Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: G6DNawRAF3PRDZQUU9Hv5BDD3Ke8cIKhy7vmIUQRcu8=
Subject key identifier: 4B:8D:65:BD:25:47:F8:64:5C:DC:82:13:BD:30:93:78:AD:29:23:21
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 0199FF598182795AE8A78F0EEA92721D9CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 12D0
Signing time: Mon 20 Oct 2025 02:01:19 +0000
Manifest this update: Mon 20 Oct 2025 02:01:19 +0000
Manifest next update: Tue 21 Oct 2025 02:01:19 +0000
Files and hashes: 1: Ai_jhfn0i9Wvxs1dcGNuIQFRbQw.roa (hash: Gw+sAwziSiWdDJ9jEjQB+Xypl/VPbgg3IFN9iDAN1Ok=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: qwFkC8OaC7foSrthEgjUABWk0C6nuPBDWF+xb4K+mLk=)
3: U3XsaJj-IFBktG-dXYEuz5kV62s.roa (hash: kenyyNekJ/vibROkcjE9SyGPN68bhSkOSO66LaGuIH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:81:82:79:5a:e8:a7:8f:0e:ea:92:72:1d:9c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Oct 20 02:01:19 2025 GMT
Not After : Oct 21 02:01:19 2025 GMT
Subject: CN=4b8d65bd2547f8645cdc8213bd309378ad292321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:62:2d:3f:bc:f0:36:cb:de:04:72:fe:6c:42:
c9:10:d5:29:5b:a6:24:48:2b:58:df:fb:67:b7:74:
5a:a0:cd:1a:31:54:a6:59:74:10:90:9d:b6:f9:5c:
59:56:77:a2:57:8d:93:df:de:59:5a:17:dd:23:bf:
68:59:ca:d6:cb:fd:38:55:db:6a:b7:21:d3:89:19:
5d:ee:7d:ee:dc:52:87:9a:25:55:07:e4:28:5b:3f:
da:63:20:dd:18:a5:c3:43:81:04:06:8d:7c:7f:2d:
b5:11:f8:2d:e7:86:de:50:e2:fa:25:9c:54:54:53:
c8:f4:b4:32:2a:a1:c0:63:4b:bb:8b:84:46:2e:a5:
49:22:71:be:af:4c:b5:f4:28:6f:75:66:a2:86:e2:
cd:1c:3f:c8:28:f9:10:dc:ab:db:3b:de:e8:7c:1c:
a3:54:7e:ec:ab:bb:be:98:ff:c8:8b:fe:ab:aa:05:
09:40:1e:a2:b0:71:87:1b:85:e8:b3:54:87:38:07:
5b:f2:3a:8f:75:4e:ad:62:73:b9:92:41:d6:c2:cf:
81:03:4b:f1:46:31:c4:ee:38:70:38:2d:b9:b1:b0:
15:5d:7a:59:e1:55:e2:5a:4b:42:c5:56:26:2d:b4:
52:a2:26:bd:07:78:97:44:3e:7c:df:39:c7:7f:92:
20:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8D:65:BD:25:47:F8:64:5C:DC:82:13:BD:30:93:78:AD:29:23:21
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ea:e2:3b:2c:6a:79:7d:b1:df:9e:3b:ca:9d:88:c8:0f:39:
f2:1f:d3:af:f5:12:34:0c:a7:95:1e:d2:06:67:5b:6c:97:9a:
4c:fa:bd:ec:a5:e2:93:40:9f:9a:39:0f:18:c9:35:d7:a7:8d:
ff:60:93:0a:94:dd:83:45:c5:df:40:5b:5b:4d:e0:0e:eb:b5:
c8:b5:39:7a:a1:75:1b:9e:ad:12:72:b2:33:a2:d1:9c:b4:09:
74:5e:59:b9:0d:b1:79:48:8c:32:63:77:2a:46:76:af:dc:24:
35:21:f5:25:b3:25:41:f5:8b:ad:29:0c:c0:9e:89:2c:10:2f:
41:54:cb:0c:ca:9e:bf:e9:f4:2e:37:48:f9:52:b3:1f:5e:f0:
d2:03:3b:92:5e:66:01:7b:05:25:7e:94:43:36:ed:da:51:00:
6e:e0:87:1e:49:ff:49:77:be:c1:22:40:eb:46:7f:b3:78:7a:
a4:65:3d:9a:a2:5e:e1:6e:11:2b:f6:af:24:ce:b7:5c:25:a1:
43:de:c8:11:0b:3d:9d:a4:a4:fc:6d:73:1e:e7:f7:57:0b:38:
4f:52:4b:09:c5:b5:b1:47:2a:c4:ef:64:bf:a5:99:98:48:f6:
3a:de:e6:b8:96:00:e3:87:53:7f:c3:b3:ae:c2:72:a2:8d:ba:
fb:ed:8f:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WYGCeVrop48O6pJyHZzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZDhmNjIwOTk5NTA2Y2M4NmQ3NTQ4ZWE3MjgyYmIxMjlm
MDJkNjgwHhcNMjUxMDIwMDIwMTE5WhcNMjUxMDIxMDIwMTE5WjAzMTEwLwYDVQQD
Eyg0YjhkNjViZDI1NDdmODY0NWNkYzgyMTNiZDMwOTM3OGFkMjkyMzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32ItP7zwNsveBHL+bELJENUpW6Yk
SCtY3/tnt3RaoM0aMVSmWXQQkJ22+VxZVneiV42T395ZWhfdI79oWcrWy/04Vdtq
tyHTiRld7n3u3FKHmiVVB+QoWz/aYyDdGKXDQ4EEBo18fy21Efgt54beUOL6JZxU
VFPI9LQyKqHAY0u7i4RGLqVJInG+r0y19ChvdWaihuLNHD/IKPkQ3KvbO97ofByj
VH7sq7u+mP/Ii/6rqgUJQB6isHGHG4Xos1SHOAdb8jqPdU6tYnO5kkHWws+BA0vx
RjHE7jhwOC25sbAVXXpZ4VXiWktCxVYmLbRSoia9B3iXRD583znHf5IgqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuNZb0lR/hkXNyCE70wk3itKSMhMB8GA1UdIwQY
MBaAFCPY9iCZlQbMhtdUjqcoK7Ep8C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2Et
NGZkYzQ4ZGE4ZjMzLzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2EtNGZkYzQ4ZGE4ZjMz
LzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAseriOyxq
eX2x3547yp2IyA858h/Tr/USNAynlR7SBmdbbJeaTPq97KXik0CfmjkPGMk116eN
/2CTCpTdg0XF30BbW03gDuu1yLU5eqF1G56tEnKyM6LRnLQJdF5ZuQ2xeUiMMmN3
KkZ2r9wkNSH1JbMlQfWLrSkMwJ6JLBAvQVTLDMqev+n0LjdI+VKzH17w0gM7kl5m
AXsFJX6UQzbt2lEAbuCHHkn/SXe+wSJA60Z/s3h6pGU9mqJe4W4RK/avJM63XCWh
Q97IEQs9naSk/G1zHuf3Vws4T1JLCcW1sUcqxO9kv6WZmEj2Ot7muJYA44dTf8Oz
rsJyoo26++2PjA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:53:53 2025 by rpki-client