Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
File: IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json)
Hash identifier: hvRcZ38X7aB6fbOa7SWuKAh2qBe2sVznXQkqWOU5gdI=
Subject key identifier: 6A:A1:E3:E8:0A:23:C5:AA:4D:30:22:49:75:CE:36:CB:C4:69:DD:AA
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Certificate issuer: /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial: 019A0C6F938495CCE88C7669D40C2EFA0ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
Manifest number: 01FE
Signing time: Wed 22 Oct 2025 15:00:30 +0000
Manifest this update: Wed 22 Oct 2025 15:00:30 +0000
Manifest next update: Thu 23 Oct 2025 15:00:30 +0000
Files and hashes: 1: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: Hbsmloz5SiMRfLTXzN++NlYNymlzizh+n9PCAqw2xFc=)
2: _KyJrgx1hGK_hXMTclXxlPIPZn8.roa (hash: I4QZAN/FDUNiksKSSMZ5KyrS7bRdtRCczdlGK9iHX0c=)
3: iLANhbyVV3zbKcRa5e1j5ys5bQ8.roa (hash: HvIZEmUJodoCUOQJmSLlhYyGWehRd8s2eUB4GrSGatI=)
4: vXv88BHimThnafaryEHozjYrlDI.roa (hash: DV1U9+gs3m5mNc5xoVIc27oNoGuDOyBahRAnw8thlug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:6f:93:84:95:cc:e8:8c:76:69:d4:0c:2e:fa:0e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
Validity
Not Before: Oct 22 15:00:30 2025 GMT
Not After : Oct 23 15:00:30 2025 GMT
Subject: CN=6aa1e3e80a23c5aa4d30224975ce36cbc469ddaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dc:06:53:52:8e:2f:ea:41:50:87:62:99:64:
67:2e:ee:53:f6:27:f7:f5:96:1e:e6:d2:80:6e:58:
da:88:94:52:34:16:fc:55:52:f2:b9:21:49:75:94:
7d:9a:60:06:f3:3d:3d:20:ac:13:32:c7:09:fb:53:
97:53:36:93:d0:f6:b0:91:ff:9c:9b:a6:2d:13:7e:
ea:3e:3f:49:59:db:ac:64:ab:16:25:98:cd:39:41:
28:b2:c3:67:6a:81:cf:ff:d3:fb:a6:52:1f:36:32:
2e:05:12:b6:7d:af:ba:d5:ac:b5:a7:58:37:6a:26:
1c:d0:94:76:06:f5:42:e8:fe:4f:cb:6b:a2:db:c0:
dd:7c:3a:2d:a7:d4:df:1e:5b:f7:dc:2b:9e:9d:ba:
1c:33:d8:41:c3:58:47:76:a6:33:c8:1b:16:ca:d1:
0f:19:9b:6f:6d:6b:fe:a2:da:43:e2:0f:c8:ca:47:
eb:1c:c1:ae:21:38:ed:75:4d:69:5f:c5:d6:cd:d1:
59:a2:d0:a2:95:5c:68:eb:73:ca:ef:0c:f6:d5:b0:
26:22:9e:1f:9e:e2:4d:8f:ae:ed:00:f0:21:03:2c:
93:43:2b:27:22:90:e7:c3:cc:46:39:81:1e:8b:4e:
7a:9f:7f:a1:2d:59:de:1f:c4:47:e2:eb:b9:88:44:
47:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A1:E3:E8:0A:23:C5:AA:4D:30:22:49:75:CE:36:CB:C4:69:DD:AA
X509v3 Authority Key Identifier:
keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0d:0d:c9:0a:ef:7a:a8:89:f8:53:be:36:25:78:68:13:01:
e0:9c:e3:8e:0f:3b:38:7b:f3:c6:ef:62:96:28:00:45:11:08:
c8:cb:b2:ba:87:9d:c8:03:07:7f:08:93:be:d1:17:6d:f7:4d:
60:54:62:a2:91:a6:2f:3f:79:08:26:70:8d:e1:0e:19:86:19:
98:c2:ff:8f:92:ed:73:0f:48:49:df:65:c0:01:79:cf:c3:4f:
6a:3e:e2:2d:4b:cc:98:05:24:33:17:e2:23:ce:55:2a:bf:02:
75:c4:8f:3a:10:a5:5e:89:e8:c2:fa:db:9d:56:6d:31:6c:dd:
0f:8b:02:05:cc:c9:34:f2:ae:30:3b:b6:bc:8b:82:e8:e4:81:
7f:18:e9:da:f8:c5:4a:52:a8:d4:bf:4f:8d:c5:e7:a8:a0:87:
d4:d7:5e:ef:20:7e:b5:37:88:8b:49:c9:60:bb:e6:ea:58:50:
d3:4c:91:4b:29:ea:7a:e0:ee:fc:1d:96:a2:19:c9:1a:73:d2:
bc:66:fc:78:b3:bb:3c:1a:91:0d:cd:7a:2c:e5:7e:c2:35:77:
09:17:91:04:8d:0c:44:0d:21:80:31:76:b1:52:2e:0f:af:a0:
ab:47:30:16:da:cc:48:ec:e3:18:88:51:57:2c:7c:bf:c7:d4:
b0:97:d3:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoMb5OElczojHZp1Awu+g7VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwODIwZjc5NjQ4MWFjMGU5NjM3Yzk2MjQxNDU5N2IxZmUy
MjdjMjQwHhcNMjUxMDIyMTUwMDMwWhcNMjUxMDIzMTUwMDMwWjAzMTEwLwYDVQQD
Eyg2YWExZTNlODBhMjNjNWFhNGQzMDIyNDk3NWNlMzZjYmM0NjlkZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NwGU1KOL+pBUIdimWRnLu5T9if3
9ZYe5tKAbljaiJRSNBb8VVLyuSFJdZR9mmAG8z09IKwTMscJ+1OXUzaT0Pawkf+c
m6YtE37qPj9JWdusZKsWJZjNOUEossNnaoHP/9P7plIfNjIuBRK2fa+61ay1p1g3
aiYc0JR2BvVC6P5Py2ui28DdfDotp9TfHlv33CuenbocM9hBw1hHdqYzyBsWytEP
GZtvbWv+otpD4g/IykfrHMGuITjtdU1pX8XWzdFZotCilVxo63PK7wz21bAmIp4f
nuJNj67tAPAhAyyTQysnIpDnw8xGOYEei056n3+hLVneH8RH4uu5iERHXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqh4+gKI8WqTTAiSXXONsvEad2qMB8GA1UdIwQY
MBaAFCCCD3lkgawOljfJYkFFl7H+InwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iOThiOWYtYjU4MS00ZTNlLWFlOGEt
OTg3ZDg2OTU2NmY2LzEvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iOThiOWYtYjU4MS00ZTNlLWFlOGEtOTg3ZDg2OTU2NmY2
LzEvSUlJUGVXU0JyQTZXTjhsaVFVV1hzZjRpZkNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHw0NyQrv
eqiJ+FO+NiV4aBMB4Jzjjg87OHvzxu9iligARREIyMuyuoedyAMHfwiTvtEXbfdN
YFRiopGmLz95CCZwjeEOGYYZmML/j5Ltcw9ISd9lwAF5z8NPaj7iLUvMmAUkMxfi
I85VKr8CdcSPOhClXonowvrbnVZtMWzdD4sCBczJNPKuMDu2vIuC6OSBfxjp2vjF
SlKo1L9PjcXnqKCH1Nde7yB+tTeIi0nJYLvm6lhQ00yRSynqeuDu/B2WohnJGnPS
vGb8eLO7PBqRDc16LOV+wjV3CReRBI0MRA0hgDF2sVIuD6+gq0cwFtrMSOzjGIhR
Vyx8v8fUsJfTmw==
-----END CERTIFICATE-----
Generated at Wed Oct 22 21:35:59 2025 by rpki-client