Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json)
Hash identifier: yI8dHSzKH5jNXq2soIPAj/B21n5puK8w/2o91c7Izo4=
Subject key identifier: C7:4C:ED:47:E1:BF:40:94:1F:C7:CD:36:1A:DA:D8:C9:C3:D8:AE:23
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial: 0199FCC62AFD47EAF4C14723946CB2453221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
Manifest number: 142A
Signing time: Sun 19 Oct 2025 14:01:09 +0000
Manifest this update: Sun 19 Oct 2025 14:01:09 +0000
Manifest next update: Mon 20 Oct 2025 14:01:09 +0000
Files and hashes: 1: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: hG7GIkd5EXa3Ztc5bums+NsQmAGCmJ3kfc2z02IVqCg=)
2: i8Q4g4VsliGNNp87vd6oYtqJ_zk.roa (hash: O+cLxQgdSxj9HwSnDkkvV/wDo/+EE05gj69lFrqob6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2a:fd:47:ea:f4:c1:47:23:94:6c:b2:45:32:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Validity
Not Before: Oct 19 14:01:09 2025 GMT
Not After : Oct 20 14:01:09 2025 GMT
Subject: CN=c74ced47e1bf40941fc7cd361adad8c9c3d8ae23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:44:86:b0:68:ff:67:6a:63:0f:43:1d:b1:
f6:72:be:a2:32:d1:50:18:56:a5:71:c1:6f:d2:bb:
fe:57:12:dc:c4:39:4f:94:b1:6e:a0:11:a0:37:db:
fc:f9:7b:c4:ce:e0:ba:c8:eb:43:ad:77:5a:76:ad:
e0:74:76:cc:f3:9e:5b:d9:e3:d4:af:5e:ee:37:6d:
c9:65:b9:ee:6e:1a:7d:db:23:06:dd:b3:78:bd:d1:
21:ad:27:ec:d5:83:bf:2c:5c:90:63:76:1a:35:3c:
46:5a:5a:5d:71:1f:ee:ba:7c:ef:d5:14:42:b3:f2:
84:29:da:b7:04:8d:9f:a4:7b:1b:37:74:18:5c:d2:
52:6f:d4:b2:39:d9:68:a2:ed:13:fe:f3:d7:e8:12:
74:58:e8:d4:93:42:ad:2b:25:92:ae:9e:cd:32:d1:
f3:01:73:a8:0a:78:b9:a2:37:a6:75:a0:41:10:b3:
21:40:cf:f4:b6:eb:e8:b7:ce:fa:f9:ea:ec:fe:b8:
45:a8:79:72:b0:22:b1:7b:1c:86:d3:83:ae:f9:d0:
41:64:cf:e9:65:23:96:f4:ee:79:65:a0:b0:37:92:
03:47:11:38:d4:46:f3:7c:ff:10:81:d9:fe:d5:d0:
d6:02:21:46:77:01:e3:38:b2:b7:83:3d:5c:34:30:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4C:ED:47:E1:BF:40:94:1F:C7:CD:36:1A:DA:D8:C9:C3:D8:AE:23
X509v3 Authority Key Identifier:
keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2a:eb:4e:88:c3:3d:a4:1c:b0:1b:a1:37:58:5f:e7:c3:c2:
bf:7a:0b:0f:dc:8f:e7:07:fb:bf:41:ad:b1:15:90:9d:f2:9c:
3f:0a:ae:38:e8:a6:e6:58:93:77:b1:66:d3:bd:eb:94:51:82:
84:c3:87:0c:47:61:21:ae:63:3c:10:18:38:e1:d3:2b:27:a3:
f9:bf:46:5b:cb:1d:41:5b:66:da:ff:2a:ac:3b:c5:e2:e0:f9:
de:65:b8:0c:d9:2b:d3:f3:69:45:59:07:4e:21:27:eb:19:b7:
55:91:d6:ee:6c:96:16:4e:79:51:5c:be:73:de:1b:4d:b0:e3:
35:b8:d9:90:3d:cb:eb:40:28:c7:88:ec:a1:0f:17:db:fc:51:
b7:f2:46:3c:aa:9e:6d:b7:5d:c2:88:ad:66:3d:32:40:82:58:
e8:03:21:59:0b:a2:e8:02:e8:e1:34:f6:cf:20:b3:f9:09:47:
25:89:22:0d:83:c5:42:a1:3f:c3:da:12:37:c4:af:e0:a6:77:
a3:6c:3d:10:0d:7f:9f:fa:67:39:9a:db:93:90:41:da:c1:e3:
34:9e:d4:0a:8f:e3:05:39:0c:b1:35:85:89:c2:65:ff:04:49:
ca:a1:70:af:62:de:f7:73:1c:02:01:21:88:e8:12:b4:36:e5:
e5:21:14:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xir9R+r0wUcjlGyyRTIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTdiNTkzYzgwNGE2ODNmMGM4ZmEzZWRhOTMzNWFmOTJh
ODkwNDQwHhcNMjUxMDE5MTQwMTA5WhcNMjUxMDIwMTQwMTA5WjAzMTEwLwYDVQQD
EyhjNzRjZWQ0N2UxYmY0MDk0MWZjN2NkMzYxYWRhZDhjOWMzZDhhZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgdEhrBo/2dqYw9DHbH2cr6iMtFQ
GFalccFv0rv+VxLcxDlPlLFuoBGgN9v8+XvEzuC6yOtDrXdadq3gdHbM855b2ePU
r17uN23JZbnubhp92yMG3bN4vdEhrSfs1YO/LFyQY3YaNTxGWlpdcR/uunzv1RRC
s/KEKdq3BI2fpHsbN3QYXNJSb9SyOdloou0T/vPX6BJ0WOjUk0KtKyWSrp7NMtHz
AXOoCni5ojemdaBBELMhQM/0tuvot876+ers/rhFqHlysCKxexyG04Ou+dBBZM/p
ZSOW9O55ZaCwN5IDRxE41EbzfP8Qgdn+1dDWAiFGdwHjOLK3gz1cNDBTZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdM7Ufhv0CUH8fNNhra2MnD2K4jMB8GA1UdIwQY
MBaAFCOntZPIBKaD8Mj6PtqTNa+SqJBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kZGY1NTktNDMzYi00MDhmLWE1YjIt
M2ZiNWFkZGU2MDQwLzEvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9kZGY1NTktNDMzYi00MDhmLWE1YjItM2ZiNWFkZGU2MDQw
LzEvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyrrTojD
PaQcsBuhN1hf58PCv3oLD9yP5wf7v0GtsRWQnfKcPwquOOim5liTd7Fm073rlFGC
hMOHDEdhIa5jPBAYOOHTKyej+b9GW8sdQVtm2v8qrDvF4uD53mW4DNkr0/NpRVkH
TiEn6xm3VZHW7myWFk55UVy+c94bTbDjNbjZkD3L60Aox4jsoQ8X2/xRt/JGPKqe
bbddwoitZj0yQIJY6AMhWQui6ALo4TT2zyCz+QlHJYkiDYPFQqE/w9oSN8Sv4KZ3
o2w9EA1/n/pnOZrbk5BB2sHjNJ7UCo/jBTkMsTWFicJl/wRJyqFwr2Le93McAgEh
iOgStDbl5SEUEQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:34 2025 by rpki-client