Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
File: I6NILh1m2H9bml7rnIr9a17CMiQ.mft (raw, json)
Hash identifier: uTSrdLWo+7nVX25lRSHBXJK9vzDrODGbnIRiRrRKlpM=
Subject key identifier: 90:25:CD:D9:08:E3:00:90:6B:A0:10:85:73:F7:4C:DA:82:B2:6A:97
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
Certificate issuer: /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Certificate serial: 0199FFFE6CF353785F4802813225ABE2C28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 05:01:28 +0000
Manifest this update: Mon 20 Oct 2025 05:01:28 +0000
Manifest next update: Tue 21 Oct 2025 05:01:28 +0000
Files and hashes: 1: I6NILh1m2H9bml7rnIr9a17CMiQ.crl (hash: e03R4qj9gJ4q0kMDeoiC1LMmkyb7aXmCgT7prk4l8rg=)
2: IQwej1LnyY7ETYPMzr0MBaKMJYU.roa (hash: m2Od1UXry84TfojxLTlOoi+R13MMd4A7opflyOM6uR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:6c:f3:53:78:5f:48:02:81:32:25:ab:e2:c2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Validity
Not Before: Oct 20 05:01:28 2025 GMT
Not After : Oct 21 05:01:28 2025 GMT
Subject: CN=9025cdd908e300906ba0108573f74cda82b26a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:7c:ef:17:47:c2:8a:63:d1:90:fd:28:a8:
44:e9:9f:80:40:e5:48:d6:42:48:68:96:f8:96:0e:
ef:91:c9:da:df:c3:19:fc:a7:aa:1d:f4:cc:63:42:
c5:3c:96:7a:f3:1b:a4:e3:5e:8b:66:98:d4:02:9b:
28:1e:4e:9c:eb:b8:85:8e:0c:35:19:fc:cd:7c:4e:
1c:9d:70:da:ad:14:43:35:0e:6a:f9:89:c8:ec:c3:
5a:63:89:08:9f:79:df:b0:de:98:40:97:d3:ba:a3:
2d:1d:e6:0f:31:e8:01:e6:a2:86:10:6f:09:bc:50:
28:e5:37:ca:ed:7b:db:6d:7e:ec:6f:51:37:4a:e9:
e1:31:7b:85:0f:e4:7c:6b:33:d2:a7:7d:45:01:02:
d9:c7:eb:cb:c8:bc:8a:9e:ff:87:a7:a5:03:3b:6e:
eb:fc:b6:0b:b4:37:e7:d5:0c:be:5f:23:3c:a8:97:
86:8c:6b:30:a5:a8:53:68:e4:7d:b9:4e:06:04:ec:
d0:6c:6e:2e:8e:e8:21:62:7a:de:98:9e:e5:19:54:
16:17:ea:66:67:da:b3:d6:2b:b5:b2:fd:d7:75:96:
98:43:80:77:40:65:97:00:fe:98:99:03:77:cf:a3:
62:6f:c7:03:76:df:22:e8:06:7e:63:81:91:9c:5e:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:25:CD:D9:08:E3:00:90:6B:A0:10:85:73:F7:4C:DA:82:B2:6A:97
X509v3 Authority Key Identifier:
keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b9:34:84:79:23:4f:87:65:c3:6c:2d:5b:01:51:60:89:08:
e2:45:c7:87:05:3b:9b:9a:0e:17:6a:cb:e4:c7:2f:02:73:22:
0c:26:f4:f3:3c:e7:2a:83:31:ed:3f:91:fc:59:2c:ee:b6:5b:
ec:6a:ad:5b:5e:74:54:8b:30:0e:70:3e:48:b5:e3:1e:c7:60:
ee:ac:f7:d4:fd:28:11:67:36:72:d0:71:42:04:1f:21:73:fc:
ef:af:49:bf:2a:7d:56:ff:99:76:81:37:24:fa:20:a4:fb:ae:
02:3a:9f:7e:de:a1:d0:94:29:eb:7a:ff:ab:73:5a:0d:b4:bb:
5b:2d:46:ab:ec:21:cb:0b:5b:af:72:7d:f0:cd:29:bd:df:a3:
d3:24:9a:f5:c5:6c:7d:09:80:7c:ca:ed:4d:41:9f:af:e3:b5:
e5:a4:4d:78:15:b3:99:66:e3:1d:64:bf:7c:80:2b:e8:41:a2:
5f:8f:8e:df:c0:cd:10:89:4e:1b:ce:b9:c4:52:16:ef:6f:db:
6a:3d:8c:87:19:5b:a6:8c:bb:9e:d6:67:d3:da:fd:ac:86:e7:
24:b8:51:53:99:04:cc:26:c4:6b:55:ec:5b:98:1f:09:7d:98:
d7:cd:4d:72:32:77:aa:1e:8a:fd:be:4e:b5:c6:f0:1c:e5:d7:
8d:e1:db:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//mzzU3hfSAKBMiWr4sKLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTM0ODJlMWQ2NmQ4N2Y1YjlhNWVlYjljOGFmZDZiNWVj
MjMyMjQwHhcNMjUxMDIwMDUwMTI4WhcNMjUxMDIxMDUwMTI4WjAzMTEwLwYDVQQD
Eyg5MDI1Y2RkOTA4ZTMwMDkwNmJhMDEwODU3M2Y3NGNkYTgyYjI2YTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlJ87xdHwopj0ZD9KKhE6Z+AQOVI
1kJIaJb4lg7vkcna38MZ/KeqHfTMY0LFPJZ68xuk416LZpjUApsoHk6c67iFjgw1
GfzNfE4cnXDarRRDNQ5q+YnI7MNaY4kIn3nfsN6YQJfTuqMtHeYPMegB5qKGEG8J
vFAo5TfK7XvbbX7sb1E3SunhMXuFD+R8azPSp31FAQLZx+vLyLyKnv+Hp6UDO27r
/LYLtDfn1Qy+XyM8qJeGjGswpahTaOR9uU4GBOzQbG4ujughYnremJ7lGVQWF+pm
Z9qz1iu1sv3XdZaYQ4B3QGWXAP6YmQN3z6Nib8cDdt8i6AZ+Y4GRnF5CaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAlzdkI4wCQa6AQhXP3TNqCsmqXMB8GA1UdIwQY
MBaAFCOjSC4dZth/W5pe65yK/WtewjIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81MDJlY2QtZTZmZS00Mjk4LTgwNTQt
MTM4NTg3MWE5MDlkLzEvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC81MDJlY2QtZTZmZS00Mjk4LTgwNTQtMTM4NTg3MWE5MDlk
LzEvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLk0hHkj
T4dlw2wtWwFRYIkI4kXHhwU7m5oOF2rL5McvAnMiDCb08zznKoMx7T+R/Fks7rZb
7GqtW150VIswDnA+SLXjHsdg7qz31P0oEWc2ctBxQgQfIXP8769Jvyp9Vv+ZdoE3
JPogpPuuAjqfft6h0JQp63r/q3NaDbS7Wy1Gq+whywtbr3J98M0pvd+j0ySa9cVs
fQmAfMrtTUGfr+O15aRNeBWzmWbjHWS/fIAr6EGiX4+O38DNEIlOG865xFIW72/b
aj2Mhxlbpoy7ntZn09r9rIbnJLhRU5kEzCbEa1XsW5gfCX2Y181NcjJ3qh6K/b5O
tcbwHOXXjeHbUQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:28:46 2025 by rpki-client