Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
File: IYLNOsXE22fqcxprcZi31uT_EVw.mft (raw, json)
Hash identifier: ESYczRwObwXtseKX617kwA6NoXX3u32qo6vBfNtbqHk=
Subject key identifier: AE:01:49:02:77:E6:34:63:18:FF:2B:52:6A:EE:A0:9A:D4:CC:EF:27
Authority key identifier: 21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
Certificate issuer: /CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Certificate serial: 019A718094BD25548E54C19041E0F18A1DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
Manifest number: 1186
Signing time: Tue 11 Nov 2025 06:00:43 +0000
Manifest this update: Tue 11 Nov 2025 06:00:43 +0000
Manifest next update: Wed 12 Nov 2025 06:00:43 +0000
Files and hashes: 1: IYLNOsXE22fqcxprcZi31uT_EVw.crl (hash: q+182XU3A/f8SUC2LN/9Lo8KYTwuQDxv0pwRnbhNdP0=)
2: zZFMBY-vtS-_iOLRNRnhU51Vas8.roa (hash: s23taZmL6D/J5bfrJpfCP1J8Y6gIlBQ0Q9KqDNbhx3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:94:bd:25:54:8e:54:c1:90:41:e0:f1:8a:1d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Validity
Not Before: Nov 11 06:00:43 2025 GMT
Not After : Nov 12 06:00:43 2025 GMT
Subject: CN=ae01490277e6346318ff2b526aeea09ad4ccef27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:44:56:47:92:fd:9f:1c:bb:e5:43:3f:c6:
89:4d:fc:dc:45:cf:27:3c:c7:e7:0e:c9:72:95:b0:
a9:52:b1:eb:88:ac:cd:dc:cc:0e:f8:b1:9f:79:1c:
33:ca:25:ec:e9:35:2a:41:0e:09:23:e9:5c:f2:d3:
6a:5b:62:84:00:86:42:47:89:09:27:3f:75:54:4f:
3a:27:75:59:f9:d1:3c:6a:2a:1b:a5:84:5a:a4:51:
84:f6:10:4f:f9:9a:c8:80:5f:f1:54:84:8d:6e:20:
57:cf:03:cd:8e:25:09:28:92:aa:cb:9e:00:48:7d:
f8:5b:49:fb:16:3f:b3:37:35:2f:7c:c4:c7:b2:fa:
00:a2:96:46:d7:27:7b:eb:76:d2:cd:00:be:dc:3a:
16:d4:19:7d:7a:13:71:29:59:60:ad:f2:3b:54:2a:
ca:9c:07:39:54:57:0a:5e:ec:79:a1:56:1f:6d:27:
8a:de:a7:4d:02:24:5a:03:11:3e:02:20:4d:c3:40:
3f:b3:de:67:fb:48:9a:8b:87:71:22:0a:94:f1:cf:
29:ef:02:a7:b7:1e:dd:ee:8c:56:bb:01:9f:01:ad:
0f:e0:a5:87:c8:4d:9e:b9:aa:d9:87:85:9f:6f:d1:
e6:1b:ec:49:a2:8a:36:fb:72:1a:fd:54:55:9e:dd:
37:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:01:49:02:77:E6:34:63:18:FF:2B:52:6A:EE:A0:9A:D4:CC:EF:27
X509v3 Authority Key Identifier:
keyid:21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d4:f9:37:d7:d1:52:00:74:fc:59:0f:74:c2:6c:5d:a4:b7:
57:fc:fb:ca:da:8d:19:6b:9b:ad:38:19:eb:9a:70:ee:1f:66:
