Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
File: I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft (raw, json)
Hash identifier: liMKRIbNgp9WFdE+3OnVdg2s5wnG16jUzYhof04C6/I=
Subject key identifier: 51:BB:D8:C4:50:B6:8E:CC:2F:37:63:1B:95:55:11:88:55:CE:BF:49
Authority key identifier: 23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
Certificate issuer: /CN=235163d39db88816cddc597a5db5eae707d3de39
Certificate serial: 0199FDD8AA2384A872521F380C308324171F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 19:00:58 +0000
Manifest this update: Sun 19 Oct 2025 19:00:58 +0000
Manifest next update: Mon 20 Oct 2025 19:00:58 +0000
Files and hashes: 1: 0w9FBc0vTYSPsjAWKJJCnffXw-k.roa (hash: jLDk0IcPs8Pb9A807RQu6H+l6FnV9GFyw8DjOzzYbaA=)
2: I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl (hash: HjiVH+7pQtahkff9ClDhSpH0KxzTgiSaIrwMfCBWBWI=)
3: gKeAQqo6LHoqnf4Vl-8HYj5MieI.roa (hash: SOGNQLrBgWGkjZGYc/wKjLGsnvGnOrdebSHsTRsYQCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:aa:23:84:a8:72:52:1f:38:0c:30:83:24:17:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235163d39db88816cddc597a5db5eae707d3de39
Validity
Not Before: Oct 19 19:00:58 2025 GMT
Not After : Oct 20 19:00:58 2025 GMT
Subject: CN=51bbd8c450b68ecc2f37631b9555118855cebf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:66:d2:08:a3:22:3b:66:00:97:bb:12:da:
b0:cd:47:ea:63:23:22:09:0a:86:29:27:08:1e:aa:
85:38:69:6e:33:df:e6:d3:04:fa:64:db:0d:e0:97:
1e:13:bd:d8:1c:1b:bf:36:e2:14:fc:7b:13:bf:0c:
d9:8d:3d:46:fe:9a:dd:40:6b:30:b4:af:b7:35:11:
eb:c0:f5:6b:5d:24:0a:63:7f:8b:35:5e:a0:89:bb:
34:23:fd:db:1c:d9:ba:17:67:2c:bf:5f:5e:44:d2:
18:a0:ff:d2:70:ba:a5:29:38:3a:a5:f5:ee:07:79:
ef:fb:87:70:8f:87:ac:c6:76:d8:16:91:4f:23:11:
a5:77:e4:1d:96:02:5e:be:0d:4b:47:c4:5e:6f:e6:
fd:f9:8d:04:cb:7b:eb:7e:5b:52:e5:4d:dc:9f:b7:
c5:37:61:c2:69:5e:12:3a:79:0f:2d:f5:9a:e0:d0:
00:08:4f:28:c5:a1:1c:19:06:33:03:45:9e:a1:cd:
cc:69:2c:14:47:21:0c:61:f1:b1:c2:45:fb:fa:93:
57:81:68:59:95:0f:f4:1a:17:d7:96:76:06:21:4e:
e9:0b:43:98:3b:aa:87:91:c5:30:b8:09:ee:b4:1c:
14:86:ab:8b:5b:bb:3b:44:54:39:4b:2c:6f:d2:78:
36:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BB:D8:C4:50:B6:8E:CC:2F:37:63:1B:95:55:11:88:55:CE:BF:49
X509v3 Authority Key Identifier:
keyid:23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2d:70:b7:c9:94:61:6b:c9:e7:de:2b:ed:cf:3c:4c:06:97:
