
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier: BZ8yKqH8cSr3gIXnzv9Sqn0eB7B6m4+6xpGiJz92L8k=
Subject key identifier: ED:EC:A6:44:88:E7:B1:30:DA:19:D1:61:B8:63:4B:BC:2D:6A:40:4C
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial: 0199FB0F5895F1D32C9FC902F0B993237F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number: 0157
Signing time: Sun 19 Oct 2025 06:01:50 +0000
Manifest this update: Sun 19 Oct 2025 06:01:50 +0000
Manifest next update: Mon 20 Oct 2025 06:01:50 +0000
Files and hashes: 1: ZUMP4gFwulXOpnT82AiRknnGbj0.roa (hash: bDRLu83yHenh9/HNiwqhOVvpz6DGXK6dcJiMgfWy7JM=)
2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: JrrdIwk5fSK5AcescdPaDn4AiaDRGEyP+Tenp7ow0Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:58:95:f1:d3:2c:9f:c9:02:f0:b9:93:23:7f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Validity
Not Before: Oct 19 06:01:50 2025 GMT
Not After : Oct 20 06:01:50 2025 GMT
Subject: CN=edeca64488e7b130da19d161b8634bbc2d6a404c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5d:c5:89:1c:b2:4d:d4:08:ed:4f:fc:d4:d7:
e9:a7:f5:08:07:6d:8e:ab:3c:94:61:a5:66:51:cd:
ba:ba:f5:ce:1f:c6:58:40:64:aa:c7:b8:6b:ed:d0:
0d:77:bd:60:4b:11:94:ce:64:14:ce:c5:bc:f4:b4:
d3:dc:e2:9c:82:20:22:89:26:a8:f6:10:b8:52:e6:
a4:c4:66:22:81:db:37:42:e8:e8:84:ce:8d:78:f6:
a3:5b:a2:d5:0d:3e:34:b7:8f:f7:5f:a0:c1:bc:b1:
07:52:cf:ea:57:5b:d9:8c:93:d8:53:f2:47:20:6b:
2e:7c:f3:81:87:d0:3e:15:00:fe:e5:4b:01:04:b9:
40:d9:ea:92:14:fb:fa:b3:c1:30:57:a5:10:42:59:
67:7b:f8:92:28:c7:a6:b0:28:d1:9a:d6:44:44:cc:
0c:19:64:41:24:3f:b1:03:c7:30:3d:40:33:0c:63:
a3:06:f5:4d:5b:76:b3:c6:29:76:d9:2b:2f:1d:e1:
a8:75:b5:04:7c:07:0a:02:91:20:4e:c8:31:96:74:
b7:20:b8:ce:a1:ac:92:6c:ff:bf:63:8f:33:df:e9:
cf:cd:ab:82:87:9d:c4:dc:31:7c:8d:15:bd:38:ae:
a2:da:5f:4e:18:d7:c5:30:d7:7b:6a:f4:dc:be:f0:
83:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EC:A6:44:88:E7:B1:30:DA:19:D1:61:B8:63:4B:BC:2D:6A:40:4C
X509v3 Authority Key Identifier:
keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:85:f7:64:1c:b6:0c:65:59:fa:96:ab:b2:d7:6a:52:6d:2d:
82:27:e1:bb:2a:b9:73:12:13:79:26:e8:9c:f5:91:8d:fc:f6:
f7:2f:6f:fb:36:57:a2:94:92:54:d0:a0:36:61:09:e3:4d:76:
8a:a6:24:82:98:d4:d6:dd:b6:71:fd:e5:ba:c6:72:23:bd:fb:
c2:c2:8a:a6:ee:5e:16:d2:b8:55:2d:cf:71:6f:da:b2:33:6c:
89:34:2a:b9:73:e9:14:c7:bd:05:44:43:fd:1b:5f:80:2d:94:
f6:b3:23:cd:32:33:11:54:44:e9:06:6e:f8:7a:6c:89:a7:b8:
f3:f0:ec:3b:bb:5e:4d:62:47:54:6e:21:e3:ea:ca:0e:36:f7:
49:f1:1a:d6:fc:c4:8c:a1:c9:17:ef:d2:1d:64:80:55:1b:55:
67:6b:c2:f6:fe:d1:67:9b:aa:cc:e5:1b:6a:27:24:65:77:0b:
ec:44:9a:45:ab:75:6f:bf:b5:7d:67:6e:28:20:35:a2:e4:55:
ee:dd:7e:a7:e4:87:74:22:0f:6e:43:2b:85:6c:3a:33:95:9b:
70:5c:69:96:91:ed:c6:00:04:e6:b2:6c:37:7b:09:65:ec:da:
8b:7a:40:5d:96:2f:78:a7:48:ad:f6:55:b5:a9:91:20:56:d1:
7b:28:67:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7D1iV8dMsn8kC8LmTI38MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGU2NGUwNzEwZDMyZjI2YTM2ZDY4Y2ZmN2IzZjg2YWM4
MjBjZWIwHhcNMjUxMDE5MDYwMTUwWhcNMjUxMDIwMDYwMTUwWjAzMTEwLwYDVQQD
EyhlZGVjYTY0NDg4ZTdiMTMwZGExOWQxNjFiODYzNGJiYzJkNmE0MDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll3FiRyyTdQI7U/81Nfpp/UIB22O
qzyUYaVmUc26uvXOH8ZYQGSqx7hr7dANd71gSxGUzmQUzsW89LTT3OKcgiAiiSao
9hC4UuakxGYigds3QujohM6NePajW6LVDT40t4/3X6DBvLEHUs/qV1vZjJPYU/JH
IGsufPOBh9A+FQD+5UsBBLlA2eqSFPv6s8EwV6UQQllne/iSKMemsCjRmtZERMwM
GWRBJD+xA8cwPUAzDGOjBvVNW3azxil22SsvHeGodbUEfAcKApEgTsgxlnS3ILjO
oaySbP+/Y48z3+nPzauCh53E3DF8jRW9OK6i2l9OGNfFMNd7avTcvvCDmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3spkSI57Ew2hnRYbhjS7wtakBMMB8GA1UdIwQY
MBaAFGyOZOBxDTLyajbWjP97P4asggzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkk1azRIRU5NdkpxTnRhTV8zc19ocXlDRE9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83YmUxYWEtNWIwNS00NzUzLWI3ZDgt
YjhiYjlkN2RhMmRiLzEvYkk1azRIRU5NdkpxTnRhTV8zc19ocXlDRE9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC83YmUxYWEtNWIwNS00NzUzLWI3ZDgtYjhiYjlkN2RhMmRi
LzEvYkk1azRIRU5NdkpxTnRhTV8zc19ocXlDRE9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYX3ZBy2
DGVZ+parstdqUm0tgifhuyq5cxITeSbonPWRjfz29y9v+zZXopSSVNCgNmEJ4012
iqYkgpjU1t22cf3lusZyI737wsKKpu5eFtK4VS3PcW/asjNsiTQquXPpFMe9BURD
/RtfgC2U9rMjzTIzEVRE6QZu+Hpsiae48/DsO7teTWJHVG4h4+rKDjb3SfEa1vzE
jKHJF+/SHWSAVRtVZ2vC9v7RZ5uqzOUbaickZXcL7ESaRat1b7+1fWduKCA1ouRV
7t1+p+SHdCIPbkMrhWw6M5WbcFxplpHtxgAE5rJsN3sJZezai3pAXZYveKdIrfZV
tamRIFbReyhn6A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:10 2025 by rpki-client