Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
File: IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft (raw, json)
Hash identifier: C8FFhmQxcMWOgQo8M3ARzCUMCctQaty9u88BBXk0t/Q=
Subject key identifier: 52:76:B9:55:8C:0B:2E:25:A1:06:F1:F6:96:10:76:EC:FF:CC:61:C0
Authority key identifier: 20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
Certificate issuer: /CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Certificate serial: 019A1BAC0766B3506E952C532DE15027ACC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
Manifest number: 0D58
Signing time: Sat 25 Oct 2025 14:00:50 +0000
Manifest this update: Sat 25 Oct 2025 14:00:50 +0000
Manifest next update: Sun 26 Oct 2025 14:00:50 +0000
Files and hashes: 1: IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl (hash: l4AfBCsTr5vNf2U75M4jVZPDN8i7U/QgylcXcJy/HT0=)
2: yvbz_UH1uJZVqDKchWjC2DbH2u0.roa (hash: A7u8f2W74RMi57K78M26+2R7Yi1xzIaztv6J4Ydr5ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:ac:07:66:b3:50:6e:95:2c:53:2d:e1:50:27:ac:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Validity
Not Before: Oct 25 14:00:50 2025 GMT
Not After : Oct 26 14:00:50 2025 GMT
Subject: CN=5276b9558c0b2e25a106f1f6961076ecffcc61c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d6:6c:23:34:73:da:cc:81:73:76:e3:0e:54:
3c:8a:5b:e5:c6:cc:3a:e6:3d:8a:85:f8:5e:1d:af:
83:69:a7:69:5d:cd:08:3d:4f:83:ad:68:5a:7d:f5:
0a:d3:8e:58:57:35:15:91:02:e2:c4:38:66:22:bc:
56:b7:a3:4d:ff:6a:05:aa:3d:ae:4b:99:04:31:96:
fb:0b:66:73:94:8a:1e:a4:69:07:87:24:64:4d:3b:
d8:98:ad:e8:72:29:f3:e4:e5:ab:e5:2a:3b:81:db:
01:e1:e6:5f:2b:68:14:d6:30:38:8a:ce:0e:1e:a1:
b5:be:16:c9:df:f8:8d:27:67:fd:a2:b1:0c:88:da:
6b:43:c1:f0:75:5a:bd:99:7b:0b:64:6d:f0:1f:3a:
3b:9a:53:80:9e:bd:a6:77:61:1e:84:51:42:bb:cb:
d3:35:5e:3d:c9:2e:a5:07:18:71:1a:46:89:cf:e1:
7b:a6:a6:58:13:98:c8:69:7a:10:8b:48:ec:e5:f0:
64:ea:aa:09:dd:8b:c0:c7:8d:15:20:ac:cd:a2:cf:
5c:c8:97:fc:5d:60:f7:c3:e3:fd:95:96:17:26:e3:
43:1b:20:d8:74:6f:5e:36:ff:c6:56:69:68:10:a2:
06:fe:a5:3f:15:85:80:2c:87:8c:3b:eb:ab:69:2c:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:76:B9:55:8C:0B:2E:25:A1:06:F1:F6:96:10:76:EC:FF:CC:61:C0
X509v3 Authority Key Identifier:
keyid:20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8f:58:95:cc:f3:da:1c:a4:b5:1c:f7:96:1c:08:e6:98:ed:
90:fd:c8:55:e9:80:e2:21:8e:50:70:0b:ab:87:1d:89:c6:18:
f4:4a:ce:36:e8:5f:91:85:1a:ec:5d:b1:19:c2:ef:5d:82:2a:
8f:0c:35:a5:bb:57:ed:e1:9a:b6:ca:c9:2a:d5:13:10:af:d4:
43:8f:bd:3f:fa:cd:c2:a7:99:16:f6:d5:12:93:3e:88:b9:1c:
0a:d1:75:25:74:93:79:ee:fa:01:a8:09:7d:35:c8:4b:0c:62:
5f:4e:72:f9:b9:d8:44:d9:cf:d6:08:1f:7a:d9:2a:29:66:e8:
33:45:6c:4d:cc:34:5f:68:87:f2:80:0f:98:fa:32:10:d4:f3:
31:28:c5:05:56:70:ff:cd:9a:85:19:73:e9:b6:24:23:2d:fa:
64:83:86:db:63:46:38:53:96:99:d1:a8:c1:88:77:fd:3d:fd:
96:26:56:53:0f:6d:4d:87:78:2f:5b:4a:53:ba:95:f7:03:3e:
92:29:a5:10:9f:13:bc:91:b1:b8:f8:61:f1:b2:b3:8e:70:b3:
b4:98:f8:44:33:82:5c:18:93:9d:52:b3:b3:ae:02:ac:95:cb:
13:81:78:15:e6:ae:35:5e:f6:00:70:32:16:49:17:5c:d4:48:
2d:5c:d2:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZobrAdms1BulSxTLeFQJ6zDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZjgxMjc0ZjY2YmRlODlmMTJjMjQzZDA5YTllZGMzZTVi
MWUyMjkwHhcNMjUxMDI1MTQwMDUwWhcNMjUxMDI2MTQwMDUwWjAzMTEwLwYDVQQD
Eyg1Mjc2Yjk1NThjMGIyZTI1YTEwNmYxZjY5NjEwNzZlY2ZmY2M2MWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NZsIzRz2syBc3bjDlQ8ilvlxsw6
5j2KhfheHa+DaadpXc0IPU+DrWhaffUK045YVzUVkQLixDhmIrxWt6NN/2oFqj2u
S5kEMZb7C2ZzlIoepGkHhyRkTTvYmK3ocinz5OWr5So7gdsB4eZfK2gU1jA4is4O
HqG1vhbJ3/iNJ2f9orEMiNprQ8HwdVq9mXsLZG3wHzo7mlOAnr2md2EehFFCu8vT
NV49yS6lBxhxGkaJz+F7pqZYE5jIaXoQi0js5fBk6qoJ3YvAx40VIKzNos9cyJf8
XWD3w+P9lZYXJuNDGyDYdG9eNv/GVmloEKIG/qU/FYWALIeMO+uraSxhFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJ2uVWMCy4loQbx9pYQduz/zGHAMB8GA1UdIwQY
MBaAFCD4EnT2a96J8SwkPQmp7cPlseIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zZWY5NmUtZjhhNi00ZjliLTliYzct
ZmUyNmU4OTlkZWI4LzEvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zZWY5NmUtZjhhNi00ZjliLTliYzctZmUyNmU4OTlkZWI4
LzEvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADY9Ylczz
2hyktRz3lhwI5pjtkP3IVemA4iGOUHALq4cdicYY9ErONuhfkYUa7F2xGcLvXYIq
jww1pbtX7eGatsrJKtUTEK/UQ4+9P/rNwqeZFvbVEpM+iLkcCtF1JXSTee76AagJ
fTXISwxiX05y+bnYRNnP1ggfetkqKWboM0VsTcw0X2iH8oAPmPoyENTzMSjFBVZw
/82ahRlz6bYkIy36ZIOG22NGOFOWmdGowYh3/T39liZWUw9tTYd4L1tKU7qV9wM+
kimlEJ8TvJGxuPhh8bKzjnCztJj4RDOCXBiTnVKzs64CrJXLE4F4FeauNV72AHAy
FkkXXNRILVzSFA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 21:13:33 2025 by rpki-client