Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File: idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier: 16SmegxB8TKPhNnnWZ7YAghGYzi9eJc4yZyx6PFzyqw=
Subject key identifier: F5:AF:16:E5:2E:91:63:04:A3:D5:F2:4D:AA:BD:99:1A:7B:BF:43:EB
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 019A15A9BFFD1896A09D69DEC70DF667FB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number: 171E
Signing time: Fri 24 Oct 2025 10:00:37 +0000
Manifest this update: Fri 24 Oct 2025 10:00:37 +0000
Manifest next update: Sat 25 Oct 2025 10:00:37 +0000
Files and hashes: 1: NiGYqg5TAswBXGUoDDk3K-vSfzg.roa (hash: oBryaxq11NqGZi9VWM48AWdrC2u99cuTtHQY7Z60FIs=)
2: WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa (hash: OqboybhTqeUl9b9SecOseaZfDnk1cvhEpGeclcmitv4=)
3: XfXS8ijvqtsMHkla-Me1RcI7IwA.roa (hash: 2RtkbeEIEVw4twW1PRZ/J8F/rTi3ZGd/QdB8lfuZFqE=)
4: bjCT3AVcMSsUvzlUV22vDpDgm88.roa (hash: x4ngTz88Z2Xqe2E3hfhNz2+VZin5gGJSvgjTiP2om64=)
5: fkq-oahmsSqrVUTtF-STfDckmnU.roa (hash: mVtrIUuQCxsrmw0YepuR3MHRKtv6BfBxn8f0qa7KMLk=)
6: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: tWPH2vW31zQkneJlrZOVRSPRXnyS3ej/NV18ia0n0C0=)
7: u7Bic-zzMP1Iys3M73ZkiMffy74.roa (hash: PFfJrw/TlR3YpR2p/4mJqLKX4yyUo6fGvlNS1uayrpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:a9:bf:fd:18:96:a0:9d:69:de:c7:0d:f6:67:fb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Oct 24 10:00:37 2025 GMT
Not After : Oct 25 10:00:37 2025 GMT
Subject: CN=f5af16e52e916304a3d5f24daabd991a7bbf43eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:4f:28:5e:63:5d:8d:b1:d5:79:bf:d5:84:
c7:91:51:97:b1:61:46:b5:25:e9:74:8b:dd:ea:9d:
11:d7:ad:ad:16:e1:fd:0a:22:85:d1:48:23:92:06:
65:9e:e6:27:96:82:0d:71:03:32:b5:b9:18:f1:43:
e9:c0:23:6b:e4:22:0f:77:61:b9:03:2e:88:65:45:
6f:dd:25:17:f0:0f:6d:1c:1d:52:1d:b3:69:1e:0a:
fa:8f:87:bc:f9:b9:a1:51:f0:51:2d:00:9c:f1:66:
cf:ac:4e:15:4f:12:6d:c1:ef:ca:1a:ea:8e:11:d5:
8c:93:5b:dd:d4:7f:00:81:08:d9:39:d3:d4:32:73:
89:32:5c:f3:a8:5e:5a:0a:36:40:10:4b:63:29:4c:
9a:07:13:8e:d5:93:20:3c:f4:6e:d1:f8:0a:37:8d:
38:de:4c:6a:4d:be:44:e9:95:d0:c2:2f:6b:b9:cb:
39:11:25:db:4f:a7:98:2a:7b:2f:8c:8b:23:a5:96:
75:78:8c:0a:97:fb:7b:c5:5e:38:e7:f0:69:39:88:
d4:d5:c0:f7:0a:9d:ff:8f:b7:bc:1d:2a:d5:c3:4d:
66:a2:ef:39:cf:ef:77:b9:dc:64:51:76:60:cb:09:
7a:2d:d9:1e:53:c0:bd:67:d0:cc:f2:8f:34:6f:15:
