Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
File: I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft (raw, json)
Hash identifier: K3vctVqpk9HmSG95hnoX9yiOAlDPaPMIrHXKxizGpco=
Subject key identifier: 05:23:CC:55:D2:95:23:5E:45:91:5D:63:24:A4:B1:23:F4:8A:F1:EB
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Certificate issuer: /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial: 0199FFC7E231AA63E4477F48EF8261705B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
Manifest number: 0A2C
Signing time: Mon 20 Oct 2025 04:01:53 +0000
Manifest this update: Mon 20 Oct 2025 04:01:53 +0000
Manifest next update: Tue 21 Oct 2025 04:01:53 +0000
Files and hashes: 1: I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl (hash: FKevbiDis39vDwpdhFmzHBFcdKLX81oBq/1scCLqfp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:e2:31:aa:63:e4:47:7f:48:ef:82:61:70:5b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Validity
Not Before: Oct 20 04:01:53 2025 GMT
Not After : Oct 21 04:01:53 2025 GMT
Subject: CN=0523cc55d295235e45915d6324a4b123f48af1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:78:fc:51:a4:b8:27:2c:57:30:c8:90:de:
a3:60:f9:e3:65:90:f3:8f:38:47:14:bb:e5:70:ed:
c3:4f:13:ab:4f:dd:a4:b2:39:2e:67:7a:5e:6d:07:
4d:77:8e:c5:10:d7:36:16:c1:09:e1:39:49:95:6f:
14:64:c5:b0:60:72:eb:e8:2c:3e:37:2f:2d:23:ff:
e9:94:d6:c9:4a:4a:7d:22:b6:0f:a7:40:ae:e4:36:
97:b0:79:d0:31:f9:c3:e0:a5:4f:e0:72:22:89:1a:
39:a2:c7:50:c2:21:2b:2d:c8:89:8b:a4:78:0f:fe:
f5:69:d9:b2:15:d1:10:cc:86:11:4c:9e:04:d5:1d:
c7:67:55:b7:88:8f:74:86:fb:ae:29:59:93:ef:05:
41:33:13:da:6f:55:82:00:d2:dd:23:e7:52:05:3e:
03:5b:01:5f:39:00:17:f4:40:6a:5d:24:aa:f8:0c:
31:88:27:e6:1c:05:3d:92:15:99:8c:51:35:63:05:
fb:08:86:e7:71:0c:0d:c1:bc:68:22:52:a7:f3:7d:
c5:a6:ce:be:26:b3:4a:32:92:9e:62:d8:e7:fe:22:
bf:03:b8:ce:ad:03:09:0c:b9:dc:ee:80:28:57:97:
5e:8a:6c:6f:2b:11:e7:bc:74:83:c1:d1:b4:fb:52:
c4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:23:CC:55:D2:95:23:5E:45:91:5D:63:24:A4:B1:23:F4:8A:F1:EB
X509v3 Authority Key Identifier:
keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:93:2d:80:e4:93:e0:bb:78:d1:cd:94:eb:ca:88:a9:94:6c:
66:39:c3:1b:a1:79:1e:de:c4:7c:ec:22:e2:21:64:7d:21:04:
24:f3:74:c0:0b:e0:17:d1:35:91:7f:2a:f2:04:dd:3b:42:a5:
24:a2:db:86:7d:8e:f2:1d:56:00:17:d1:64:33:ad:3f:5b:f8:
bd:65:68:11:11:95:85:2f:37:42:11:8b:c0:60:eb:07:22:00:
eb:d4:30:db:9e:09:eb:67:2d:01:82:bb:46:0f:b8:24:17:12:
7b:6e:b6:20:42:83:68:8b:14:b3:d2:07:c9:b3:94:6c:50:b2:
db:5d:1a:42:5b:10:32:fc:e3:7e:89:4e:62:72:4f:67:f9:ae:
b8:98:90:3a:5b:fc:12:42:ed:27:23:7e:69:23:a8:60:4d:17:
5c:3c:a7:bc:18:bb:2a:b6:b4:2d:18:3c:44:6a:85:ec:e4:1e:
b7:09:20:e1:70:91:41:76:c0:1b:35:3d:b6:92:1a:dd:7a:d1:
de:7e:1c:a5:fc:6a:e1:05:1f:07:1f:6e:3b:27:b8:ce:cb:8f:
c3:f1:33:10:72:e9:31:42:ea:e1:3b:1a:8b:8f:d2:32:bf:cd:
bd:f3:69:62:80:e0:d9:ce:7e:93:3f:39:01:20:07:a0:38:d4:
8d:5a:25:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x+IxqmPkR39I74JhcFtmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzOTNmZjIxYzZmNzMxMDc1N2E5ZGNkNzgxZGE4ODA1ZjIz
Nzk0ZDgwHhcNMjUxMDIwMDQwMTUzWhcNMjUxMDIxMDQwMTUzWjAzMTEwLwYDVQQD
EygwNTIzY2M1NWQyOTUyMzVlNDU5MTVkNjMyNGE0YjEyM2Y0OGFmMWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycJ4/FGkuCcsVzDIkN6jYPnjZZDz
jzhHFLvlcO3DTxOrT92ksjkuZ3pebQdNd47FENc2FsEJ4TlJlW8UZMWwYHLr6Cw+
Ny8tI//plNbJSkp9IrYPp0Cu5DaXsHnQMfnD4KVP4HIiiRo5osdQwiErLciJi6R4
D/71admyFdEQzIYRTJ4E1R3HZ1W3iI90hvuuKVmT7wVBMxPab1WCANLdI+dSBT4D
WwFfOQAX9EBqXSSq+AwxiCfmHAU9khWZjFE1YwX7CIbncQwNwbxoIlKn833Fps6+
JrNKMpKeYtjn/iK/A7jOrQMJDLnc7oAoV5deimxvKxHnvHSDwdG0+1LEcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUjzFXSlSNeRZFdYySksSP0ivHrMB8GA1UdIwQY
MBaAFCOT/yHG9zEHV6nc14HaiAXyN5TYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTVQX0ljYjNNUWRYcWR6WGdkcUlCZkkzbE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYWVkZGMtZGJmMi00NDdmLWI0MmQt
NWIzMDYzOWJhYmY2LzEvSTVQX0ljYjNNUWRYcWR6WGdkcUlCZkkzbE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iYWVkZGMtZGJmMi00NDdmLWI0MmQtNWIzMDYzOWJhYmY2
LzEvSTVQX0ljYjNNUWRYcWR6WGdkcUlCZkkzbE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJMtgOST
4Lt40c2U68qIqZRsZjnDG6F5Ht7EfOwi4iFkfSEEJPN0wAvgF9E1kX8q8gTdO0Kl
JKLbhn2O8h1WABfRZDOtP1v4vWVoERGVhS83QhGLwGDrByIA69Qw254J62ctAYK7
Rg+4JBcSe262IEKDaIsUs9IHybOUbFCy210aQlsQMvzjfolOYnJPZ/muuJiQOlv8
EkLtJyN+aSOoYE0XXDynvBi7Kra0LRg8RGqF7OQetwkg4XCRQXbAGzU9tpIa3XrR
3n4cpfxq4QUfBx9uOye4zsuPw/EzEHLpMULq4Tsai4/SMr/NvfNpYoDg2c5+kz85
ASAHoDjUjVolAg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:27 2025 by rpki-client