:f3:36:ae:db:
cc:04:11:a5:15:b4:76:48:f4:58:f6:f0:ad:9f:10:
fa:a4:26:df:40:f4:5a:2a:57:9a:94:35:2b:5d:2c:
b7:05:0e:e9:c0:9a:4e:b7:a0:dd:2b:8e:15:a8:de:
b2:2e:d1:7a:43:7b:e1:ce:88:cd:dc:16:dd:b9:9d:
42:4a:72:dd:04:71:35:7c:2e:16:12:d9:fc:17:89:
e2:18:2b:5c:26:46:9e:57:39:7d:d3:9b:ca:2d:b2:
c7:8e:9e:76:ba:3d:bc:46:f9:15:82:d6:ec:b8:17:
6f:00:d9:ff:74:ab:5c:27:78:82:29:59:10:e6:b8:
c4:7d:92:73:3f:d8:3d:54:24:37:5f:d6:c0:17:8a:
0c:a9:36:15:2f:38:72:a2:fe:b1:8e:1f:79:ce:88:
3a:6b:08:a7:08:32:ab:5d:43:43:5c:b2:fe:76:53:
cd:80:37:e8:aa:ef:1c:c2:31:3f:10:53:4a:ed:74:
a6:a8:25:75:bb:3d:db:4d:d7:f5:8f:73:92:6d:a1:
fb:79:f3:e7:60:66:80:e2:03:89:c3:e7:f9:78:14:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A7:FB:BC:71:D7:4E:16:F3:4E:E6:F8:52:51:FD:0F:81:B1:05:4C
X509v3 Authority Key Identifier:
keyid:20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:90:8a:8e:24:c4:f4:4b:d0:ad:57:2b:16:42:68:c9:7e:e1:
26:c1:d5:60:37:19:6a:47:94:5d:43:b0:cf:4e:59:6f:3d:ea:
ca:62:f3:b8:f8:f0:c0:e6:cb:54:a8:93:f4:91:6b:12:47:f6:
3b:1b:a8:ac:4f:38:31:95:99:5f:2f:d2:64:e5:7c:5d:d3:8d:
03:eb:ba:b1:96:c7:a5:dc:35:db:ac:bd:7b:2b:b0:b1:85:46:
bc:a2:bc:ed:d7:9b:f5:99:c7:7d:21:51:20:64:c0:12:3b:4a:
15:05:2e:8c:b3:33:d6:19:f3:be:51:39:49:c0:aa:26:f7:c9:
8c:bc:e0:3f:a4:a1:f6:d8:04:e6:cb:17:51:f5:f2:d2:ea:7a:
19:e0:79:02:2a:dc:57:b4:12:0d:1f:91:ad:83:18:b9:41:8d:
da:6c:44:70:b8:9c:15:24:01:6b:fa:b3:3d:4c:8d:4c:9c:c0:
46:04:f3:76:e9:61:9a:e0:6d:d5:17:37:1d:b8:2c:48:96:eb:
9a:62:48:4b:33:0d:54:d7:be:9d:41:29:ab:62:d1:10:f1:ce:
ea:c9:63:d7:ab:94:17:1b:31:e5:d8:d0:3f:82:78:09:04:a3:
14:88:c1:c4:82:19:31:d5:7e:25:a3:8c:c2:a0:04:db:8a:d7:
a6:8a:20:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqsUNGSpSnWc9e40U0uFv1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMWZlNjk4MWViY2JjOTIzYzhlNDlmNDg0NTI0NDFkMDgw
ZTY2ZjAwHhcNMjUxMDI4MTIwMDUxWhcNMjUxMDI5MTIwMDUxWjAzMTEwLwYDVQQD
EyhmNmE3ZmJiYzcxZDc0ZTE2ZjM0ZWU2Zjg1MjUxZmQwZjgxYjEwNTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGFbN6SyBwXex34KeowTQBzx6Ppe
m3vZgHqrTHXBfSwuUV1hpeR/z/M2rtvMBBGlFbR2SPRY9vCtnxD6pCbfQPRaKlea
lDUrXSy3BQ7pwJpOt6DdK44VqN6yLtF6Q3vhzojN3BbduZ1CSnLdBHE1fC4WEtn8
F4niGCtcJkaeVzl905vKLbLHjp52uj28RvkVgtbsuBdvANn/dKtcJ3iCKVkQ5rjE
fZJzP9g9VCQ3X9bAF4oMqTYVLzhyov6xjh95zog6awinCDKrXUNDXLL+dlPNgDfo
qu8cwjE/EFNK7XSmqCV1uz3bTdf1j3OSbaH7efPnYGaA4gOJw+f5eBSfewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPan+7xx104W807m+FJR/Q+BsQVMMB8GA1UdIwQY
MBaAFCAf5pgevLySPI5J9IRSRB0IDmbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUJfbW1CNjh2Skk4amtuMGhGSkVIUWdPWnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80NGIyYjItYjQ1YS00MDUzLWJlMjkt
MjcyNGY5MmJkNTZlLzEvSUJfbW1CNjh2Skk4amtuMGhGSkVIUWdPWnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80NGIyYjItYjQ1YS00MDUzLWJlMjktMjcyNGY5MmJkNTZl
LzEvSUJfbW1CNjh2Skk4amtuMGhGSkVIUWdPWnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5CKjiTE
9EvQrVcrFkJoyX7hJsHVYDcZakeUXUOwz05Zbz3qymLzuPjwwObLVKiT9JFrEkf2
OxuorE84MZWZXy/SZOV8XdONA+u6sZbHpdw126y9eyuwsYVGvKK87deb9ZnHfSFR
IGTAEjtKFQUujLMz1hnzvlE5ScCqJvfJjLzgP6Sh9tgE5ssXUfXy0up6GeB5Airc
V7QSDR+RrYMYuUGN2mxEcLicFSQBa/qzPUyNTJzARgTzdulhmuBt1Rc3HbgsSJbr
mmJISzMNVNe+nUEpq2LREPHO6slj16uUFxsx5djQP4J4CQSjFIjBxIIZMdV+JaOM
wqAE24rXpoogUA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 16:21:42 2025 by rpki-client