f0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AF:16:E5:2E:91:63:04:A3:D5:F2:4D:AA:BD:99:1A:7B:BF:43:EB
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:92:e6:f6:62:3d:85:2a:d3:56:ca:68:cf:e2:74:0c:19:e2:
b7:9f:49:aa:ba:33:b3:fe:3d:f3:12:c4:1b:b9:43:b9:ff:17:
3d:3a:06:f8:39:55:8f:96:b7:2b:d2:63:bc:fc:7d:c2:55:f0:
dd:f5:22:77:01:84:b0:69:5c:0e:9a:cc:79:4b:9a:a6:6a:e2:
d7:28:70:6f:6d:41:52:1e:ab:1a:e9:e1:a4:95:46:48:02:40:
15:c9:ef:da:f3:91:df:2a:6f:7b:30:08:eb:6d:04:c4:19:57:
4d:eb:98:79:91:54:fc:09:45:7b:2a:74:eb:fe:6c:e8:55:c8:
40:da:d4:74:55:2d:12:a3:71:73:d7:17:78:38:52:5e:7f:ca:
df:70:6d:40:7a:2d:c1:c6:32:d9:71:d4:55:be:cc:5e:02:f1:
fd:4b:27:d1:de:35:5b:ee:01:05:20:dc:54:ee:59:62:26:45:
2c:51:4a:e2:1c:65:bb:a4:05:48:ea:fc:93:b6:88:5b:4c:d9:
e0:f0:14:80:c4:39:5f:ba:45:77:72:87:66:46:3f:42:4a:20:
2a:01:be:47:ff:eb:9e:4f:26:57:0f:bc:62:2a:5f:11:c5:d6:
b5:12:72:e3:c1:f5:16:ed:81:6c:bb:7b:a0:01:97:07:10:4c:
60:fb:13:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoVqb/9GJagnWnexw32Z/uOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZGE2MGYwNDlkZmJhMzRiZTRiNGU4NDE4YjlmZjQ5MjEy
NWM0NDkwHhcNMjUxMDI0MTAwMDM3WhcNMjUxMDI1MTAwMDM3WjAzMTEwLwYDVQQD
EyhmNWFmMTZlNTJlOTE2MzA0YTNkNWYyNGRhYWJkOTkxYTdiYmY0M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+dPKF5jXY2x1Xm/1YTHkVGXsWFG
tSXpdIvd6p0R162tFuH9CiKF0UgjkgZlnuYnloINcQMytbkY8UPpwCNr5CIPd2G5
Ay6IZUVv3SUX8A9tHB1SHbNpHgr6j4e8+bmhUfBRLQCc8WbPrE4VTxJtwe/KGuqO
EdWMk1vd1H8AgQjZOdPUMnOJMlzzqF5aCjZAEEtjKUyaBxOO1ZMgPPRu0fgKN404
3kxqTb5E6ZXQwi9rucs5ESXbT6eYKnsvjIsjpZZ1eIwKl/t7xV445/BpOYjU1cD3
Cp3/j7e8HSrVw01mou85z+93udxkUXZgywl6LdkeU8C9Z9DM8o80bxXwOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWvFuUukWMEo9XyTaq9mRp7v0PrMB8GA1UdIwQY
MBaAFInaYPBJ37o0vktOhBi5/0khJcRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUt
Njk4OTBjODI5ZTMzLzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUtNjk4OTBjODI5ZTMz
LzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5Lm9mI9
hSrTVspoz+J0DBnit59Jqrozs/498xLEG7lDuf8XPToG+DlVj5a3K9JjvPx9wlXw
3fUidwGEsGlcDprMeUuapmri1yhwb21BUh6rGunhpJVGSAJAFcnv2vOR3ypvezAI
620ExBlXTeuYeZFU/AlFeyp06/5s6FXIQNrUdFUtEqNxc9cXeDhSXn/K33BtQHot
wcYy2XHUVb7MXgLx/Usn0d41W+4BBSDcVO5ZYiZFLFFK4hxlu6QFSOr8k7aIW0zZ
4PAUgMQ5X7pFd3KHZkY/QkogKgG+R//rnk8mVw+8YipfEcXWtRJy48H1Fu2BbLt7
oAGXBxBMYPsTkA==
-----END CERTIFICATE-----
Generated at Fri Oct 24 16:50:32 2025 by rpki-client