Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: ywDwOGgHaovhBMg22qdjR6WfqZfDxqsUKHpCqQeq/9o=
Subject key identifier: 86:CA:7F:49:FB:41:62:55:94:3A:C4:34:FF:58:62:F7:14:66:5B:3F
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 019A2AB0A663C3DB080876BCE94047207B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 0232
Signing time: Tue 28 Oct 2025 12:00:11 +0000
Manifest this update: Tue 28 Oct 2025 12:00:11 +0000
Manifest next update: Wed 29 Oct 2025 12:00:11 +0000
Files and hashes: 1: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: wB6sG4PTFfOyiiFV339NB7szxqVe/REjpYs+yzwOT+Q=)
2: spqKrZZlSshpL2qYZip0d0WaBBs.roa (hash: nNDCN5SzdqIQPR24IlLa7l1TyfR2hVXqn06sMz/jemo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b0:a6:63:c3:db:08:08:76:bc:e9:40:47:20:7b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Oct 28 12:00:11 2025 GMT
Not After : Oct 29 12:00:11 2025 GMT
Subject: CN=86ca7f49fb416255943ac434ff5862f714665b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:12:4f:0a:f4:9c:fb:da:60:fe:52:52:17:cb:
a3:c7:e2:64:bd:15:e5:ee:bf:0c:8e:68:0c:ed:9c:
d8:f8:ed:e1:f9:be:6e:ef:cc:af:8f:e2:39:f2:f7:
85:54:e9:09:53:05:21:05:55:d3:07:52:04:27:9e:
22:f1:c4:b1:6e:36:8a:c3:83:d4:3d:6d:84:84:f9:
65:9c:e2:61:2e:b0:0e:08:83:a2:62:a9:7e:9d:89:
27:1b:8e:0f:a4:47:63:be:57:03:99:57:1a:15:81:
de:28:fe:24:f3:2f:74:71:18:d9:6e:e1:a6:a6:7b:
49:ea:be:9c:c9:de:f3:cb:e3:44:bb:91:91:8e:67:
ab:d2:a9:6d:77:76:a4:05:00:ea:f0:2e:f0:ea:36:
41:58:d0:fa:4b:1f:09:15:cc:4a:16:2a:26:0b:28:
c1:62:59:a5:4b:40:f7:3d:80:78:d7:14:7b:00:50:
9b:c7:d9:fe:ee:a9:ed:d0:ec:68:f5:30:cc:f4:04:
01:61:14:52:5e:b0:88:c2:31:21:95:45:fe:a4:6e:
63:a4:7d:da:00:9d:c5:ec:7b:61:fa:60:a7:f2:4b:
f4:c6:c9:85:cb:66:fa:b7:df:a7:f5:c2:d2:e9:bc:
cb:b9:5c:a9:0f:b2:b5:62:5d:ad:19:ac:81:dd:ef:
55:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CA:7F:49:FB:41:62:55:94:3A:C4:34:FF:58:62:F7:14:66:5B:3F
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3f:c5:07:e9:75:5a:01:4c:c4:87:8f:66:c0:c1:be:d2:cf:
2a:fc:c2:e1:1e:b6:24:ed:d8:f3:86:28:8d:99:a7:8f:87:74:
42:66:e6:fe:ce:be:ea:0b:09:62:43:9d:8b:29:f3:c2:9e:d5:
22:10:3a:80:cc:bf:29:ff:0a:be:50:45:42:ba:1b:ec:7d:e2:
a1:33:ed:a6:9a:8a:24:aa:97:57:c4:fb:94:76:b9:ce:7e:60:
f8:ce:b2:d4:60:a9:dc:4d:fa:b0:98:95:56:26:e0:0a:3f:75:
17:ed:d9:ec:17:e5:ce:27:1c:bb:eb:0f:cf:58:1b:74:36:d5:
99:d4:ca:be:ad:ba:f6:54:81:59:ab:f3:80:01:81:8d:5c:9c:
e8:14:33:bb:61:15:96:0c:aa:b4:4f:5b:8b:75:f2:cc:e7:f6:
b0:69:39:9d:8a:8e:4b:d7:c9:3e:94:18:d3:6c:dd:1f:f4:e6:
bd:ef:fb:96:38:98:29:ff:d5:37:ac:cf:41:a7:54:e2:0a:88:
45:cb:9e:55:04:99:da:08:66:93:99:50:65:3c:5f:6c:ed:a6:
2c:64:aa:4b:6c:36:76:43:6f:5d:a7:c5:e0:aa:e3:99:f3:e2:
d4:0e:d7:b5:00:65:75:57:50:bd:ab:2c:00:d3:02:79:72:fa:
f6:c9:5c:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqsKZjw9sICHa86UBHIHspMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjljMjE2OGQyZDgyZGRmZDhhNzA2MzdkNDQwMThhZjMw
YjFmOTcwHhcNMjUxMDI4MTIwMDExWhcNMjUxMDI5MTIwMDExWjAzMTEwLwYDVQQD
Eyg4NmNhN2Y0OWZiNDE2MjU1OTQzYWM0MzRmZjU4NjJmNzE0NjY1YjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BJPCvSc+9pg/lJSF8ujx+JkvRXl
7r8MjmgM7ZzY+O3h+b5u78yvj+I58veFVOkJUwUhBVXTB1IEJ54i8cSxbjaKw4PU
PW2EhPllnOJhLrAOCIOiYql+nYknG44PpEdjvlcDmVcaFYHeKP4k8y90cRjZbuGm
pntJ6r6cyd7zy+NEu5GRjmer0qltd3akBQDq8C7w6jZBWND6Sx8JFcxKFiomCyjB
YlmlS0D3PYB41xR7AFCbx9n+7qnt0Oxo9TDM9AQBYRRSXrCIwjEhlUX+pG5jpH3a
AJ3F7Hth+mCn8kv0xsmFy2b6t9+n9cLS6bzLuVypD7K1Yl2tGayB3e9VQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbKf0n7QWJVlDrENP9YYvcUZls/MB8GA1UdIwQY
MBaAFIn5whaNLYLd/YpwY31EAYrzCx+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTIt
YmFjYWUwMzBlMzc0LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTItYmFjYWUwMzBlMzc0
LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACD/FB+l1
WgFMxIePZsDBvtLPKvzC4R62JO3Y84YojZmnj4d0Qmbm/s6+6gsJYkOdiynzwp7V
IhA6gMy/Kf8KvlBFQrob7H3ioTPtppqKJKqXV8T7lHa5zn5g+M6y1GCp3E36sJiV
VibgCj91F+3Z7Bflziccu+sPz1gbdDbVmdTKvq269lSBWavzgAGBjVyc6BQzu2EV
lgyqtE9bi3XyzOf2sGk5nYqOS9fJPpQY02zdH/Tmve/7ljiYKf/VN6zPQadU4gqI
RcueVQSZ2ghmk5lQZTxfbO2mLGSqS2w2dkNvXafF4KrjmfPi1A7XtQBldVdQvass
ANMCeXL69slcKA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 16:36:59 2025 by rpki-client