Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
File: IvtSiroBjxQvRETMzJcjc2zU5LY.mft (raw, json)
Hash identifier: HPO7OD1m9nCQiSUCV5f9gmIZ1WrcNT7nO/p/51pLcZ0=
Subject key identifier: 69:87:74:08:AD:6F:36:02:23:27:C4:45:04:CE:4F:43:85:42:D7:BE
Authority key identifier: 22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
Certificate issuer: /CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Certificate serial: 019A21AE05426C94994FCA307286A1FFAC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
Manifest number: 12E0
Signing time: Sun 26 Oct 2025 18:00:43 +0000
Manifest this update: Sun 26 Oct 2025 18:00:43 +0000
Manifest next update: Mon 27 Oct 2025 18:00:43 +0000
Files and hashes: 1: 4Qe9-T0nXWoVHW9lPtNAFV1MJeQ.roa (hash: MEUx9Qe02B/09ozBtbyk47nH68xJFm0Hu6pf18Q/8p0=)
2: IvtSiroBjxQvRETMzJcjc2zU5LY.crl (hash: zkK2u9MD1Tx13cystVRGIW/cBF5ExcXaqiCYQAnygsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ae:05:42:6c:94:99:4f:ca:30:72:86:a1:ff:ac:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Validity
Not Before: Oct 26 18:00:43 2025 GMT
Not After : Oct 27 18:00:43 2025 GMT
Subject: CN=69877408ad6f36022327c44504ce4f438542d7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:62:39:11:ba:77:26:31:83:56:a0:86:1b:6c:
da:03:0b:fd:85:35:7f:0e:7a:b3:61:a7:9b:b0:db:
0f:97:03:52:80:70:2b:a6:4e:ad:26:21:5a:65:e7:
da:bc:7a:ee:d7:5e:86:6f:ff:9b:45:8d:3d:3a:a6:
f2:e7:3b:71:41:ed:dd:8f:2f:6e:12:1b:61:eb:c1:
2f:70:54:b0:44:ab:3a:4b:e4:b6:7d:1f:69:fd:c7:
d9:12:be:de:c8:03:64:37:1f:ac:23:15:0a:57:79:
3e:f0:e1:ce:94:d1:c5:0c:da:d7:51:24:59:5f:dc:
38:db:2f:db:11:89:ae:75:8e:88:2a:c6:1f:64:26:
32:eb:5e:9f:d1:c8:9e:e8:71:9b:e3:e0:1d:85:10:
26:fa:4b:32:a1:4d:11:24:57:37:5c:7a:92:84:3e:
e5:21:af:c2:13:2b:45:d8:2c:01:18:00:f6:87:f9:
66:62:30:39:43:45:e0:b3:da:61:11:fc:80:32:43:
13:df:8e:f8:2c:57:4f:f7:42:76:d8:f3:40:59:75:
3b:72:5a:01:96:e9:18:6f:92:54:44:3c:d2:77:b0:
c1:2c:a1:a7:94:61:e8:65:83:33:0b:f5:bc:80:d2:
63:4e:65:5c:58:45:76:68:ca:66:e5:d0:bb:0c:e9:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:87:74:08:AD:6F:36:02:23:27:C4:45:04:CE:4F:43:85:42:D7:BE
X509v3 Authority Key Identifier:
keyid:22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:fe:3b:84:4e:da:4a:2b:b8:e6:fd:ea:8a:4e:2a:7f:46:29:
68:d6:c6:3e:02:47:39:69:7a:43:43:e3:e0:95:64:ed:62:da:
a5:38:be:50:43:0d:b3:26:d7:98:d2:b6:7a:a4:2b:fa:e7:1a:
94:c0:5c:fe:17:cc:e9:e6:bf:8b:c2:bb:8b:42:f8:9f:d1:a0:
de:97:16:d8:a4:c5:97:4e:4c:3c:f2:65:18:66:59:ce:b0:31:
1c:92:9f:37:72:6e:9a:6e:0d:d1:a1:aa:1c:98:32:87:f6:c8:
99:d4:37:9c:82:71:4e:85:7f:31:02:76:ef:d5:7f:f6:41:54:
f6:6f:89:15:3b:18:9c:cf:03:a9:0e:a4:60:25:4c:b7:47:77:
d5:d9:5f:6e:b5:ac:34:48:c3:8f:ce:1c:f7:a4:f3:ea:8b:bb:
c6:0d:89:ed:73:9d:d2:0f:7b:b0:f7:88:07:15:bc:e7:4b:d8:
f6:53:79:4f:b3:e0:08:4a:58:99:6b:00:d5:01:64:27:47:ca:
c5:47:7a:1e:c5:68:e7:1a:90:0d:4d:50:8b:00:a6:a7:19:b6:
34:81:6d:93:77:91:8a:ff:95:89:fe:96:92:47:3b:1b:e1:06:
e9:53:b2:5e:4e:17:37:f1:d1:5b:d6:c8:f6:cc:8e:3e:17:ae:
4f:3c:4a:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohrgVCbJSZT8owcoah/6yBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmI1MjhhYmEwMThmMTQyZjQ0NDRjY2NjOTcyMzczNmNk
NGU0YjYwHhcNMjUxMDI2MTgwMDQzWhcNMjUxMDI3MTgwMDQzWjAzMTEwLwYDVQQD
Eyg2OTg3NzQwOGFkNmYzNjAyMjMyN2M0NDUwNGNlNGY0Mzg1NDJkN2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mI5Ebp3JjGDVqCGG2zaAwv9hTV/
DnqzYaebsNsPlwNSgHArpk6tJiFaZefavHru116Gb/+bRY09Oqby5ztxQe3djy9u
Ehth68EvcFSwRKs6S+S2fR9p/cfZEr7eyANkNx+sIxUKV3k+8OHOlNHFDNrXUSRZ
X9w42y/bEYmudY6IKsYfZCYy616f0cie6HGb4+AdhRAm+ksyoU0RJFc3XHqShD7l
Ia/CEytF2CwBGAD2h/lmYjA5Q0Xgs9phEfyAMkMT3474LFdP90J22PNAWXU7cloB
lukYb5JURDzSd7DBLKGnlGHoZYMzC/W8gNJjTmVcWEV2aMpm5dC7DOnvzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmHdAitbzYCIyfERQTOT0OFQte+MB8GA1UdIwQY
MBaAFCL7Uoq6AY8UL0REzMyXI3Ns1OS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zODFkNjktMmM0MS00NWE4LTkwZDQt
NmFlOTBiMjQ3NTkyLzEvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zODFkNjktMmM0MS00NWE4LTkwZDQtNmFlOTBiMjQ3NTky
LzEvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuf47hE7a
Siu45v3qik4qf0YpaNbGPgJHOWl6Q0Pj4JVk7WLapTi+UEMNsybXmNK2eqQr+uca
lMBc/hfM6ea/i8K7i0L4n9Gg3pcW2KTFl05MPPJlGGZZzrAxHJKfN3Jumm4N0aGq
HJgyh/bImdQ3nIJxToV/MQJ279V/9kFU9m+JFTsYnM8DqQ6kYCVMt0d31dlfbrWs
NEjDj84c96Tz6ou7xg2J7XOd0g97sPeIBxW850vY9lN5T7PgCEpYmWsA1QFkJ0fK
xUd6HsVo5xqQDU1QiwCmpxm2NIFtk3eRiv+Vif6Wkkc7G+EG6VOyXk4XN/HRW9bI
9syOPheuTzxKJw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 03:57:18 2025 by rpki-client