Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
File: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft (raw, json)
Hash identifier: 8QWjOHGWZH2gRR4KN0Xw2BRhw/zTmNQzoL06lLMg9w4=
Subject key identifier: 2C:F7:72:55:E3:A8:3F:B9:6E:79:82:05:BE:AC:16:FB:EE:A0:BE:C1
Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
Certificate issuer: /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Certificate serial: 019922C375ABE255F7CB1CA8AB3270113AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
Manifest number: 0992
Signing time: Sun 07 Sep 2025 06:00:58 +0000
Manifest this update: Sun 07 Sep 2025 06:00:58 +0000
Manifest next update: Mon 08 Sep 2025 06:00:58 +0000
Files and hashes: 1: GE_VINn07eeSJYTvZIuo88WEV3U.roa (hash: 7RURCigC0zQY7NED6IrTycMVsCozhn/RUtlNFgdIpNw=)
2: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl (hash: IPt/Z/UoborxINR3FqN6bWBpLoboPi7XAY0VdrFv9fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:75:ab:e2:55:f7:cb:1c:a8:ab:32:70:11:3a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Validity
Not Before: Sep 7 06:00:58 2025 GMT
Not After : Sep 8 06:00:58 2025 GMT
Subject: CN=2cf77255e3a83fb96e798205beac16fbeea0bec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:00:d9:c2:19:b5:cd:4a:e8:fa:75:2e:b6:87:
19:c1:67:d7:fb:68:1e:c1:04:c2:41:88:f3:7a:64:
e9:7a:81:80:32:ae:ab:58:4e:8b:ed:60:08:7f:ea:
ff:75:43:1b:df:1d:9a:1e:a7:be:68:d3:b3:c7:31:
b0:f5:68:f8:79:cd:37:d2:c6:75:43:fa:8f:3a:62:
88:ff:64:f1:0f:a4:8f:ff:07:b8:ae:c3:33:0d:40:
13:f5:6f:fb:83:00:87:53:ba:32:a5:a6:99:76:b3:
b6:ee:64:28:71:cd:28:8f:c7:c9:91:17:ed:2c:0d:
77:b5:a9:7f:23:5e:a3:b5:7f:9f:46:80:24:d7:18:
0e:d7:f8:69:59:ec:34:b8:c9:91:b9:ef:a7:8d:f8:
1d:5c:be:a2:2a:fa:23:28:bb:e0:3b:7f:05:63:8c:
c1:d5:ad:c1:0c:5e:7d:ae:92:31:1b:d5:39:16:0d:
5e:49:98:0b:a4:50:20:b3:f1:8c:6d:c8:ff:17:8a:
4a:9a:fc:a7:c8:f9:aa:a3:5b:42:d7:7e:d9:82:86:
0a:3c:60:53:a5:eb:af:c5:c3:f9:79:0f:ba:2e:9f:
34:62:cf:45:e1:ac:13:3a:94:33:c3:1b:8a:04:db:
9d:54:5a:ee:06:be:ca:7b:f3:4d:08:c8:d9:a8:ff:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F7:72:55:E3:A8:3F:B9:6E:79:82:05:BE:AC:16:FB:EE:A0:BE:C1
X509v3 Authority Key Identifier:
keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f5:d5:ef:2d:d1:f6:2d:94:67:b6:54:5e:86:f0:8d:c4:0d:
93:17:e0:3b:c2:ae:a8:b4:06:e2:9d:7a:42:64:51:26:9c:e3:
fd:e9:64:f5:0f:65:bf:47:56:89:45:32:de:6f:97:aa:1f:7d:
58:e6:d6:56:2f:81:9b:bb:57:ff:76:3f:86:59:4a:0c:ed:bf:
3f:c3:31:04:ef:5b:86:38:3e:2a:0a:d9:37:41:da:49:36:6f:
f2:e7:5f:06:00:6c:30:cd:6d:87:b7:b0:15:3f:02:e6:d7:8a:
7e:0c:1c:ca:84:9d:7f:71:3e:96:ff:27:7e:1c:34:6f:5f:13:
f2:3e:e3:6d:fd:65:0f:e5:1b:d3:43:f9:46:99:a9:67:ce:75:
ef:fb:24:ad:6a:7e:47:85:e8:de:cc:5b:8b:a4:e7:33:08:7b:
1e:30:5d:73:95:3e:83:02:15:57:2a:98:26:b8:12:70:7e:60:
51:7e:b7:bd:b7:46:21:d1:18:b3:5a:be:33:2f:9d:d2:72:20:
95:40:44:45:03:5d:5a:35:e3:86:b8:8c:3e:92:ff:cd:86:70:
04:fe:b7:ec:b1:94:8e:c3:3f:5e:dd:56:08:36:bd:88:fe:7b:
d0:de:63:ba:51:56:74:c3:5a:a6:a3:e5:da:a6:04:a3:2b:34:
42:32:8f:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw3Wr4lX3yxyoqzJwETqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOTFhNzdmN2M0MjRlOTEyNzM5ODQ3M2JmYTNhMmI5NzI3
ZWJiNDUwHhcNMjUwOTA3MDYwMDU4WhcNMjUwOTA4MDYwMDU4WjAzMTEwLwYDVQQD
EygyY2Y3NzI1NWUzYTgzZmI5NmU3OTgyMDViZWFjMTZmYmVlYTBiZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QDZwhm1zUro+nUutocZwWfX+2ge
wQTCQYjzemTpeoGAMq6rWE6L7WAIf+r/dUMb3x2aHqe+aNOzxzGw9Wj4ec030sZ1
Q/qPOmKI/2TxD6SP/we4rsMzDUAT9W/7gwCHU7oypaaZdrO27mQocc0oj8fJkRft
LA13tal/I16jtX+fRoAk1xgO1/hpWew0uMmRue+njfgdXL6iKvojKLvgO38FY4zB
1a3BDF59rpIxG9U5Fg1eSZgLpFAgs/GMbcj/F4pKmvynyPmqo1tC137ZgoYKPGBT
peuvxcP5eQ+6Lp80Ys9F4awTOpQzwxuKBNudVFruBr7Ke/NNCMjZqP+olQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCz3clXjqD+5bnmCBb6sFvvuoL7BMB8GA1UdIwQY
MBaAFCCRp398Qk6RJzmEc7+jorlyfrtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUpHbmYzeENUcEVuT1lSenY2T2l1WEotdTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNmIzMTctOTExNC00MjZiLTk5ODMt
OWEyMjk3ODBlMGJlLzEvSUpHbmYzeENUcEVuT1lSenY2T2l1WEotdTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wNmIzMTctOTExNC00MjZiLTk5ODMtOWEyMjk3ODBlMGJl
LzEvSUpHbmYzeENUcEVuT1lSenY2T2l1WEotdTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/XV7y3R
9i2UZ7ZUXobwjcQNkxfgO8KuqLQG4p16QmRRJpzj/elk9Q9lv0dWiUUy3m+Xqh99
WObWVi+Bm7tX/3Y/hllKDO2/P8MxBO9bhjg+KgrZN0HaSTZv8udfBgBsMM1th7ew
FT8C5teKfgwcyoSdf3E+lv8nfhw0b18T8j7jbf1lD+Ub00P5RpmpZ8517/skrWp+
R4Xo3sxbi6TnMwh7HjBdc5U+gwIVVyqYJrgScH5gUX63vbdGIdEYs1q+My+d0nIg
lUBERQNdWjXjhriMPpL/zYZwBP637LGUjsM/Xt1WCDa9iP570N5julFWdMNapqPl
2qYEoys0QjKPoQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:56 2025 by rpki-client