Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
File: I6YR9Nqh1JrPstsip4DM57Cb3-k.mft (raw, json)
Hash identifier: uPZTLmBsLOis9m3BlYgpPFRvV+vNPy6XgEbfa8Cod8Y=
Subject key identifier: 4C:2C:BE:F5:5A:7E:D9:43:C7:90:A4:04:6A:45:28:46:0D:FA:89:26
Authority key identifier: 23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
Certificate issuer: /CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Certificate serial: 0199FBEB35EC883021650A503A51EBDC74EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
Manifest number: 0ACD
Signing time: Sun 19 Oct 2025 10:01:59 +0000
Manifest this update: Sun 19 Oct 2025 10:01:59 +0000
Manifest next update: Mon 20 Oct 2025 10:01:59 +0000
Files and hashes: 1: I6YR9Nqh1JrPstsip4DM57Cb3-k.crl (hash: If82kZ++XF6WbidRWItfj+pP/dY93AF2YRWKoWdDQoE=)
2: b73ddOLLjPYnTz9o7yYL4kMMo3U.roa (hash: Vc85I6rYToAbWM15WR5pMloHamrCwTA2NvWFqIsFGlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:35:ec:88:30:21:65:0a:50:3a:51:eb:dc:74:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Validity
Not Before: Oct 19 10:01:59 2025 GMT
Not After : Oct 20 10:01:59 2025 GMT
Subject: CN=4c2cbef55a7ed943c790a4046a4528460dfa8926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f0:5e:a4:b8:a1:6b:ce:29:0f:8c:c8:4d:b5:
1f:bd:a6:89:d9:ba:21:eb:2c:46:90:a4:a0:19:ee:
e6:46:76:81:e3:f2:e1:74:f5:c6:46:5a:e4:bb:c9:
ee:ae:97:be:5d:77:c5:65:26:85:5b:c2:29:d4:68:
c4:a7:4c:39:e6:3d:3e:a0:8f:78:b3:9e:73:56:ee:
fa:66:17:43:17:e0:57:e2:65:54:15:9b:ff:79:d1:
11:bf:bf:88:a8:2c:09:c2:e2:6f:bd:c1:2e:cf:df:
3f:2e:56:35:29:37:3f:38:a7:dc:eb:a2:c5:6f:22:
f3:e4:bd:d4:6e:cc:de:1e:40:72:91:e6:d0:d7:6a:
f4:e3:18:59:7b:10:68:5c:1c:14:4f:b1:ca:7f:c1:
60:7d:8a:c9:61:5f:6e:7d:d7:9f:09:b1:ad:31:94:
9a:8b:19:57:ad:f1:2b:34:3b:43:22:dc:2b:62:d2:
c5:63:0d:1c:33:5e:9b:8d:50:17:76:6c:cd:ad:13:
37:1a:14:3c:6d:b3:c6:a8:9e:78:b7:72:bf:7d:df:
5d:39:9f:9a:7e:37:4d:4c:3c:32:7b:dd:c5:fb:36:
25:95:f3:0a:ab:25:2b:4f:a7:7d:b4:b2:d7:62:fc:
ac:65:70:5f:4e:94:0e:46:43:62:4f:f3:3f:22:41:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2C:BE:F5:5A:7E:D9:43:C7:90:A4:04:6A:45:28:46:0D:FA:89:26
X509v3 Authority Key Identifier:
keyid:23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0a:98:06:4e:fe:fd:0e:19:1d:64:0a:78:ee:02:9a:26:c5:
ec:92:ff:8a:a4:4c:b1:96:52:16:15:8e:1b:9c:0a:4e:55:11:
