Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: qbbw6+2qvPSEKVMnUUeTYAcwM2i7DAvBHl1l1OHA/rw=
Subject key identifier: 78:5A:A0:AC:C9:78:62:19:40:BD:66:34:64:D6:78:52:91:31:5A:A8
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 0199FC8FC22C55D5D6E48C98BC28A8C0016F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 13E6
Signing time: Sun 19 Oct 2025 13:01:43 +0000
Manifest this update: Sun 19 Oct 2025 13:01:43 +0000
Manifest next update: Mon 20 Oct 2025 13:01:43 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: dLlddF2VN9K/UMfLkKOQ+V0PGWXGqWhtSKbzOPoRUlA=)
2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=)
3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c2:2c:55:d5:d6:e4:8c:98:bc:28:a8:c0:01:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Oct 19 13:01:43 2025 GMT
Not After : Oct 20 13:01:43 2025 GMT
Subject: CN=785aa0acc978621940bd663464d6785291315aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:ca:ff:08:5a:14:55:e8:e2:76:e3:a7:d0:
b3:b5:11:93:3e:b2:2f:78:3d:52:dc:ff:d9:ac:56:
bb:60:6c:0f:78:bd:07:6b:af:e8:12:9b:1c:e8:d1:
2e:6a:9f:b3:75:05:be:b9:52:3a:96:ad:cf:14:df:
ff:11:44:b3:c1:97:12:68:67:bf:b4:85:fa:8c:8f:
8f:12:06:3d:48:2b:9f:5d:16:38:03:93:df:e7:a2:
8c:31:1a:30:7e:4c:39:89:47:57:2b:09:c9:01:30:
a9:f3:1d:84:b5:6b:54:51:5d:dd:72:74:94:7b:f4:
6f:09:f6:e0:50:d2:c0:55:b8:b6:90:2b:ea:56:48:
16:4b:2c:7f:c7:b7:a4:e7:d7:56:cb:fa:0a:fa:2b:
3b:c4:41:a8:4d:58:19:95:b1:d4:39:3d:ec:17:a4:
7f:4c:2d:54:bc:0c:75:1d:61:6e:16:7a:8a:7e:ca:
c1:44:ed:a7:a0:0e:91:eb:1e:e7:67:12:e8:7a:f6:
64:ad:5f:fa:5f:21:b4:9e:d2:e7:fd:4b:cf:c7:11:
49:a5:08:da:6d:61:b3:97:f5:fa:ed:e6:4d:d6:fa:
35:f1:1a:ac:35:26:d6:22:c6:de:2d:fa:c4:c1:5e:
d3:2a:1b:98:f2:51:22:e8:56:97:ad:05:59:d2:e1:
fd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5A:A0:AC:C9:78:62:19:40:BD:66:34:64:D6:78:52:91:31:5A:A8
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7e:d1:bb:8d:7d:04:91:c0:2a:3d:b4:2a:fa:73:b2:70:98:
6a:bf:7f:b9:02:ac:a4:79:f6:08:35:93:0c:a2:1a:59:f3:b0:
9a:ed:c8:67:46:64:e4:52:d5:82:b7:55:26:37:02:80:4f:e1:
aa:46:2e:59:5b:d7:8d:cf:d8:b5:91:be:05:dd:37:1e:54:ab:
1f:92:c3:e6:11:39:e3:92:d0:55:c0:22:bc:f8:e1:ee:f6:c6:
5a:a4:63:3d:f9:fe:60:cc:48:12:05:f4:67:1b:46:92:71:9c:
24:18:b3:c6:4b:8c:6e:3a:49:fd:aa:74:fa:f5:87:d7:f9:33:
f5:bd:16:d5:bb:3b:81:66:e6:e0:e2:c9:c7:a6:a4:98:d1:9a:
c4:16:43:27:e2:b8:56:bb:99:7a:ad:ea:f1:64:42:c1:b1:7a:
10:ab:74:41:85:95:3d:f6:d4:8c:34:a4:02:29:79:7a:64:b1:
f6:87:c6:3d:0b:56:7e:fc:9d:a4:65:37:92:e2:f1:a8:98:bd:
e3:68:f5:d3:75:e7:34:a0:df:e9:89:32:e8:5a:d9:a4:d3:9b:
0e:2d:f7:b7:7f:c1:af:57:e9:6c:40:d3:0e:a1:3b:e9:e0:9c:
e6:0a:0a:f7:fe:3e:b0:7a:fe:c2:27:fd:7e:a4:0d:b7:b5:57:
89:81:02:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j8IsVdXW5IyYvCiowAFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZWU1ZTcxNDA5YjIxZmQ1YzgyMGYzZDNhYzNmZGMwZmNl
NzVhMGIwHhcNMjUxMDE5MTMwMTQzWhcNMjUxMDIwMTMwMTQzWjAzMTEwLwYDVQQD
Eyg3ODVhYTBhY2M5Nzg2MjE5NDBiZDY2MzQ2NGQ2Nzg1MjkxMzE1YWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvInK/whaFFXo4nbjp9CztRGTPrIv
eD1S3P/ZrFa7YGwPeL0Ha6/oEpsc6NEuap+zdQW+uVI6lq3PFN//EUSzwZcSaGe/
tIX6jI+PEgY9SCufXRY4A5Pf56KMMRowfkw5iUdXKwnJATCp8x2EtWtUUV3dcnSU
e/RvCfbgUNLAVbi2kCvqVkgWSyx/x7ek59dWy/oK+is7xEGoTVgZlbHUOT3sF6R/
TC1UvAx1HWFuFnqKfsrBRO2noA6R6x7nZxLoevZkrV/6XyG0ntLn/UvPxxFJpQja
bWGzl/X67eZN1vo18RqsNSbWIsbeLfrEwV7TKhuY8lEi6FaXrQVZ0uH9awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhaoKzJeGIZQL1mNGTWeFKRMVqoMB8GA1UdIwQY
MBaAFCPuXnFAmyH9XIIPPTrD/cD851oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMt
YmM2MzdhODUxMmIxLzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMtYmM2MzdhODUxMmIx
LzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN37Ru419
BJHAKj20KvpzsnCYar9/uQKspHn2CDWTDKIaWfOwmu3IZ0Zk5FLVgrdVJjcCgE/h
qkYuWVvXjc/YtZG+Bd03HlSrH5LD5hE545LQVcAivPjh7vbGWqRjPfn+YMxIEgX0
ZxtGknGcJBizxkuMbjpJ/ap0+vWH1/kz9b0W1bs7gWbm4OLJx6akmNGaxBZDJ+K4
VruZeq3q8WRCwbF6EKt0QYWVPfbUjDSkAil5emSx9ofGPQtWfvydpGU3kuLxqJi9
42j103XnNKDf6Yky6FrZpNObDi33t3/Br1fpbEDTDqE76eCc5goK9/4+sHr+wif9
fqQNt7VXiYECnA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:32 2025 by rpki-client