Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
File: IkI4OfIQchYnZBrmtszqzujZBns.mft (raw, json)
Hash identifier: tySA1orrgj2prbOR02Qz9PuQvYVAw8sU3ifPMXViNfI=
Subject key identifier: 53:87:2D:A2:73:4E:DF:5F:8B:1A:DC:6A:2E:9B:70:46:6F:E6:DE:AD
Authority key identifier: 22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
Certificate issuer: /CN=22423839f210721627641ae6b6cceacee8d9067b
Certificate serial: 0199225531722A02B11E4EB6DFA10975F122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
Manifest number: 0BB4
Signing time: Sun 07 Sep 2025 04:00:32 +0000
Manifest this update: Sun 07 Sep 2025 04:00:32 +0000
Manifest next update: Mon 08 Sep 2025 04:00:32 +0000
Files and hashes: 1: IkI4OfIQchYnZBrmtszqzujZBns.crl (hash: pyN9H/3gJx3WfXr8/dqu5DxbhC4Qpyg4sGWILYrYsBs=)
2: Uyg4_Ozw9Ipj9uu784y9KAfEr7A.roa (hash: PWFMCOTkx94rFl6c7QVt2h1VgycYcWOsnSvIAK4MJo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:31:72:2a:02:b1:1e:4e:b6:df:a1:09:75:f1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22423839f210721627641ae6b6cceacee8d9067b
Validity
Not Before: Sep 7 04:00:32 2025 GMT
Not After : Sep 8 04:00:32 2025 GMT
Subject: CN=53872da2734edf5f8b1adc6a2e9b70466fe6dead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a3:df:7d:f5:f4:fe:14:55:c5:21:17:45:58:
ab:de:c8:fd:11:73:9f:9e:6d:87:1b:84:cd:40:51:
1f:e9:22:c8:ce:00:dc:7b:a4:6f:f1:89:eb:c5:a7:
bd:14:b5:0d:57:8f:fe:7f:f7:7a:3a:94:cc:4f:78:
dd:99:14:fd:11:32:e9:c0:0c:55:d2:3f:58:59:aa:
b4:53:91:78:c2:5e:d1:4a:4e:49:78:a2:ed:57:1b:
08:a9:40:ba:00:0c:dc:af:37:dc:45:ef:1d:b7:2b:
9f:36:89:60:fd:13:3e:71:75:93:2a:87:e3:8b:ab:
e2:8b:5c:2e:f3:b7:6e:5e:9b:02:c2:50:ae:c2:b4:
8e:03:e1:45:7b:7a:94:05:2a:fd:e3:e6:cf:a8:d7:
c0:d6:f3:ea:35:3c:2b:2c:78:1f:64:74:88:20:44:
b2:ab:65:6c:bc:ff:22:a4:7e:8a:8b:4a:2e:40:8a:
87:dc:5e:dd:b8:49:5c:d5:aa:9a:6e:4d:1f:93:11:
23:1e:3d:22:18:4d:53:fa:ba:04:7f:7c:cd:02:4f:
99:c8:c9:70:94:0b:e1:d6:f5:4c:ac:3c:2f:94:ee:
15:36:fb:f4:67:c3:3a:6a:d8:e8:43:2b:eb:94:db:
66:fb:7c:bf:0f:23:22:06:7c:4a:42:fa:be:21:3a:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:87:2D:A2:73:4E:DF:5F:8B:1A:DC:6A:2E:9B:70:46:6F:E6:DE:AD
X509v3 Authority Key Identifier:
keyid:22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0a:cd:9a:d3:f3:7e:d1:13:0f:0a:e1:6d:86:11:f4:60:9e:
09:a1:0f:16:37:cd:fc:12:a3:4f:f1:04:fe:93:f8:fe:85:20:
