
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
File: I0tEmJRYnRb2dr_ygqvtqlbMe40.mft (raw, json)
Hash identifier: RmQ02vIsJ4yXnOFncG2+gjhHtmdCTHMqb2bXktwpLlg=
Subject key identifier: 18:C8:00:1D:CE:5A:9B:CE:89:63:8B:AF:19:4F:CA:87:FA:AC:48:26
Authority key identifier: 23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
Certificate issuer: /CN=234b449894589d16f676bff282abedaa56cc7b8d
Certificate serial: 0199FC587E25AD3D295739BB7262E0EA0997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
Manifest number: 071E
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: EBtcNhOJ92IGPVl-KdrFygnNVn4.roa (hash: Ykla49kgLw0fjmlAc5cpzOXx1fYgIVxrEDqc3yCSjAA=)
2: I0tEmJRYnRb2dr_ygqvtqlbMe40.crl (hash: K9/Li61zroOwwgMjeJucCFXUAXL4h8SZUn5J0XU5L+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7e:25:ad:3d:29:57:39:bb:72:62:e0:ea:09:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b449894589d16f676bff282abedaa56cc7b8d
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=18c8001dce5a9bce89638baf194fca87faac4826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:5f:ae:00:2a:81:70:06:3b:10:17:a1:cc:
09:58:b2:4e:a1:6c:a4:e0:bd:91:8d:5d:90:db:5d:
0b:f7:83:28:64:bd:33:86:77:4f:99:b0:4c:19:1d:
e8:c6:38:c0:1a:54:d7:ba:9e:12:aa:ee:f2:80:59:
f1:17:f9:29:71:ff:7a:f3:54:c4:db:0d:bf:ed:20:
bc:36:3d:40:bd:de:c4:db:90:55:b1:3a:fb:0b:c1:
d3:aa:0d:f6:0f:7f:6d:cb:e1:93:82:6c:dd:cc:ec:
49:e1:0a:84:d9:06:7b:9a:10:13:8b:19:f9:6e:9f:
76:af:83:6f:c8:75:89:6c:8d:9e:bd:a8:b7:70:36:
14:f0:94:c7:5c:ee:e0:21:b6:33:d2:a5:20:0e:f0:
2a:6b:fe:92:75:fb:61:05:77:ac:fc:d4:06:67:17:
3d:43:4f:8c:47:a3:04:6b:2f:8b:42:9d:07:0e:2b:
26:87:f7:e0:07:ba:61:a9:62:c8:44:f8:0b:78:68:
1f:09:dd:9c:3a:11:01:9a:ff:ee:5b:dd:6e:62:af:
c0:51:cc:3a:64:33:1e:12:ed:39:c0:65:f7:2a:2c:
34:0a:42:4e:58:5e:3d:94:cb:2e:c1:10:cd:dc:64:
7c:98:3c:52:20:f7:83:d4:1a:df:0b:27:6b:e5:5d:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C8:00:1D:CE:5A:9B:CE:89:63:8B:AF:19:4F:CA:87:FA:AC:48:26
X509v3 Authority Key Identifier:
keyid:23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:02:af:14:ba:b1:e2:9a:23:31:da:5a:26:c4:12:d3:73:43:
3d:21:6a:d3:94:7a:aa:fd:5e:e1:cf:cf:9f:de:bc:bd:1c:16:
e5:81:f7:21:5e:16:5b:85:e5:ff:6a:9c:dc:d2:b2:fa:07:1f:
f0:27:23:93:4f:95:c4:b5:e8:f9:1c:8c:29:f8:c2:79:be:97:
4f:1d:97:cc:1f:98:57:ed:4f:c6:2c:9a:9c:3d:ed:61:b7:87:
3e:63:91:95:e2:ea:a3:67:ba:8a:0b:d8:63:3f:af:1c:62:86:
64:59:cf:0c:04:1c:17:b9:2b:a5:28:13:ec:85:43:10:bf:a1:
52:fc:f1:fb:46:b2:57:45:05:fb:b1:8c:ef:40:41:51:79:21:
60:ec:6e:fb:7d:b0:cb:f6:a1:bf:f0:3f:eb:e6:91:52:ab:20:
b0:df:13:36:54:f1:c3:54:ad:e1:6a:79:5a:fe:05:5d:36:1b:
7e:5c:b3:f3:08:a0:73:5b:01:6e:1f:57:f8:23:80:65:78:e9:
8a:58:64:3e:65:21:29:51:4d:ac:07:c5:fb:a3:4e:7d:51:a7:
37:33:9a:0b:d0:5c:08:08:fa:a2:13:3f:58:ad:bf:5c:5f:35:
10:2d:1d:70:5a:9d:52:11:e3:9b:dc:b4:93:07:6f:85:9d:a5:
9e:ea:8e:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WH4lrT0pVzm7cmLg6gmXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGI0NDk4OTQ1ODlkMTZmNjc2YmZmMjgyYWJlZGFhNTZj
YzdiOGQwHhcNMjUxMDE5MTIwMTIxWhcNMjUxMDIwMTIwMTIxWjAzMTEwLwYDVQQD
EygxOGM4MDAxZGNlNWE5YmNlODk2MzhiYWYxOTRmY2E4N2ZhYWM0ODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki1frgAqgXAGOxAXocwJWLJOoWyk
4L2RjV2Q210L94MoZL0zhndPmbBMGR3oxjjAGlTXup4Squ7ygFnxF/kpcf9681TE
2w2/7SC8Nj1Avd7E25BVsTr7C8HTqg32D39ty+GTgmzdzOxJ4QqE2QZ7mhATixn5
bp92r4NvyHWJbI2evai3cDYU8JTHXO7gIbYz0qUgDvAqa/6SdfthBXes/NQGZxc9
Q0+MR6MEay+LQp0HDismh/fgB7phqWLIRPgLeGgfCd2cOhEBmv/uW91uYq/AUcw6
ZDMeEu05wGX3Kiw0CkJOWF49lMsuwRDN3GR8mDxSIPeD1BrfCydr5V3bLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjIAB3OWpvOiWOLrxlPyof6rEgmMB8GA1UdIwQY
MBaAFCNLRJiUWJ0W9na/8oKr7apWzHuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTB0RW1KUlluUmIyZHJfeWdxdnRxbGJNZTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMzE4ZDktNTY2OS00OTIwLWE1NWMt
NzNhNjNiMjU5YmViLzEvSTB0RW1KUlluUmIyZHJfeWdxdnRxbGJNZTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zMzE4ZDktNTY2OS00OTIwLWE1NWMtNzNhNjNiMjU5YmVi
LzEvSTB0RW1KUlluUmIyZHJfeWdxdnRxbGJNZTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgKvFLqx
4pojMdpaJsQS03NDPSFq05R6qv1e4c/Pn968vRwW5YH3IV4WW4Xl/2qc3NKy+gcf
8Ccjk0+VxLXo+RyMKfjCeb6XTx2XzB+YV+1PxiyanD3tYbeHPmORleLqo2e6igvY
Yz+vHGKGZFnPDAQcF7krpSgT7IVDEL+hUvzx+0ayV0UF+7GM70BBUXkhYOxu+32w
y/ahv/A/6+aRUqsgsN8TNlTxw1St4Wp5Wv4FXTYbflyz8wigc1sBbh9X+COAZXjp
ilhkPmUhKVFNrAfF+6NOfVGnNzOaC9BcCAj6ohM/WK2/XF81EC0dcFqdUhHjm9y0
kwdvhZ2lnuqONw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:53 2025 by rpki-client