07:4a:a2:c5:e6:97:5c:c8:54:2b:34:3e:73:38:4e:b1:5e:0b:
82:aa:d3:6f:b2:b7:68:cb:4a:91:b1:03:c7:40:0b:b6:aa:9a:
7b:a1:e1:1e:45:2e:e1:95:b5:cc:c5:7a:5e:74:6f:76:b7:52:
34:38:d3:37:76:64:c5:95:e5:83:38:57:46:87:71:fa:7c:e3:
ef:db:9e:d8:a1:78:d6:d0:de:c5:23:7c:06:aa:ae:48:3d:ed:
19:a8:d5:48:f9:0b:eb:67:eb:ec:2f:e8:e8:7a:99:be:35:e1:
29:f0:34:c5:fc:31:93:7e:97:62:b6:b2:96:66:35:9c:cc:a4:
cb:05:98:3e:b4:9c:31:6e:76:1d:d7:a7:0a:c4:4c:c2:de:e3:
1d:44:fc:c0:d7:66:15:a7:d5:2f:a3:05:c9:24:49:fd:5a:1c:
1d:fc:7d:2f:9f:da:68:0d:67:77:9c:c1:9d:d4:40:77:28:5d:
18:5f:65:c4:a1:7d:ba:d1:33:ce:f6:a6:c7:ad:82:aa:6e:a7:
f8:9f:5b:22:b1:c2:08:1e:31:8a:6f:56:ab:fb:5c:e0:d5:16:
50:38:4f:1a:ac:cc:11:d0:eb:da:c8:8d:4b:6f:99:1f:c1:d2:
be:7c:62:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92KojhKhyUh84DDCDJBcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNTE2M2QzOWRiODg4MTZjZGRjNTk3YTVkYjVlYWU3MDdk
M2RlMzkwHhcNMjUxMDE5MTkwMDU4WhcNMjUxMDIwMTkwMDU4WjAzMTEwLwYDVQQD
Eyg1MWJiZDhjNDUwYjY4ZWNjMmYzNzYzMWI5NTU1MTE4ODU1Y2ViZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsVm0gijIjtmAJe7EtqwzUfqYyMi
CQqGKScIHqqFOGluM9/m0wT6ZNsN4JceE73YHBu/NuIU/HsTvwzZjT1G/prdQGsw
tK+3NRHrwPVrXSQKY3+LNV6gibs0I/3bHNm6F2csv19eRNIYoP/ScLqlKTg6pfXu
B3nv+4dwj4esxnbYFpFPIxGld+QdlgJevg1LR8Reb+b9+Y0Ey3vrfltS5U3cn7fF
N2HCaV4SOnkPLfWa4NAACE8oxaEcGQYzA0Weoc3MaSwURyEMYfGxwkX7+pNXgWhZ
lQ/0GhfXlnYGIU7pC0OYO6qHkcUwuAnutBwUhquLW7s7RFQ5Syxv0ng2pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFG72MRQto7MLzdjG5VVEYhVzr9JMB8GA1UdIwQY
MBaAFCNRY9OduIgWzdxZel216ucH0945MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTFGajA1MjRpQmJOM0ZsNlhiWHE1d2ZUM2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNzU1OGUtOWE2Yy00NzExLThlZjgt
OTE1MDI5NmRhYTBhLzEvSTFGajA1MjRpQmJOM0ZsNlhiWHE1d2ZUM2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kNzU1OGUtOWE2Yy00NzExLThlZjgtOTE1MDI5NmRhYTBh
LzEvSTFGajA1MjRpQmJOM0ZsNlhiWHE1d2ZUM2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATS1wt8mU
YWvJ594r7c88TAaXB0qixeaXXMhUKzQ+czhOsV4LgqrTb7K3aMtKkbEDx0ALtqqa
e6HhHkUu4ZW1zMV6XnRvdrdSNDjTN3ZkxZXlgzhXRodx+nzj79ue2KF41tDexSN8
BqquSD3tGajVSPkL62fr7C/o6HqZvjXhKfA0xfwxk36XYraylmY1nMykywWYPrSc
MW52HdenCsRMwt7jHUT8wNdmFafVL6MFySRJ/VocHfx9L5/aaA1nd5zBndRAdyhd
GF9lxKF9utEzzvamx62Cqm6n+J9bIrHCCB4xim9Wq/tc4NUWUDhPGqzMEdDr2siN
S2+ZH8HSvnxipg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:35 2025 by rpki-client