e4:ee:9a:61:e5:15:08:c3:59:77:e2:86:29:ca:df:7a:80:a2:
e5:ad:68:66:f7:7b:19:09:de:16:a7:8a:12:5e:f0:16:23:37:
a2:04:96:71:f2:31:75:0b:07:9a:47:ee:e3:98:44:10:db:a3:
c9:35:46:b1:79:10:df:d2:c9:6c:41:f4:a7:02:29:64:ee:04:
5f:95:24:81:84:91:84:ca:5e:99:e7:b2:cb:5b:e1:b9:3f:bd:
fc:de:41:d6:00:96:ce:fe:18:8f:4f:36:a3:10:05:5c:be:4f:
1d:99:b6:19:23:e0:39:70:3b:00:5e:95:aa:5a:cb:c7:19:06:
36:f3:13:87:9a:33:5e:4c:cb:b5:fc:e5:74:6d:e7:0a:b4:53:
38:cf:36:64:6c:9e:a6:cb:fd:ab:45:70:e5:a2:5d:7f:31:ff:
6a:d2:11:82:b0:7f:a2:2f:21:a9:0f:1a:1b:15:f2:09:8b:36:
fb:1d:5b:b5:21:ed:f4:14:17:e1:ed:f8:2a:27:b5:51:ea:46:
c7:a2:62:42:e3:01:89:70:c3:19:ea:c3:f7:1b:0c:19:12:a2:
80:9a:23:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVTFyKgKxHk6236EJdfEiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNDIzODM5ZjIxMDcyMTYyNzY0MWFlNmI2Y2NlYWNlZThk
OTA2N2IwHhcNMjUwOTA3MDQwMDMyWhcNMjUwOTA4MDQwMDMyWjAzMTEwLwYDVQQD
Eyg1Mzg3MmRhMjczNGVkZjVmOGIxYWRjNmEyZTliNzA0NjZmZTZkZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KPfffX0/hRVxSEXRVir3sj9EXOf
nm2HG4TNQFEf6SLIzgDce6Rv8Ynrxae9FLUNV4/+f/d6OpTMT3jdmRT9ETLpwAxV
0j9YWaq0U5F4wl7RSk5JeKLtVxsIqUC6AAzcrzfcRe8dtyufNolg/RM+cXWTKofj
i6vii1wu87duXpsCwlCuwrSOA+FFe3qUBSr94+bPqNfA1vPqNTwrLHgfZHSIIESy
q2VsvP8ipH6Ki0ouQIqH3F7duElc1aqabk0fkxEjHj0iGE1T+roEf3zNAk+ZyMlw
lAvh1vVMrDwvlO4VNvv0Z8M6atjoQyvrlNtm+3y/DyMiBnxKQvq+ITr+YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOHLaJzTt9fixrcai6bcEZv5t6tMB8GA1UdIwQY
MBaAFCJCODnyEHIWJ2Qa5rbM6s7o2QZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWtJNE9mSVFjaFluWkJybXRzenF6dWpaQm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mOGFiNDgtMDVkMC00ZjljLThiMGYt
OThjODc1YWUzNWM5LzEvSWtJNE9mSVFjaFluWkJybXRzenF6dWpaQm5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9mOGFiNDgtMDVkMC00ZjljLThiMGYtOThjODc1YWUzNWM5
LzEvSWtJNE9mSVFjaFluWkJybXRzenF6dWpaQm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKArNmtPz
ftETDwrhbYYR9GCeCaEPFjfN/BKjT/EE/pP4/oUg5O6aYeUVCMNZd+KGKcrfeoCi
5a1oZvd7GQneFqeKEl7wFiM3ogSWcfIxdQsHmkfu45hEENujyTVGsXkQ39LJbEH0
pwIpZO4EX5UkgYSRhMpemeeyy1vhuT+9/N5B1gCWzv4Yj082oxAFXL5PHZm2GSPg
OXA7AF6VqlrLxxkGNvMTh5ozXkzLtfzldG3nCrRTOM82ZGyepsv9q0Vw5aJdfzH/
atIRgrB/oi8hqQ8aGxXyCYs2+x1btSHt9BQX4e34Kie1UepGx6JiQuMBiXDDGerD
9xsMGRKigJojUA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:42:32 2025 by rpki-client