Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
File: ICZNUaES0LwizqcxTLBs9aGuM-k.mft (raw, json)
Hash identifier: wRKFD9BgmkrXtb7SVJh6H+BjbJBaoP9YCC0pYe+Kr74=
Subject key identifier: F3:F1:25:17:62:A9:2F:0B:E3:77:73:5B:71:A2:B8:9B:A3:6D:8A:A5
Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Certificate serial: 019A00355D9D7580FF42E0CE3179D8FC862C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
Manifest number: 1677
Signing time: Mon 20 Oct 2025 06:01:28 +0000
Manifest this update: Mon 20 Oct 2025 06:01:28 +0000
Manifest next update: Tue 21 Oct 2025 06:01:28 +0000
Files and hashes: 1: FXy87TSnS3zZKpD3cubdEzL9JTI.roa (hash: ev8YOzfcP94Okj6loLdeokLYKFfF9CSd4o8ZPprNj7U=)
2: ICZNUaES0LwizqcxTLBs9aGuM-k.crl (hash: sl7hGBgX5zK8epwAgMvb6oVgZyGCey6JMfBSiCJdQ40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:5d:9d:75:80:ff:42:e0:ce:31:79:d8:fc:86:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Validity
Not Before: Oct 20 06:01:28 2025 GMT
Not After : Oct 21 06:01:28 2025 GMT
Subject: CN=f3f1251762a92f0be377735b71a2b89ba36d8aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:18:12:9f:c0:dc:04:f6:90:c1:5f:6a:94:
6e:db:b6:63:c8:3a:d5:bf:02:3d:ba:0b:a3:10:6a:
f6:81:d4:de:25:da:ac:1b:b8:a2:d8:07:64:5b:b9:
6a:a2:2f:94:27:a4:98:ba:d8:be:86:c0:db:4b:a5:
36:89:b2:ae:e5:81:23:32:03:83:4e:bd:07:6b:32:
b3:9b:8f:97:59:6f:f1:c5:b3:c0:34:5b:36:72:c0:
88:bd:7a:17:ef:32:95:9d:f8:83:10:b8:7d:41:d3:
bc:f2:4f:1b:e7:83:d6:f5:9a:6f:c2:b3:57:ea:fc:
33:5d:67:89:48:b4:e1:9f:c9:b7:fa:54:b2:ec:73:
42:ba:c5:d0:73:2c:f3:33:5b:ce:ea:fb:54:5d:a1:
52:0e:3e:ea:10:cf:a5:cb:11:2f:17:63:cb:07:6a:
a5:ce:0f:cc:30:69:02:c7:3a:f6:50:05:a2:d9:23:
93:0b:a7:08:fc:a0:78:2a:74:0f:43:6c:88:43:3c:
89:b7:87:0d:9c:96:42:6e:af:dc:e1:cb:88:4e:ff:
85:37:1d:97:86:dd:80:85:b7:83:80:58:43:2d:1a:
b4:b5:15:7f:e8:96:69:60:b0:cf:c9:7b:78:fb:b4:
55:3f:85:c0:0f:70:72:c9:35:c6:72:f9:45:b6:c0:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F1:25:17:62:A9:2F:0B:E3:77:73:5B:71:A2:B8:9B:A3:6D:8A:A5
X509v3 Authority Key Identifier:
keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5d:26:e0:ed:21:27:9b:ed:76:de:3a:95:d0:15:b9:3b:00:
80:62:cc:41:79:2c:d0:e0:df:5f:91:8d:aa:be:c5:97:72:ff:
65:d1:6c:a2:69:ef:42:90:8b:0b:17:ca:61:36:88:7c:11:b4:
d5:91:67:cc:fb:19:e5:32:9d:d6:e6:01:bd:fc:c2:50:47:a0:
d4:13:01:c2:1d:f6:a7:77:9c:5b:29:da:01:10:db:16:8f:87:
f7:83:cf:33:7f:ff:5a:e3:25:86:55:f0:07:70:a8:49:1b:8f:
cd:52:16:53:26:ae:d8:80:b5:69:70:a6:43:f2:f6:e3:1e:40:
6d:72:7d:22:51:78:94:db:ec:f8:3f:67:dc:05:e7:30:2d:41:
0d:96:00:b4:12:ec:37:7b:db:09:1f:66:55:f7:4e:64:7e:1e:
43:e4:e3:69:9a:27:e3:bc:ee:7c:ab:dc:06:2f:5f:b5:e2:c6:
40:35:d8:71:bb:e4:98:73:f1:eb:3d:2c:d7:72:28:f6:f9:8b:
c9:6e:8a:28:7f:e5:98:8b:9c:4e:2d:56:69:b5:9a:b4:b9:ca:
25:c3:5a:eb:8c:f3:a9:67:1a:6a:72:73:33:b0:76:f9:24:71:
67:65:2f:07:66:0a:fb:4e:6e:4e:c6:a1:4d:46:a7:97:30:74:
60:ce:9e:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANV2ddYD/QuDOMXnY/IYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMjY0ZDUxYTExMmQwYmMyMmNlYTczMTRjYjA2Y2Y1YTFh
ZTMzZTkwHhcNMjUxMDIwMDYwMTI4WhcNMjUxMDIxMDYwMTI4WjAzMTEwLwYDVQQD
EyhmM2YxMjUxNzYyYTkyZjBiZTM3NzczNWI3MWEyYjg5YmEzNmQ4YWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlcYEp/A3AT2kMFfapRu27ZjyDrV
vwI9ugujEGr2gdTeJdqsG7ii2AdkW7lqoi+UJ6SYuti+hsDbS6U2ibKu5YEjMgOD
Tr0HazKzm4+XWW/xxbPANFs2csCIvXoX7zKVnfiDELh9QdO88k8b54PW9ZpvwrNX
6vwzXWeJSLThn8m3+lSy7HNCusXQcyzzM1vO6vtUXaFSDj7qEM+lyxEvF2PLB2ql
zg/MMGkCxzr2UAWi2SOTC6cI/KB4KnQPQ2yIQzyJt4cNnJZCbq/c4cuITv+FNx2X
ht2AhbeDgFhDLRq0tRV/6JZpYLDPyXt4+7RVP4XAD3ByyTXGcvlFtsCyAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPxJRdiqS8L43dzW3GiuJujbYqlMB8GA1UdIwQY
MBaAFCAmTVGhEtC8Is6nMUywbPWhrjPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84ODc4ZDktNGYxYy00MjZiLThhNDAt
NjU4MTIwYWU2OGUxLzEvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy84ODc4ZDktNGYxYy00MjZiLThhNDAtNjU4MTIwYWU2OGUx
LzEvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGl0m4O0h
J5vtdt46ldAVuTsAgGLMQXks0ODfX5GNqr7Fl3L/ZdFsomnvQpCLCxfKYTaIfBG0
1ZFnzPsZ5TKd1uYBvfzCUEeg1BMBwh32p3ecWynaARDbFo+H94PPM3//WuMlhlXw
B3CoSRuPzVIWUyau2IC1aXCmQ/L24x5AbXJ9IlF4lNvs+D9n3AXnMC1BDZYAtBLs
N3vbCR9mVfdOZH4eQ+TjaZon47zufKvcBi9fteLGQDXYcbvkmHPx6z0s13Io9vmL
yW6KKH/lmIucTi1WabWatLnKJcNa64zzqWcaanJzM7B2+SRxZ2UvB2YK+05uTsah
TUanlzB0YM6eAQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:10 2025 by rpki-client