Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File: iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier: 72sNwQWorsUAtSErOjdn6ymL9EJWMjxZr1g4P1nxLBk=
Subject key identifier: DD:B6:0D:2F:96:1C:AB:3D:9A:03:88:71:76:71:8C:89:F3:01:A8:F9
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer: /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial: 019A24E583699DDBB8248DC3DC31DA554B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number: 0665
Signing time: Mon 27 Oct 2025 09:00:12 +0000
Manifest this update: Mon 27 Oct 2025 09:00:12 +0000
Manifest next update: Tue 28 Oct 2025 09:00:12 +0000
Files and hashes: 1: NOTlqU2dG5SZUtFWrRvKPCIYT_I.roa (hash: fMBaaIac4pSZ5FYQhcUdq0rjdRPBorC9IDyKulvOrp0=)
2: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: 0mvpnSx8Qt0vHviTdhkltqaWbAFABzyc9sB8xKGcak8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:83:69:9d:db:b8:24:8d:c3:dc:31:da:55:4b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Validity
Not Before: Oct 27 09:00:12 2025 GMT
Not After : Oct 28 09:00:12 2025 GMT
Subject: CN=ddb60d2f961cab3d9a03887176718c89f301a8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:aa:09:43:89:bd:64:2a:88:88:00:e3:fd:
76:ee:63:ba:3c:ef:41:01:2d:e2:91:7b:78:ab:84:
50:c4:b9:d5:43:b3:1f:64:92:7d:78:95:b1:3b:30:
33:e5:3b:5c:df:39:79:ff:3d:85:26:59:1b:f5:3e:
af:65:b8:7a:8d:8a:d7:0c:3c:c3:fb:52:25:47:25:
4f:ad:ef:15:43:da:4d:3d:54:1e:14:c9:9c:14:cd:
46:ba:2e:a7:f5:d7:7b:a6:34:b1:f6:d8:59:eb:f2:
12:43:c0:f8:74:32:59:42:c7:a5:63:15:2a:a3:9e:
d1:50:61:d3:58:cf:e5:a0:f1:e9:f1:5e:ac:91:47:
f9:6d:6b:ec:fc:35:30:b6:45:ef:db:d2:43:de:b5:
f4:23:bb:73:07:fa:9e:3b:4f:80:38:82:56:37:2f:
ed:ab:d6:c6:d3:b5:e0:70:17:a5:ae:d1:9e:84:46:
47:1a:00:46:69:ea:bb:c1:5e:cd:69:4f:f2:65:aa:
89:46:02:03:0a:69:74:9f:8d:07:0c:49:34:63:84:
e0:1e:6a:8e:2b:e3:95:5c:6d:eb:f9:c7:1a:ad:fb:
75:c2:8e:a6:19:d9:e9:72:45:d1:12:89:ee:10:fc:
fc:a9:02:77:14:07:8b:96:0d:5f:d6:d8:be:cb:fa:
23:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B6:0D:2F:96:1C:AB:3D:9A:03:88:71:76:71:8C:89:F3:01:A8:F9
X509v3 Authority Key Identifier:
keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d1:d2:e6:d2:ab:46:5a:39:8e:5a:af:a8:46:09:81:77:1e:
89:40:65:fd:bc:e6:cd:aa:ff:8b:c9:b2:cd:01:dc:f7:93:57:
3e:4e:58:af:22:d8:8c:4f:19:72:d2:70:64:d4:20:4e:98:c4:
51:31:78:bb:3f:5e:8c:af:51:1a:74:a5:38:e5:f0:6c:0b:23:
6b:47:d9:c8:d6:d2:5b:bc:2f:40:99:b2:ef:4b:6a:d7:da:79:
88:df:ac:59:1a:3f:dc:cc:a9:47:78:b7:d4:ec:95:b0:c9:95:
5b:87:57:2f:c2:bc:14:f6:a4:77:70:0a:13:d1:ec:2b:8b:03:
1e:c9:71:b0:65:14:18:3c:57:83:49:e4:90:5c:d7:a9:4d:6c:
77:05:ec:65:aa:be:e9:9b:16:d1:00:49:a5:98:da:44:af:49:
4d:7b:1f:d7:a6:ea:cb:1c:19:da:90:fa:94:10:8b:04:2f:32:
17:36:f1:f8:86:b6:d5:52:23:70:20:cd:9f:43:30:ec:72:3d:
67:13:a4:85:74:ab:1b:87:ab:a9:76:40:9e:cb:c5:2e:74:4e:
35:38:3e:41:ff:81:f3:37:19:96:2b:fd:cf:d4:73:87:9b:5c:
d3:e5:38:5b:1e:97:98:c0:e7:42:55:b8:ba:95:5e:a9:e5:e3:
6d:6f:94:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5YNpndu4JI3D3DHaVUuFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZDVjODBiMzU4NzMyY2YxZWNlZWNmMmY1YmRjOGFiM2Rj
MTgxYWUwHhcNMjUxMDI3MDkwMDEyWhcNMjUxMDI4MDkwMDEyWjAzMTEwLwYDVQQD
EyhkZGI2MGQyZjk2MWNhYjNkOWEwMzg4NzE3NjcxOGM4OWYzMDFhOGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU+qCUOJvWQqiIgA4/127mO6PO9B
AS3ikXt4q4RQxLnVQ7MfZJJ9eJWxOzAz5Ttc3zl5/z2FJlkb9T6vZbh6jYrXDDzD
+1IlRyVPre8VQ9pNPVQeFMmcFM1Gui6n9dd7pjSx9thZ6/ISQ8D4dDJZQselYxUq
o57RUGHTWM/loPHp8V6skUf5bWvs/DUwtkXv29JD3rX0I7tzB/qeO0+AOIJWNy/t
q9bG07XgcBelrtGehEZHGgBGaeq7wV7NaU/yZaqJRgIDCml0n40HDEk0Y4TgHmqO
K+OVXG3r+ccarft1wo6mGdnpckXREonuEPz8qQJ3FAeLlg1f1ti+y/oj2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN22DS+WHKs9mgOIcXZxjInzAaj5MB8GA1UdIwQY
MBaAFIjVyAs1hzLPHs7s8vW9yKs9wYGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iNzViOTItZjFjNy00YjU2LTlhOWYt
OWEyZjc5NmM5NDc3LzEvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iNzViOTItZjFjNy00YjU2LTlhOWYtOWEyZjc5NmM5NDc3
LzEvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltHS5tKr
Rlo5jlqvqEYJgXceiUBl/bzmzar/i8myzQHc95NXPk5YryLYjE8ZctJwZNQgTpjE
UTF4uz9ejK9RGnSlOOXwbAsja0fZyNbSW7wvQJmy70tq19p5iN+sWRo/3MypR3i3
1OyVsMmVW4dXL8K8FPakd3AKE9HsK4sDHslxsGUUGDxXg0nkkFzXqU1sdwXsZaq+
6ZsW0QBJpZjaRK9JTXsf16bqyxwZ2pD6lBCLBC8yFzbx+Ia21VIjcCDNn0Mw7HI9
ZxOkhXSrG4erqXZAnsvFLnRONTg+Qf+B8zcZliv9z9Rzh5tc0+U4Wx6XmMDnQlW4
upVeqeXjbW+U8A==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:06:25 2025 by rpki-client