Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
File: RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json)
Hash identifier: vUiBFbvOFBnTr2CJx47XnQehzLkskNusIfArARpbw+U=
Subject key identifier: 5B:EC:8A:4A:2D:A7:93:F6:27:B5:C4:50:B7:37:D5:F6:3B:9C:4B:C9
Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290
Certificate serial: 0199FE47401184A0B9B1D47D6D301A57AAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
Manifest number: 15F3
Signing time: Sun 19 Oct 2025 21:01:46 +0000
Manifest this update: Sun 19 Oct 2025 21:01:46 +0000
Manifest next update: Mon 20 Oct 2025 21:01:46 +0000
Files and hashes: 1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: TbBzeKT+sMQxPLGbinrXogCyi5PI8Eha+Jc8+mdzIEg=)
2: xmUpqD4NUMAqisL66k_x6MTYnaQ.roa (hash: dGRcbHkgyhvucFtnmzWvrILS2aHk2c8SQDJ6rOX+JL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:40:11:84:a0:b9:b1:d4:7d:6d:30:1a:57:aa:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290
Validity
Not Before: Oct 19 21:01:46 2025 GMT
Not After : Oct 20 21:01:46 2025 GMT
Subject: CN=5bec8a4a2da793f627b5c450b737d5f63b9c4bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:95:ac:a8:37:fd:67:0a:b1:9b:fb:dd:b6:
28:43:51:d2:1a:4c:90:af:fe:fe:ba:5a:68:63:26:
a0:37:b1:4d:a9:17:c1:d2:2a:80:c7:48:d4:45:00:
c9:65:e8:23:f1:16:90:41:08:6e:84:c0:4b:b1:d9:
8b:64:97:7b:11:fe:b8:76:8c:85:be:13:7b:07:6c:
59:95:20:2b:1d:47:4f:12:4f:bf:22:b9:78:9c:3f:
35:94:96:40:a3:06:c8:63:7f:7d:21:e2:9a:1b:12:
49:0e:9d:1e:89:ab:fd:db:de:10:41:04:08:58:7a:
e3:59:28:f1:38:f1:54:3b:b9:95:e2:e9:45:3c:b0:
bd:93:2e:e0:2d:e7:92:7b:bd:37:e3:be:79:17:13:
b2:b9:57:c0:24:11:1c:59:7e:1c:fe:57:81:a4:85:
da:50:83:97:fa:45:1d:97:a4:1a:98:8e:e6:45:64:
d1:70:a2:17:1d:f1:82:17:56:3a:53:f8:41:ca:b2:
b7:c1:09:83:01:d0:48:b7:ec:1e:48:7e:c0:56:bd:
f4:96:34:7a:1f:14:45:df:a1:88:cc:ec:9f:33:cd:
8e:93:07:cf:9b:74:27:31:4c:ae:bf:0e:50:90:52:
32:f8:5b:c5:ae:85:0c:02:9b:8b:9f:cc:9c:3a:28:
23:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EC:8A:4A:2D:A7:93:F6:27:B5:C4:50:B7:37:D5:F6:3B:9C:4B:C9
X509v3 Authority Key Identifier:
keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:99:63:63:27:e3:57:8f:16:8f:27:86:22:87:1e:c3:47:02:
02:48:c4:93:a4:51:6a:75:eb:99:4f:09:68:e7:eb:fc:31:c8:
db:3c:43:7b:f7:4e:be:ee:1a:e5:30:d2:54:82:76:00:d0:86:
6e:0d:74:97:79:5c:b4:64:a3:3e:89:b2:8f:11:e4:f0:3a:72:
4e:8e:0d:b0:70:b0:69:a8:c7:c2:80:b1:91:d1:ff:cf:7c:8f:
f7:c6:7a:81:10:77:1e:14:7f:01:42:09:d3:ad:ae:54:43:ad:
24:e5:f1:0e:e5:94:0e:0d:60:5b:ed:4f:58:ce:46:23:95:24:
cb:80:8d:9b:11:da:46:e0:43:f1:ad:2e:0b:f2:28:ed:a7:ba:
d9:d5:99:71:3c:76:29:fc:b0:14:f3:03:26:3c:45:6d:31:90:
2a:46:2b:72:f5:08:a7:0a:7f:a0:c0:79:69:c1:2b:3d:55:25:
db:59:a0:86:12:c7:b8:37:dd:46:f9:16:9b:5c:48:df:37:20:
f6:e6:19:b9:a4:38:ca:fa:e7:e7:f0:5c:9f:af:ed:00:72:ae:
85:23:f2:d3:94:fb:b3:fc:93:10:fb:35:bc:cf:bd:1f:11:a1:
77:04:0c:2a:a5:0f:fe:e4:e4:59:01:04:55:7a:40:62:4a:3d:
33:e9:11:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+R0ARhKC5sdR9bTAaV6ruMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MjIzMWU3MTNmMGY4MzRiZDA5YzNmNzZlMTJlMjUwZTc3
M2MyOTAwHhcNMjUxMDE5MjEwMTQ2WhcNMjUxMDIwMjEwMTQ2WjAzMTEwLwYDVQQD
Eyg1YmVjOGE0YTJkYTc5M2Y2MjdiNWM0NTBiNzM3ZDVmNjNiOWM0YmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YqVrKg3/WcKsZv73bYoQ1HSGkyQ
r/7+ulpoYyagN7FNqRfB0iqAx0jURQDJZegj8RaQQQhuhMBLsdmLZJd7Ef64doyF
vhN7B2xZlSArHUdPEk+/Irl4nD81lJZAowbIY399IeKaGxJJDp0eiav9294QQQQI
WHrjWSjxOPFUO7mV4ulFPLC9ky7gLeeSe7034755FxOyuVfAJBEcWX4c/leBpIXa
UIOX+kUdl6QamI7mRWTRcKIXHfGCF1Y6U/hByrK3wQmDAdBIt+weSH7AVr30ljR6
HxRF36GIzOyfM82OkwfPm3QnMUyuvw5QkFIy+FvFroUMApuLn8ycOigjDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvsikotp5P2J7XEULc31fY7nEvJMB8GA1UdIwQY
MBaAFEYiMecT8Pg0vQnD924S4lDnc8KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5Mzct
YWQ0YmQ3ZjIzY2U0LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5MzctYWQ0YmQ3ZjIzY2U0
LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpljYyfj
V48WjyeGIocew0cCAkjEk6RRanXrmU8JaOfr/DHI2zxDe/dOvu4a5TDSVIJ2ANCG
bg10l3lctGSjPomyjxHk8DpyTo4NsHCwaajHwoCxkdH/z3yP98Z6gRB3HhR/AUIJ
062uVEOtJOXxDuWUDg1gW+1PWM5GI5Uky4CNmxHaRuBD8a0uC/Io7ae62dWZcTx2
KfywFPMDJjxFbTGQKkYrcvUIpwp/oMB5acErPVUl21mghhLHuDfdRvkWm1xI3zcg
9uYZuaQ4yvrn5/Bcn6/tAHKuhSPy05T7s/yTEPs1vM+9HxGhdwQMKqUP/uTkWQEE
VXpAYko9M+kRSw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:47 2025 by rpki-client