fa:57:61:48:e1:1f:c6:4c:0a:2b:37:24:cd:29:32:70:56:6c:
af:02:ec:ba:ae:88:ff:c1:1d:79:5e:c1:da:a6:9c:f4:55:35:
9e:5e:b2:39:e3:f1:0c:c8:7b:27:75:36:3c:c7:bb:79:08:27:
83:2e:3d:f5:3d:bb:1a:c9:35:81:79:99:cc:e8:c9:ad:43:d1:
37:03:9c:3d:c5:a4:b6:43:6f:a9:22:fe:5d:29:96:89:fd:ea:
14:96:81:52:c6:1f:ee:e8:b9:0c:be:b3:f9:c9:a3:0f:3e:34:
8a:27:83:ee:a0:d1:6c:21:f6:6a:39:69:59:6c:52:ee:22:b1:
cf:ee:12:44:cc:1e:df:45:4e:c8:c7:4a:05:98:a6:ae:ae:39:
39:b0:eb:2e:fd:07:48:20:51:5c:76:4b:94:88:1d:26:e1:a9:
36:73:7e:f9:7f:3b:96:64:fc:50:01:39:d9:74:7c:7e:23:89:
df:75:12:1a:26:be:70:13:b8:1f:58:0c:59:93:9e:e2:b8:6f:
0b:72:71:db:3a:bf:75:52:56:d2:91:be:7c:3d:a9:a2:64:f5:
38:c2:d1:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76zXsiDAhZQpQOlHr3HTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTYxMWY0ZGFhMWQ0OWFjZmIyZGIyMmE3ODBjY2U3YjA5
YmRmZTkwHhcNMjUxMDE5MTAwMTU5WhcNMjUxMDIwMTAwMTU5WjAzMTEwLwYDVQQD
Eyg0YzJjYmVmNTVhN2VkOTQzYzc5MGE0MDQ2YTQ1Mjg0NjBkZmE4OTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/BepLiha84pD4zITbUfvaaJ2boh
6yxGkKSgGe7mRnaB4/LhdPXGRlrku8nurpe+XXfFZSaFW8Ip1GjEp0w55j0+oI94
s55zVu76ZhdDF+BX4mVUFZv/edERv7+IqCwJwuJvvcEuz98/LlY1KTc/OKfc66LF
byLz5L3UbszeHkBykebQ12r04xhZexBoXBwUT7HKf8FgfYrJYV9ufdefCbGtMZSa
ixlXrfErNDtDItwrYtLFYw0cM16bjVAXdmzNrRM3GhQ8bbPGqJ54t3K/fd9dOZ+a
fjdNTDwye93F+zYllfMKqyUrT6d9tLLXYvysZXBfTpQORkNiT/M/IkFk0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwsvvVaftlDx5CkBGpFKEYN+okmMB8GA1UdIwQY
MBaAFCOmEfTaodSaz7LbIqeAzOewm9/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZZUjlOcWgxSnJQc3RzaXA0RE01N0NiMy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85MTIxNTItN2RmOC00ZWJmLWIxZDMt
NDc3NmM3MDkzYTI5LzEvSTZZUjlOcWgxSnJQc3RzaXA0RE01N0NiMy1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny85MTIxNTItN2RmOC00ZWJmLWIxZDMtNDc3NmM3MDkzYTI5
LzEvSTZZUjlOcWgxSnJQc3RzaXA0RE01N0NiMy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwqYBk7+
/Q4ZHWQKeO4CmibF7JL/iqRMsZZSFhWOG5wKTlUR+ldhSOEfxkwKKzckzSkycFZs
rwLsuq6I/8EdeV7B2qac9FU1nl6yOePxDMh7J3U2PMe7eQgngy499T27Gsk1gXmZ
zOjJrUPRNwOcPcWktkNvqSL+XSmWif3qFJaBUsYf7ui5DL6z+cmjDz40iieD7qDR
bCH2ajlpWWxS7iKxz+4SRMwe30VOyMdKBZimrq45ObDrLv0HSCBRXHZLlIgdJuGp
NnN++X87lmT8UAE52XR8fiOJ33USGia+cBO4H1gMWZOe4rhvC3Jx2zq/dVJW0pG+
fD2pomT1OMLRcg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:24 2025 by rpki-client