Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
File: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft (raw, json)
Hash identifier: ly+gGNy4vKsredAZUJUCzy+SCbpa3wVl8Ln8U/p9vKI=
Subject key identifier: 6E:63:A2:4D:37:F5:AE:BE:FC:08:F2:33:35:80:38:24:66:85:EE:BC
Authority key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
Certificate issuer: /CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Certificate serial: 019A71EEF5905E9B163609EFAC8EF2185D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
Manifest number: 0A27
Signing time: Tue 11 Nov 2025 08:01:17 +0000
Manifest this update: Tue 11 Nov 2025 08:01:17 +0000
Manifest next update: Wed 12 Nov 2025 08:01:17 +0000
Files and hashes: 1: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl (hash: f5x0Y3pffq6uPRUtSNXIY+NL2PmuVq22kYFATthfd4c=)
2: stIrfyQj0_eTZw5LKQkMNxuFxgI.roa (hash: eqwBV8CXGai5haR4OF0T1dC++87tM0y7pi8XDxr8OrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f5:90:5e:9b:16:36:09:ef:ac:8e:f2:18:5d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Validity
Not Before: Nov 11 08:01:17 2025 GMT
Not After : Nov 12 08:01:17 2025 GMT
Subject: CN=6e63a24d37f5aebefc08f233358038246685eebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:1f:31:c4:b5:f8:bf:a8:8e:ec:72:dc:55:
fe:3a:59:51:f9:a7:c0:8b:03:79:df:91:0d:ee:86:
46:fb:1a:a2:69:e0:b8:57:79:f0:dd:9e:95:ad:b8:
8c:28:30:55:eb:b2:c3:91:0c:74:20:4f:47:69:e9:
a4:ff:35:62:62:ab:cb:58:56:0b:e1:23:2c:34:c2:
d2:40:f7:7f:8f:9b:2d:b2:df:56:4b:cb:5a:02:5d:
47:41:f1:23:c1:97:91:65:4c:60:52:f2:33:a4:b8:
38:e2:e0:9c:8d:a6:de:9c:56:b9:63:1a:25:04:09:
d4:a8:ea:54:04:5a:66:04:28:b4:ad:be:4e:9c:50:
d4:44:54:2f:41:8a:c0:21:44:38:25:53:39:47:5a:
1e:e2:7d:ab:ab:7a:8c:57:94:41:b3:04:55:96:4c:
e9:00:56:a9:9b:e9:cb:38:98:0a:93:82:33:53:88:
24:b8:36:02:4c:0b:d7:1a:31:18:47:0d:ab:81:d7:
8e:d1:41:8a:ac:d9:1b:74:a6:4c:9d:bd:83:42:99:
fa:48:10:0f:37:1f:cd:73:2d:3f:03:30:03:f5:14:
b4:a0:20:f9:cc:3a:dc:4a:66:a1:a8:33:d4:f7:ce:
88:1f:9d:f0:eb:08:ac:e5:0b:2c:f4:60:6a:32:46:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:63:A2:4D:37:F5:AE:BE:FC:08:F2:33:35:80:38:24:66:85:EE:BC
X509v3 Authority Key Identifier:
keyid:8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fa:37:db:75:44:a4:0c:9a:c9:00:58:c3:57:d3:42:a1:59:
0e:45:f6:33:86:e7:56:78:00:c1:3e:3c:13:1c:1e:87:35:5e:
45:bd:e7:ff:15:7f:3c:d6:ca:5f:b0:b5:02:ef:e5:53:49:b0:
42:7b:fe:ec:47:6c:a2:05:a0:62:c2:96:77:6f:d1:68:35:cb:
81:eb:31:07:9a:68:63:a8:a3:c5:cc:12:8c:ae:ea:9d:43:99:
a7:9a:00:5d:a3:4e:11:e3:da:c7:3f:2f:ec:db:88:b4:bf:83:
61:50:57:d8:62:2d:30:21:e0:77:f3:10:67:d1:c8:31:d4:5a:
ab:26:49:00:86:aa:21:72:56:bb:76:16:ec:bf:f0:f6:26:e1:
db:c7:d7:07:7f:76:2c:8f:99:15:b9:95:2a:4b:a9:c1:45:45:
b3:6d:a5:1a:c4:0d:54:b2:43:30:de:c9:75:10:61:62:22:1d:
cd:1b:47:52:0e:ce:9b:21:87:52:1a:24:99:34:ca:8e:1c:92:
0c:94:8c:bd:7d:30:db:6a:d0:93:cf:5f:5a:52:0c:3c:ff:48:
c4:d1:d0:48:9b:d9:b3:e9:02:7c:45:9f:b4:11:ad:99:ad:52:
26:91:4f:33:2a:40:e8:db:3e:d5:02:c3:3f:bf:e6:a8:9c:d2:
09:d6:56:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7vWQXpsWNgnvrI7yGF1pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOGFmNmFmNTdkZGZjNWM3YWE4MjhjZjIyNWY5OGRjZTk1
OTA0YTAwHhcNMjUxMTExMDgwMTE3WhcNMjUxMTEyMDgwMTE3WjAzMTEwLwYDVQQD
Eyg2ZTYzYTI0ZDM3ZjVhZWJlZmMwOGYyMzMzNTgwMzgyNDY2ODVlZWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HMfMcS1+L+ojuxy3FX+OllR+afA
iwN535EN7oZG+xqiaeC4V3nw3Z6VrbiMKDBV67LDkQx0IE9Haemk/zViYqvLWFYL
4SMsNMLSQPd/j5stst9WS8taAl1HQfEjwZeRZUxgUvIzpLg44uCcjabenFa5Yxol
BAnUqOpUBFpmBCi0rb5OnFDURFQvQYrAIUQ4JVM5R1oe4n2rq3qMV5RBswRVlkzp
AFapm+nLOJgKk4IzU4gkuDYCTAvXGjEYRw2rgdeO0UGKrNkbdKZMnb2DQpn6SBAP
Nx/Ncy0/AzAD9RS0oCD5zDrcSmahqDPU986IH53w6wis5Qss9GBqMkb3aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5jok039a6+/AjyMzWAOCRmhe68MB8GA1UdIwQY
MBaAFIuK9q9X3fxceqgozyJfmNzpWQSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xZjJjOGYtOGVkOS00YjdlLWFhMWUt
ZDNjNGY1ZGNiZTRjLzEvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8xZjJjOGYtOGVkOS00YjdlLWFhMWUtZDNjNGY1ZGNiZTRj
LzEvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvo323VE
pAyayQBYw1fTQqFZDkX2M4bnVngAwT48ExwehzVeRb3n/xV/PNbKX7C1Au/lU0mw
Qnv+7EdsogWgYsKWd2/RaDXLgesxB5poY6ijxcwSjK7qnUOZp5oAXaNOEePaxz8v
7NuItL+DYVBX2GItMCHgd/MQZ9HIMdRaqyZJAIaqIXJWu3YW7L/w9ibh28fXB392
LI+ZFbmVKkupwUVFs22lGsQNVLJDMN7JdRBhYiIdzRtHUg7OmyGHUhokmTTKjhyS
DJSMvX0w22rQk89fWlIMPP9IxNHQSJvZs+kCfEWftBGtma1SJpFPMypA6Ns+1QLD
P7/mqJzSCdZWIA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:48 2025 by rpki-client