Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: v76kPiA/PjC5yI9X1/rFN88grNKLsbvJSUVFEhvNi9c=
Subject key identifier: A7:2A:9D:CE:CD:05:D2:4C:67:DF:C8:81:A8:21:01:BC:FF:85:70:EF
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 0199FE46D92ADEEFCEA997A92D9032811BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0AA9
Signing time: Sun 19 Oct 2025 21:01:19 +0000
Manifest this update: Sun 19 Oct 2025 21:01:19 +0000
Manifest next update: Mon 20 Oct 2025 21:01:19 +0000
Files and hashes: 1: FSsZO7tf2uyGI_GTm9rqM0qzwyo.roa (hash: +N02NDT8cxwi6khKovC14z/AE2KwVw5IVFU5XCAAiJs=)
2: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: 2BB7Z0ReduU9Zhsy7CaD1ZtzVmcHuFabkkFYXaomz5M=)
3: pGnzHT17oa6cGFgaKh_Mb1gg4HU.roa (hash: tnbr1e3XQydvlzjAP3o8eDkS1HDgrVPM/kErIEuP+f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:d9:2a:de:ef:ce:a9:97:a9:2d:90:32:81:1b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Oct 19 21:01:19 2025 GMT
Not After : Oct 20 21:01:19 2025 GMT
Subject: CN=a72a9dcecd05d24c67dfc881a82101bcff8570ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:56:bd:bd:24:4e:98:dd:71:38:78:e2:a1:
d3:1f:2b:35:2e:90:47:78:48:1d:42:27:91:28:da:
8a:2a:9f:97:f0:89:8a:81:2e:9f:e8:cb:47:70:6c:
35:b6:18:0a:a6:7f:32:c0:fa:8c:af:75:76:36:10:
f8:17:b6:51:fb:1c:3f:d3:5e:9b:ba:59:13:ac:73:
83:00:3f:24:ca:d2:1a:0f:22:21:ca:26:25:38:32:
eb:99:31:5d:20:08:4a:0f:1d:0f:95:7a:9f:d1:78:
16:d2:d6:5c:5e:19:b9:b1:aa:e1:7a:bb:bf:a4:22:
ce:1b:8f:94:97:bc:77:a7:4d:fc:d0:86:61:4c:94:
41:ef:25:4d:06:f0:99:55:14:56:ee:31:e5:cb:b8:
1f:3d:41:23:88:8a:e0:b8:eb:af:54:e9:22:38:52:
ff:ae:f4:bd:9a:51:3a:1a:eb:41:60:bb:7e:a9:35:
5a:af:8a:b9:ac:22:27:ee:eb:f6:ad:a4:07:bc:48:
b0:17:ab:66:66:9a:48:f3:97:61:fe:38:75:76:0a:
b3:de:9a:c8:bf:a4:73:9e:57:d1:31:e8:7c:b3:32:
b4:c1:56:64:78:4c:cc:75:73:f0:db:58:cc:df:91:
10:ff:01:4c:21:e4:af:b7:a7:36:db:a2:d2:29:8a:
83:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2A:9D:CE:CD:05:D2:4C:67:DF:C8:81:A8:21:01:BC:FF:85:70:EF
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1e:57:cc:cd:9f:34:fc:3d:e8:f3:0c:ad:01:38:15:e6:2b:
76:88:a8:4d:97:54:b9:f7:11:c1:a2:aa:86:b4:42:9a:b9:8e:
ff:38:cd:08:2d:a0:ac:e1:ca:9e:55:a3:f5:6f:64:8e:05:fe:
ce:ea:0d:3f:87:8f:45:cf:39:26:ae:c6:49:6c:32:5d:78:5a:
f8:0b:98:dc:10:07:88:89:8d:1e:95:43:ef:2b:97:12:a7:62:
96:63:8a:8f:56:0a:92:7f:e5:ee:1d:a3:14:a3:e8:0d:c0:2f:
a4:70:0c:a9:fc:ac:f5:e1:1a:4c:43:40:09:2d:bb:f9:be:9b:
b4:ad:82:e0:81:0a:15:b7:57:b1:e7:15:30:db:f0:d6:c5:25:
0d:c5:2b:fc:1b:2d:e2:1f:b3:d0:8f:9e:30:c1:99:d5:4a:b8:
c2:f8:f2:02:1f:3f:70:b7:75:c7:a4:67:7e:6c:4a:b4:a0:75:
cc:ba:33:8a:19:62:4c:e9:3b:d9:98:89:1e:ea:13:58:ab:8d:
82:c9:4c:f2:df:e2:48:c0:77:e3:19:2d:a5:2a:36:c6:7a:e8:
d3:31:8f:aa:f4:6e:ce:9c:8d:9b:28:ee:2d:07:64:4b:4d:e1:
b5:52:94:16:22:67:42:78:cc:c4:48:52:a2:8a:e3:15:c1:38:
fa:2e:3f:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+Rtkq3u/OqZepLZAygRvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzODkzNDFlMTBlNmIwMjFmYTg0N2Y1NTVlNTYwM2RlZjg1
ZDJjMmIwHhcNMjUxMDE5MjEwMTE5WhcNMjUxMDIwMjEwMTE5WjAzMTEwLwYDVQQD
EyhhNzJhOWRjZWNkMDVkMjRjNjdkZmM4ODFhODIxMDFiY2ZmODU3MGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1lWvb0kTpjdcTh44qHTHys1LpBH
eEgdQieRKNqKKp+X8ImKgS6f6MtHcGw1thgKpn8ywPqMr3V2NhD4F7ZR+xw/016b
ulkTrHODAD8kytIaDyIhyiYlODLrmTFdIAhKDx0PlXqf0XgW0tZcXhm5sarheru/
pCLOG4+Ul7x3p0380IZhTJRB7yVNBvCZVRRW7jHly7gfPUEjiIrguOuvVOkiOFL/
rvS9mlE6GutBYLt+qTVar4q5rCIn7uv2raQHvEiwF6tmZppI85dh/jh1dgqz3prI
v6RznlfRMeh8szK0wVZkeEzMdXPw21jM35EQ/wFMIeSvt6c226LSKYqD1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcqnc7NBdJMZ9/IgaghAbz/hXDvMB8GA1UdIwQY
MBaAFCOJNB4Q5rAh+oR/VV5WA974XSwrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82YWI5M2UtODU2My00NjA2LWIxOWUt
OGMwMDNjNGE1NDU2LzEvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82YWI5M2UtODU2My00NjA2LWIxOWUtOGMwMDNjNGE1NDU2
LzEvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGR5XzM2f
NPw96PMMrQE4FeYrdoioTZdUufcRwaKqhrRCmrmO/zjNCC2grOHKnlWj9W9kjgX+
zuoNP4ePRc85Jq7GSWwyXXha+AuY3BAHiImNHpVD7yuXEqdilmOKj1YKkn/l7h2j
FKPoDcAvpHAMqfys9eEaTENACS27+b6btK2C4IEKFbdXsecVMNvw1sUlDcUr/Bst
4h+z0I+eMMGZ1Uq4wvjyAh8/cLd1x6RnfmxKtKB1zLozihliTOk72ZiJHuoTWKuN
gslM8t/iSMB34xktpSo2xnro0zGPqvRuzpyNmyjuLQdkS03htVKUFiJnQnjMxEhS
oorjFcE4+i4/9A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:57 2025 by rpki-client