Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
File: iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft (raw, json)
Hash identifier: 35hGq3TsWVU64yOCjsN5doe7HPN3rhT2BpzgtruLIjg=
Subject key identifier: F8:75:2D:D9:F8:DA:8C:DA:03:77:3D:22:BD:E8:F4:BD:4A:92:4C:37
Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Certificate issuer: /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Certificate serial: 019A72257D54489960F60D6FBB597CC32611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:00:50 +0000
Manifest this update: Tue 11 Nov 2025 09:00:50 +0000
Manifest next update: Wed 12 Nov 2025 09:00:50 +0000
Files and hashes: 1: RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa (hash: pKnXAopaFCsi1rLxZMLLXoTv9xoOBoXWRjgeegBslqw=)
2: iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl (hash: pXckT4f2H9pQHb8GBxnJ/fUav7K8eokoMhKiCjUH92g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:7d:54:48:99:60:f6:0d:6f:bb:59:7c:c3:26:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Validity
Not Before: Nov 11 09:00:50 2025 GMT
Not After : Nov 12 09:00:50 2025 GMT
Subject: CN=f8752dd9f8da8cda03773d22bde8f4bd4a924c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:0e:5e:2d:2e:bc:f6:a7:57:ff:81:c2:17:
77:07:82:77:01:93:d0:1b:14:e8:cc:8b:a4:53:10:
e5:14:33:a7:e0:25:c8:23:72:07:9d:fb:d9:84:e8:
2a:52:c1:61:fb:b0:29:2d:b9:09:cc:c9:cb:ac:a5:
98:da:e2:9f:70:88:f2:f5:7e:50:76:8f:a1:61:76:
65:da:39:e8:04:34:fd:c7:23:f9:e8:e3:99:55:00:
cb:fa:08:73:d7:17:14:73:0f:f9:f4:18:a7:11:6d:
2c:9d:e9:b1:b1:00:57:65:74:18:a8:3a:80:e6:ec:
b2:a5:cf:c2:38:bd:45:76:f4:e4:03:3b:b5:db:03:
ee:f5:46:8e:ba:b3:68:86:27:6e:08:1a:6b:d0:c6:
c7:6f:1e:a7:13:af:74:b5:29:66:f4:37:f5:6b:ce:
e8:41:2b:b7:72:3d:0a:45:06:d1:2a:71:a7:69:19:
78:72:09:14:0c:7b:f0:3f:75:8f:3a:38:65:09:0c:
6b:5f:de:b0:2e:9a:08:71:c0:e6:73:49:ef:77:30:
3e:f8:f3:1b:4f:e2:68:84:a4:22:b5:22:16:10:77:
0f:52:fd:05:7d:d7:ba:75:72:7a:72:17:d9:d2:76:
a2:91:f4:4b:6d:1f:6c:da:9f:23:3e:e3:22:96:94:
2d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:75:2D:D9:F8:DA:8C:DA:03:77:3D:22:BD:E8:F4:BD:4A:92:4C:37
X509v3 Authority Key Identifier:
keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:82:62:77:4d:b4:38:1b:ef:fe:ba:4d:ea:9f:b3:ca:6c:0c:
e9:0d:b8:f6:ab:73:b8:89:c7:2c:e3:7a:5b:8e:b7:56:3d:18:
5a:ad:07:c3:c1:e1:b1:f9:20:4f:d6:bf:c6:c7:6c:be:11:33:
ad:8d:57:9d:0d:d2:86:c9:bb:f1:75:4a:ae:5a:6c:c2:d2:9b:
c5:77:ce:bf:48:4f:5d:25:ae:92:e1:cd:59:21:a3:1b:40:45:
0a:a2:29:4d:7d:3c:9a:b4:b3:cf:0b:9e:76:5b:a5:80:c5:2c:
dc:ec:23:e7:97:f5:4b:7c:dd:61:a6:93:b0:36:c5:52:36:e0:
72:1f:85:8d:29:76:f5:77:4f:d0:78:fa:25:33:44:3e:0f:2e:
76:08:c6:26:f0:e2:7b:2c:ef:be:3d:67:94:68:7d:ec:00:29:
22:11:04:d3:89:00:42:32:36:63:1a:a3:da:0d:0e:c2:fc:89:
0d:87:f8:b4:c2:b4:4d:48:ca:74:3b:f3:a4:71:73:55:f8:ce:
9e:4c:df:78:d5:da:b8:20:18:d4:8c:c6:cb:f9:ee:db:0a:b9:
a7:4d:7d:33:2f:66:8f:9d:d3:b9:64:ba:aa:96:cf:07:d4:5c:
45:40:95:58:51:d5:1c:97:ff:dc:1d:98:80:b0:72:51:c0:bd:
60:8d:ac:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJX1USJlg9g1vu1l8wyYRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZDVlMDlhZjgyYTk2OTE4Yzg2YTY0N2I0ZWRjZDhlYmIy
MzgyMGQwHhcNMjUxMTExMDkwMDUwWhcNMjUxMTEyMDkwMDUwWjAzMTEwLwYDVQQD
EyhmODc1MmRkOWY4ZGE4Y2RhMDM3NzNkMjJiZGU4ZjRiZDRhOTI0YzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6sOXi0uvPanV/+Bwhd3B4J3AZPQ
GxTozIukUxDlFDOn4CXII3IHnfvZhOgqUsFh+7ApLbkJzMnLrKWY2uKfcIjy9X5Q
do+hYXZl2jnoBDT9xyP56OOZVQDL+ghz1xcUcw/59BinEW0snemxsQBXZXQYqDqA
5uyypc/COL1FdvTkAzu12wPu9UaOurNohiduCBpr0MbHbx6nE690tSlm9Df1a87o
QSu3cj0KRQbRKnGnaRl4cgkUDHvwP3WPOjhlCQxrX96wLpoIccDmc0nvdzA++PMb
T+JohKQitSIWEHcPUv0Ffde6dXJ6chfZ0naikfRLbR9s2p8jPuMilpQtcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPh1Ldn42ozaA3c9Ir3o9L1Kkkw3MB8GA1UdIwQY
MBaAFIjV4Jr4KpaRjIamR7TtzY67I4INMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ZGJlOTMtNWRmOC00OGEzLTg2MTMt
MjkzYjYyNzk0ODUwLzEvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83ZGJlOTMtNWRmOC00OGEzLTg2MTMtMjkzYjYyNzk0ODUw
LzEvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooJid020
OBvv/rpN6p+zymwM6Q249qtzuInHLON6W463Vj0YWq0Hw8HhsfkgT9a/xsdsvhEz
rY1XnQ3Shsm78XVKrlpswtKbxXfOv0hPXSWukuHNWSGjG0BFCqIpTX08mrSzzwue
dlulgMUs3Owj55f1S3zdYaaTsDbFUjbgch+FjSl29XdP0Hj6JTNEPg8udgjGJvDi
eyzvvj1nlGh97AApIhEE04kAQjI2Yxqj2g0OwvyJDYf4tMK0TUjKdDvzpHFzVfjO
nkzfeNXauCAY1IzGy/nu2wq5p019My9mj53TuWS6qpbPB9RcRUCVWFHVHJf/3B2Y
gLByUcC9YI2s2A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:44 2025 by rpki-client