Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier: QVhznCpW5dnBXm8E+fkPTyHb4iGc4RWsm4nua+fi0DI=
Subject key identifier: 14:4F:4F:37:6C:D6:40:13:AB:C2:71:D8:EC:28:4D:A8:95:6F:89:15
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial: 019A71B81C9D5F7009567D444CEABD264566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number: 104F
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: 7WxGjTMVTrCWuH7Kjr3+gAu+wx2uqylCijgyC40Yaqg=)
2: VDBLRqMYCjpj60SbvjVrCA9rAtA.roa (hash: JKDK4eegAuzQo0SHJPfDcx6+y5omzYtOGcHgfrvk3wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1c:9d:5f:70:09:56:7d:44:4c:ea:bd:26:45:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=144f4f376cd64013abc271d8ec284da8956f8915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:1c:26:5b:0b:24:6c:0c:68:58:69:21:36:
35:a0:89:ff:20:3d:81:96:51:e0:af:dd:a7:77:17:
2a:00:b2:74:8d:04:0d:0e:c0:5e:2a:50:76:0c:f2:
00:19:31:ee:0c:61:6d:6e:e9:8f:f9:5f:64:8d:c0:
88:50:ec:b8:ec:5e:ee:4d:77:79:fc:f7:16:19:1d:
eb:3e:d2:95:89:cf:e6:b0:22:79:11:63:25:0d:6f:
0c:50:96:75:4f:01:2e:0d:a8:6d:21:c1:04:ab:65:
3d:60:59:4d:fa:11:ad:09:2c:94:fd:14:47:48:09:
05:cd:5c:47:a8:bb:32:ff:40:85:08:aa:c8:c0:97:
51:a5:be:d8:1d:96:9d:e0:06:0a:e6:32:44:70:f1:
23:39:28:e0:c8:62:7c:59:bc:0b:2d:d5:bf:41:59:
aa:32:cf:80:21:26:f5:e4:e8:69:29:9d:7f:1d:9c:
0c:db:a4:27:79:4d:22:25:f8:e9:17:94:e4:ae:51:
ca:ad:94:04:38:27:a9:7c:56:d4:57:fe:7e:a6:04:
1e:f1:04:82:d2:e3:ba:c3:4e:32:ee:76:fa:31:88:
02:06:c6:24:2e:83:84:f7:b3:18:c4:4f:19:19:86:
0a:5b:70:5c:5e:7a:dd:dc:c3:93:69:d3:c9:21:73:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4F:4F:37:6C:D6:40:13:AB:C2:71:D8:EC:28:4D:A8:95:6F:89:15
X509v3 Authority Key Identifier:
keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:68:73:51:c7:09:12:e1:92:a7:1a:79:05:c4:60:34:b5:d8:
8f:90:3b:b7:f8:07:b0:b3:40:e3:56:11:92:97:d5:94:71:33:
f3:65:ad:74:23:11:cc:16:16:37:d0:ba:87:ce:12:19:f3:5a:
86:1e:9d:d2:5b:85:4c:4d:cb:cc:c6:ed:51:9b:1d:27:9c:a0:
42:e8:53:65:8d:16:e6:fa:be:76:72:28:e5:07:6d:35:5e:6e:
02:f4:85:5f:68:4b:a1:97:c0:52:29:4f:31:f1:16:28:ed:77:
f6:c9:ce:ac:06:5d:62:cd:f0:2c:ff:fb:4f:95:1c:70:bd:41:
2d:23:44:fa:40:74:ed:74:fb:10:ab:ce:8e:40:90:ed:8c:1f:
6b:80:ba:66:88:47:13:14:6f:a4:2a:12:59:94:63:70:7b:22:
33:77:67:70:aa:24:8b:a0:c7:c6:98:f2:67:cf:b3:76:65:67:
0a:50:f9:e5:5a:78:92:ef:10:be:07:31:c6:3d:53:d2:03:3b:
a6:b5:0a:85:35:97:e4:0a:b1:72:92:63:e6:0a:ba:9b:c6:74:
7e:e0:59:bc:b7:2e:7b:ee:77:70:09:15:b3:5a:f9:d5:de:25:
04:ae:bf:8f:3d:44:d7:71:7a:9a:34:f6:c0:c8:34:bb:98:e0:
df:a5:34:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuBydX3AJVn1ETOq9JkVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMTkwYzI2ODk0MDkzZGM2NGEwNWVmMmNmZDM1NGEwNmNm
ZjAzOWQwHhcNMjUxMTExMDcwMTIyWhcNMjUxMTEyMDcwMTIyWjAzMTEwLwYDVQQD
EygxNDRmNGYzNzZjZDY0MDEzYWJjMjcxZDhlYzI4NGRhODk1NmY4OTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOscJlsLJGwMaFhpITY1oIn/ID2B
llHgr92ndxcqALJ0jQQNDsBeKlB2DPIAGTHuDGFtbumP+V9kjcCIUOy47F7uTXd5
/PcWGR3rPtKVic/msCJ5EWMlDW8MUJZ1TwEuDahtIcEEq2U9YFlN+hGtCSyU/RRH
SAkFzVxHqLsy/0CFCKrIwJdRpb7YHZad4AYK5jJEcPEjOSjgyGJ8WbwLLdW/QVmq
Ms+AISb15OhpKZ1/HZwM26QneU0iJfjpF5TkrlHKrZQEOCepfFbUV/5+pgQe8QSC
0uO6w04y7nb6MYgCBsYkLoOE97MYxE8ZGYYKW3BcXnrd3MOTadPJIXN7FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRPTzds1kATq8Jx2OwoTaiVb4kVMB8GA1UdIwQY
MBaAFCIZDCaJQJPcZKBe8s/TVKBs/wOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zYTk2ZmEtOTBkZS00NjBjLWJlYTYt
ZWMxMGViZTRmY2NmLzEvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8zYTk2ZmEtOTBkZS00NjBjLWJlYTYtZWMxMGViZTRmY2Nm
LzEvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2hzUccJ
EuGSpxp5BcRgNLXYj5A7t/gHsLNA41YRkpfVlHEz82WtdCMRzBYWN9C6h84SGfNa
hh6d0luFTE3LzMbtUZsdJ5ygQuhTZY0W5vq+dnIo5QdtNV5uAvSFX2hLoZfAUilP
MfEWKO139snOrAZdYs3wLP/7T5UccL1BLSNE+kB07XT7EKvOjkCQ7Ywfa4C6ZohH
ExRvpCoSWZRjcHsiM3dncKoki6DHxpjyZ8+zdmVnClD55Vp4ku8Qvgcxxj1T0gM7
prUKhTWX5AqxcpJj5gq6m8Z0fuBZvLcue+53cAkVs1r51d4lBK6/jz1E13F6mjT2
wMg0u5jg36U0Hw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:31 2025 by rpki-client