Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
File: I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json)
Hash identifier: c0Qd40dHisQgbfngLZZD8EGBD40Y3TEfuP4qmPhh+Ug=
Subject key identifier: 12:AC:57:DF:8C:C2:49:7C:04:97:07:C2:77:76:4C:43:01:C6:C5:0F
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 0199FDD9639279FD96DA4B86B8AAE18C7E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 19:01:46 +0000
Manifest this update: Sun 19 Oct 2025 19:01:46 +0000
Manifest next update: Mon 20 Oct 2025 19:01:46 +0000
Files and hashes: 1: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: UFnr5+yFdbTgZDnKJpLROVFmiFRnA9Ycpn+trFHnbNw=)
2: lw90sey6Y2XkP3Sip6ebzWQtTKU.roa (hash: IdqbojAlXr4XwjmKtJYEU/2zd7cvDplQCfLZ9IO+/d0=)
3: uBZl19XYTdc5SBXaRHXvV0GGF98.roa (hash: 1Ti03xYR3EsLOQdndtqiFtUtuVxyXY66yoLYTtqG1ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:63:92:79:fd:96:da:4b:86:b8:aa:e1:8c:7e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Oct 19 19:01:46 2025 GMT
Not After : Oct 20 19:01:46 2025 GMT
Subject: CN=12ac57df8cc2497c049707c277764c4301c6c50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:ef:26:6d:c7:34:17:8c:8e:d7:02:3b:1f:
e5:c7:2b:d2:05:0a:49:08:46:d3:2e:49:fe:11:35:
15:67:30:75:90:8a:22:e8:d4:de:ec:66:c9:57:2c:
e4:11:2f:8c:67:a9:6f:ca:d8:d5:f5:08:08:ff:56:
e4:be:9b:dd:cb:46:39:f6:32:99:06:72:f8:82:14:
09:9e:f6:fb:a6:35:ce:51:7a:70:71:18:f0:e6:33:
e4:ea:2e:5e:cc:1e:3a:bd:cb:99:ff:58:10:61:25:
17:88:97:cc:6b:ba:df:e0:ed:8a:5d:f8:4a:d1:a7:
e1:06:75:f1:cf:ad:27:01:fa:c5:df:46:22:33:47:
52:74:e1:d5:b0:aa:a0:6f:ff:4a:f6:29:7e:bd:94:
34:4a:02:75:90:39:85:91:10:37:5c:09:ea:41:e2:
96:e4:0f:a3:05:c4:cf:7d:5b:e9:45:6b:36:f6:38:
2e:e6:2f:45:0b:2b:25:ac:2b:11:be:5a:46:09:b6:
0b:a1:84:43:09:21:bc:f0:8a:24:ed:7b:6a:10:79:
0a:62:1b:f3:8f:b9:c8:e6:53:c9:1b:a8:24:b2:92:
9a:f8:af:c2:ef:2f:4b:29:ce:75:f1:da:3b:d8:15:
84:99:bd:8b:1b:78:3e:68:be:a8:cb:57:41:01:bc:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AC:57:DF:8C:C2:49:7C:04:97:07:C2:77:76:4C:43:01:C6:C5:0F
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:22:f4:5c:df:41:11:89:69:1b:51:16:46:fb:d9:99:69:69:
88:0f:b8:d3:90:a9:98:7d:fe:2f:b1:d5:4d:b3:9c:64:0e:ec:
11:52:54:df:b1:89:30:74:23:17:e6:d0:94:e7:a5:c7:b9:d0:
ce:e2:12:da:a5:28:6f:ad:56:0c:3d:c4:9b:0d:fb:e4:d3:7c:
14:d2:eb:ab:71:14:9a:76:63:35:2d:a7:4e:66:d3:14:cc:cc:
a3:ab:4a:61:cc:33:0d:b3:2c:cf:5e:c2:eb:ab:41:9d:57:12:
9e:52:48:d8:05:aa:eb:cf:05:80:8f:22:f9:2d:99:2e:25:8f:
57:8d:ed:5a:ab:ff:17:52:e8:e5:e1:53:6b:02:3f:4d:a9:10:
ed:cb:27:fc:da:0d:d8:de:a5:76:ca:99:81:0e:4a:70:27:59:
d7:a0:79:2b:8f:c2:c9:6b:d5:4f:00:7d:2c:ef:44:bd:9a:49:
1e:db:79:5e:36:f2:4e:f8:39:46:88:34:57:0a:91:e9:49:1a:
2b:9b:69:17:d2:aa:2b:15:18:16:ab:e0:eb:ae:df:12:fb:7b:
52:8b:ce:a2:be:49:b3:5c:84:82:84:bf:3e:a7:ef:b3:f0:99:
e3:ad:42:01:1b:0d:e8:5c:de:dc:6a:69:87:cd:61:85:7b:4a:
72:95:86:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92WOSef2W2kuGuKrhjH5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzOWM0NWU0MzYyNTUyMjA4MGFlYzUzOTUyOTg5YTEzYTI4
YWJkMDAwHhcNMjUxMDE5MTkwMTQ2WhcNMjUxMDIwMTkwMTQ2WjAzMTEwLwYDVQQD
EygxMmFjNTdkZjhjYzI0OTdjMDQ5NzA3YzI3Nzc2NGM0MzAxYzZjNTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyezvJm3HNBeMjtcCOx/lxyvSBQpJ
CEbTLkn+ETUVZzB1kIoi6NTe7GbJVyzkES+MZ6lvytjV9QgI/1bkvpvdy0Y59jKZ
BnL4ghQJnvb7pjXOUXpwcRjw5jPk6i5ezB46vcuZ/1gQYSUXiJfMa7rf4O2KXfhK
0afhBnXxz60nAfrF30YiM0dSdOHVsKqgb/9K9il+vZQ0SgJ1kDmFkRA3XAnqQeKW
5A+jBcTPfVvpRWs29jgu5i9FCyslrCsRvlpGCbYLoYRDCSG88Iok7XtqEHkKYhvz
j7nI5lPJG6gkspKa+K/C7y9LKc518do72BWEmb2LG3g+aL6oy1dBAbxomwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKsV9+Mwkl8BJcHwnd2TEMBxsUPMB8GA1UdIwQY
MBaAFCOcReQ2JVIggK7FOVKYmhOiir0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2Njgt
OTc1YTIzN2VjZDA2LzEvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2NjgtOTc1YTIzN2VjZDA2
LzEvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSL0XN9B
EYlpG1EWRvvZmWlpiA+405CpmH3+L7HVTbOcZA7sEVJU37GJMHQjF+bQlOelx7nQ
zuIS2qUob61WDD3Emw375NN8FNLrq3EUmnZjNS2nTmbTFMzMo6tKYcwzDbMsz17C
66tBnVcSnlJI2AWq688FgI8i+S2ZLiWPV43tWqv/F1Lo5eFTawI/TakQ7csn/NoN
2N6ldsqZgQ5KcCdZ16B5K4/CyWvVTwB9LO9EvZpJHtt5XjbyTvg5Rog0VwqR6Uka
K5tpF9KqKxUYFqvg667fEvt7UovOor5Js1yEgoS/Pqfvs/CZ461CARsN6Fze3Gpp
h81hhXtKcpWGag==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:07 2025 by rpki-client