Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File: IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier: Wb5qJbrCNHINF/0VXT5epls4TH0aiUqdeWgZ/Vqrilk=
Subject key identifier: CF:0D:CF:58:43:C0:CB:3C:F6:5E:D0:4A:AF:30:54:76:EB:51:C0:75
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 019A16851D6C2F72A59BE0DEF2A4EDB2812C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number: 16F3
Signing time: Fri 24 Oct 2025 14:00:13 +0000
Manifest this update: Fri 24 Oct 2025 14:00:13 +0000
Manifest next update: Sat 25 Oct 2025 14:00:13 +0000
Files and hashes: 1: 3ljJaz1a5cIjZ8YC3COzHNt_p94.roa (hash: bMQghzShphucnVw2AcHoK8ZlibkBQSkRsxgVMSWXPUM=)
2: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: mqu+8m9I3uY2bp8kXxI4VjrI2+HGvGODPlnLJeOGHb8=)
3: PVPdjWfp5158kOXCBG02gGqvS2k.roa (hash: yHL6CrBTx/Lx7UNatKVR0PW+xHw8+FZidWVfHY4s2Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:85:1d:6c:2f:72:a5:9b:e0:de:f2:a4:ed:b2:81:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Oct 24 14:00:13 2025 GMT
Not After : Oct 25 14:00:13 2025 GMT
Subject: CN=cf0dcf5843c0cb3cf65ed04aaf305476eb51c075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:ea:b1:58:75:2a:fa:40:26:ef:fb:7e:05:
02:8a:65:00:39:0e:d1:ca:29:a2:34:37:f7:66:15:
c2:ec:0d:6c:67:3f:e5:66:42:4e:b7:70:8c:4a:92:
c9:a2:af:58:32:c1:ca:ef:2a:dc:95:9c:de:28:a0:
ca:20:10:8e:d6:68:a8:7e:e3:f5:da:ae:50:38:e1:
22:c5:21:9d:7a:60:7b:8b:e1:9a:86:8d:a7:81:0c:
ef:f9:a3:b4:47:8c:10:47:27:28:bd:b5:36:94:8a:
8d:f1:24:e7:aa:e3:06:4a:ab:2b:4c:98:26:c8:4a:
94:ed:80:65:1e:f4:74:f4:e7:29:90:64:7a:f8:62:
e3:14:ab:9a:dd:15:11:4f:ed:80:33:bc:4b:4f:ee:
d8:df:3a:28:f5:6b:18:55:b3:a7:b2:d1:5e:d9:6a:
08:67:d4:42:2a:13:fe:5d:55:6e:d7:7a:0d:ee:9a:
a6:cb:e4:18:ec:02:6b:c6:f9:4b:37:42:7d:ad:45:
4e:6d:40:62:d6:9f:e3:0d:2c:fe:1b:bc:bd:3e:8b:
ff:64:8c:a4:64:dc:c6:e3:89:cb:29:9a:44:cb:cb:
bf:c9:e8:7d:23:cf:b5:24:07:d6:0b:01:7f:13:d2:
64:af:c6:36:c3:3a:bc:fc:d9:4d:cd:68:6a:9f:1f:
67:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0D:CF:58:43:C0:CB:3C:F6:5E:D0:4A:AF:30:54:76:EB:51:C0:75
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:24:19:d5:50:fe:6b:15:38:ba:82:19:40:69:9d:16:b1:ca:
a1:e3:42:57:6f:61:77:c7:5e:be:5f:90:44:83:91:61:e1:4a:
04:be:69:c0:45:3f:87:df:44:ec:b9:c4:68:fc:0b:d4:7d:3d:
8a:4f:79:f8:52:c8:1a:c7:31:22:fb:2b:ad:33:c7:9c:15:a9:
07:c4:5a:47:3c:aa:fe:54:57:ac:a6:2c:98:cc:fd:58:84:e2:
57:cd:52:d1:21:79:54:6e:4f:20:5b:19:91:49:a6:c7:df:77:
2c:78:2b:a3:a4:6e:30:97:ce:f3:dc:95:4b:ec:e7:e1:ea:7b:
7f:c8:35:91:1e:1a:d4:a0:66:c0:a4:e5:a4:f4:da:de:51:ae:
b9:2c:14:2f:5c:e8:13:85:92:0f:4d:7d:cb:92:ce:80:ea:e5:
6b:4b:17:69:3f:e0:7a:68:5a:5d:39:71:d3:ec:54:5b:4b:b0:
24:98:fe:7b:f5:36:b2:8c:15:92:1a:71:70:0d:18:d7:f0:ef:
6d:a4:82:5f:36:1c:53:7b:aa:dc:fd:c7:b7:b6:72:7a:4b:4e:
96:07:a2:86:d1:82:86:62:ef:6d:cf:19:d7:f5:62:d2:fa:2b:
6e:a2:51:72:d9:75:43:6a:4f:f1:aa:8c:2b:50:2a:7d:3c:8a:
a9:de:cf:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoWhR1sL3Klm+De8qTtsoEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMTIwYzZhNmM4Y2YxNzI2ZTdkNDhlMzE0YTE2Y2NkMDVl
Zjg2MDcwHhcNMjUxMDI0MTQwMDEzWhcNMjUxMDI1MTQwMDEzWjAzMTEwLwYDVQQD
EyhjZjBkY2Y1ODQzYzBjYjNjZjY1ZWQwNGFhZjMwNTQ3NmViNTFjMDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlTqsVh1KvpAJu/7fgUCimUAOQ7R
yimiNDf3ZhXC7A1sZz/lZkJOt3CMSpLJoq9YMsHK7yrclZzeKKDKIBCO1miofuP1
2q5QOOEixSGdemB7i+Gaho2ngQzv+aO0R4wQRycovbU2lIqN8STnquMGSqsrTJgm
yEqU7YBlHvR09OcpkGR6+GLjFKua3RURT+2AM7xLT+7Y3zoo9WsYVbOnstFe2WoI
Z9RCKhP+XVVu13oN7pqmy+QY7AJrxvlLN0J9rUVObUBi1p/jDSz+G7y9Pov/ZIyk
ZNzG44nLKZpEy8u/yeh9I8+1JAfWCwF/E9Jkr8Y2wzq8/NlNzWhqnx9neQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8Nz1hDwMs89l7QSq8wVHbrUcB1MB8GA1UdIwQY
MBaAFCMSDGpsjPFybn1I4xShbM0F74YHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xZmFkY2UtN2ZhNy00YzRjLWJkZWQt
ZTRiNzAyZjE2MTE2LzEvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8xZmFkY2UtN2ZhNy00YzRjLWJkZWQtZTRiNzAyZjE2MTE2
LzEvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyQZ1VD+
axU4uoIZQGmdFrHKoeNCV29hd8devl+QRIORYeFKBL5pwEU/h99E7LnEaPwL1H09
ik95+FLIGscxIvsrrTPHnBWpB8RaRzyq/lRXrKYsmMz9WITiV81S0SF5VG5PIFsZ
kUmmx993LHgro6RuMJfO89yVS+zn4ep7f8g1kR4a1KBmwKTlpPTa3lGuuSwUL1zo
E4WSD019y5LOgOrla0sXaT/gemhaXTlx0+xUW0uwJJj+e/U2sowVkhpxcA0Y1/Dv
baSCXzYcU3uq3P3Ht7ZyektOlgeihtGChmLvbc8Z1/Vi0vorbqJRctl1Q2pP8aqM
K1AqfTyKqd7P9A==
-----END CERTIFICATE-----
Generated at Fri Oct 24 20:47:24 2025 by rpki-client