a8:73:28:ee:66:9e:c9:8c:5c:89:6b:f3:1d:55:20:b5:85:bf:
bc:97:db:5c:e9:6e:3d:89:a9:19:eb:39:74:ff:c1:f2:67:21:
c1:48:ab:5c:52:83:ee:f9:4f:ba:fd:d6:ee:81:57:8c:42:4c:
1d:c9:12:07:ae:be:41:77:26:1c:a8:83:eb:a6:d5:0a:c1:46:
2d:31:ad:d1:93:15:0c:ce:63:c6:78:8b:77:72:1b:00:4d:11:
09:2b:d5:4d:59:3b:a5:6c:5a:79:c3:c0:32:12:e2:93:60:61:
35:c7:0f:da:91:b0:56:58:3b:c6:49:39:69:3d:8e:b3:8e:4b:
1a:fb:db:2e:5d:f9:87:13:db:39:25:02:ef:fe:3c:03:66:4f:
67:f2:7d:5a:8c:4f:34:b6:13:54:bf:7e:d5:d5:1b:73:d5:f7:
f4:7d:7d:7b:5a:93:54:9b:a5:fb:82:5d:fa:b0:39:a9:8a:38:
4e:f7:ce:e1:81:56:85:66:d4:4e:71:27:81:fd:f8:9c:bf:79:
a2:74:38:b5:b7:fc:aa:12:a7:26:2e:65:07:93:e6:a7:54:9f:
05:f4:46:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgJS9JVSOVMGQQeDxih2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODJjZDNhYzVjNGRiNjdlYTczMWE2YjcxOThiN2Q2ZTRm
ZjExNWMwHhcNMjUxMTExMDYwMDQzWhcNMjUxMTEyMDYwMDQzWjAzMTEwLwYDVQQD
EyhhZTAxNDkwMjc3ZTYzNDYzMThmZjJiNTI2YWVlYTA5YWQ0Y2NlZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPxEVkeS/Z8cu+VDP8aJTfzcRc8n
PMfnDslylbCpUrHriKzN3MwO+LGfeRwzyiXs6TUqQQ4JI+lc8tNqW2KEAIZCR4kJ
Jz91VE86J3VZ+dE8aiobpYRapFGE9hBP+ZrIgF/xVISNbiBXzwPNjiUJKJKqy54A
SH34W0n7Fj+zNzUvfMTHsvoAopZG1yd763bSzQC+3DoW1Bl9ehNxKVlgrfI7VCrK
nAc5VFcKXux5oVYfbSeK3qdNAiRaAxE+AiBNw0A/s95n+0iai4dxIgqU8c8p7wKn
tx7d7oxWuwGfAa0P4KWHyE2euarZh4Wfb9HmG+xJooo2+3Ia/VRVnt03owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4BSQJ35jRjGP8rUmruoJrUzO8nMB8GA1UdIwQY
MBaAFCGCzTrFxNtn6nMaa3GYt9bk/xFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlMTk9zWEUyMmZxY3hwcmNaaTMxdVRfRVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yZmFlYjUtNmExZC00YTEzLWJhMWYt
NDY2M2JjOWRhOTY0LzEvSVlMTk9zWEUyMmZxY3hwcmNaaTMxdVRfRVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yZmFlYjUtNmExZC00YTEzLWJhMWYtNDY2M2JjOWRhOTY0
LzEvSVlMTk9zWEUyMmZxY3hwcmNaaTMxdVRfRVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNT5N9fR
UgB0/FkPdMJsXaS3V/z7ytqNGWubrTgZ65pw7h9mqHMo7maeyYxciWvzHVUgtYW/
vJfbXOluPYmpGes5dP/B8mchwUirXFKD7vlPuv3W7oFXjEJMHckSB66+QXcmHKiD
66bVCsFGLTGt0ZMVDM5jxniLd3IbAE0RCSvVTVk7pWxaecPAMhLik2BhNccP2pGw
Vlg7xkk5aT2Os45LGvvbLl35hxPbOSUC7/48A2ZPZ/J9WoxPNLYTVL9+1dUbc9X3
9H19e1qTVJul+4Jd+rA5qYo4TvfO4YFWhWbUTnEngf34nL95onQ4tbf8qhKnJi5l
B5Pmp1SfBfRGBg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:44 2025 by rpki-client