Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
File: IsXMfDZMkOr6uml-C_WfBVaalpU.mft (raw, json)
Hash identifier: cq128wzZYAseXhKxH4Us1lPVXr7nAdXtqjV5dQZKjiM=
Subject key identifier: 02:8E:D5:5C:DD:CD:0A:1B:F2:85:D6:95:B8:F1:A7:1D:24:F8:C2:B4
Authority key identifier: 22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
Certificate issuer: /CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Certificate serial: 019A503DF56C714CA43F399A07526BA1658D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
Manifest number: 0D90
Signing time: Tue 04 Nov 2025 19:00:29 +0000
Manifest this update: Tue 04 Nov 2025 19:00:29 +0000
Manifest next update: Wed 05 Nov 2025 19:00:29 +0000
Files and hashes: 1: IsXMfDZMkOr6uml-C_WfBVaalpU.crl (hash: E0p4xhCcF6HkmXtGSvAYw6bPoGT6f8Zy36oldETaMps=)
2: Rwalp_l1gE5qteHvPqygUpBfDbs.roa (hash: uNWR8irKkp/fDA/zKVLrXnW+fuP58wA187hFjBN4YQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:f5:6c:71:4c:a4:3f:39:9a:07:52:6b:a1:65:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Validity
Not Before: Nov 4 19:00:29 2025 GMT
Not After : Nov 5 19:00:29 2025 GMT
Subject: CN=028ed55cddcd0a1bf285d695b8f1a71d24f8c2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:4f:58:58:ec:bc:49:0b:27:ef:e5:88:64:
53:37:1f:6b:c3:55:66:92:af:53:d3:32:1c:2a:76:
65:26:b3:a4:80:48:95:6d:f5:98:3f:8f:d9:78:f9:
dc:d9:30:19:29:e6:0f:e9:b9:b7:14:71:c7:1b:4f:
97:f6:30:9f:ef:9b:12:4c:64:6c:f2:ca:71:08:02:
d0:93:9c:44:09:dd:0e:6f:73:ca:62:cc:78:6b:23:
bc:78:b1:8b:35:11:b9:a0:6b:20:6a:92:8a:bd:b9:
f8:9b:85:7b:87:06:d5:3b:38:8f:11:26:86:15:b7:
61:bd:10:53:12:8f:98:b4:25:ed:b8:34:a5:92:dc:
ae:48:7a:af:c7:dd:03:1e:c7:fa:a1:e7:eb:43:29:
ed:ca:ae:ce:a0:14:ec:04:47:c5:87:22:95:04:a4:
8d:c4:f9:c8:3a:d5:5a:52:a9:d8:16:ae:80:a6:91:
3f:9b:43:dc:4d:60:3e:27:1d:84:08:70:ef:b5:2b:
f4:bc:08:2e:22:b8:1f:64:db:29:f9:c6:d6:04:7d:
8e:16:55:aa:4e:e6:74:e7:f0:07:5f:fb:04:f7:50:
f5:e1:bc:be:5e:91:fc:18:0d:06:df:66:a5:b7:49:
11:d3:41:14:d4:41:cf:7c:ae:bd:76:b0:c3:12:fe:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8E:D5:5C:DD:CD:0A:1B:F2:85:D6:95:B8:F1:A7:1D:24:F8:C2:B4
X509v3 Authority Key Identifier:
keyid:22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:93:cf:7b:f3:ce:1c:fd:89:b7:27:77:59:23:58:52:f2:6b:
af:b7:81:73:b5:33:39:41:be:6e:a4:5d:82:05:5b:35:f7:62:
d7:ff:bc:61:a4:e0:9f:0f:a5:cf:fd:b7:3e:c4:5a:19:b3:54:
a0:8b:18:f4:75:d7:84:9c:d3:56:9f:fb:83:79:c8:83:07:b7:
c3:b0:c1:80:e9:2e:6b:8d:44:79:0d:de:2e:c2:cf:45:bb:01:
97:15:53:3f:ee:8f:6e:eb:3d:55:24:88:eb:50:47:6e:bf:ec:
8e:be:cd:cc:b5:e2:9e:70:90:33:98:25:95:cd:d3:c2:53:0f:
c2:cf:1f:be:c5:bd:4b:da:11:d6:62:f8:13:0e:37:89:d2:78:
62:23:a8:ed:5b:f6:d7:77:b8:13:77:8c:cf:6b:75:ec:89:10:
e4:83:b1:0a:fa:51:8a:3b:21:6a:28:b0:f1:94:91:e1:c5:37:
5a:a7:a4:22:fe:e2:ee:2e:13:74:dc:5f:9d:af:8c:0a:6d:e1:
c5:ff:8e:23:1c:2f:9a:15:6c:d0:75:3a:55:4f:3c:95:fb:16:
42:5a:2e:60:9e:f1:65:42:a7:87:73:5a:78:f6:9a:27:ba:48:
05:3e:7b:39:2a:ed:79:d1:d3:87:a6:7d:b9:c8:78:21:0f:d9:
ab:68:a3:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPfVscUykPzmaB1JroWWNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzVjYzdjMzY0YzkwZWFmYWJhNjk3ZTBiZjU5ZjA1NTY5
YTk2OTUwHhcNMjUxMTA0MTkwMDI5WhcNMjUxMTA1MTkwMDI5WjAzMTEwLwYDVQQD
EygwMjhlZDU1Y2RkY2QwYTFiZjI4NWQ2OTViOGYxYTcxZDI0ZjhjMmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3lPWFjsvEkLJ+/liGRTNx9rw1Vm
kq9T0zIcKnZlJrOkgEiVbfWYP4/ZePnc2TAZKeYP6bm3FHHHG0+X9jCf75sSTGRs
8spxCALQk5xECd0Ob3PKYsx4ayO8eLGLNRG5oGsgapKKvbn4m4V7hwbVOziPESaG
FbdhvRBTEo+YtCXtuDSlktyuSHqvx90DHsf6oefrQyntyq7OoBTsBEfFhyKVBKSN
xPnIOtVaUqnYFq6AppE/m0PcTWA+Jx2ECHDvtSv0vAguIrgfZNsp+cbWBH2OFlWq
TuZ05/AHX/sE91D14by+XpH8GA0G32alt0kR00EU1EHPfK69drDDEv5ENQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKO1VzdzQob8oXWlbjxpx0k+MK0MB8GA1UdIwQY
MBaAFCLFzHw2TJDq+rppfgv1nwVWmpaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNYTWZEWk1rT3I2dW1sLUNfV2ZCVmFhbHBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81Njk0NDItNGU2ZC00ZWJlLTliYjIt
M2ZkYjc1M2E4NjE5LzEvSXNYTWZEWk1rT3I2dW1sLUNfV2ZCVmFhbHBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS81Njk0NDItNGU2ZC00ZWJlLTliYjItM2ZkYjc1M2E4NjE5
LzEvSXNYTWZEWk1rT3I2dW1sLUNfV2ZCVmFhbHBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5PPe/PO
HP2Jtyd3WSNYUvJrr7eBc7UzOUG+bqRdggVbNfdi1/+8YaTgnw+lz/23PsRaGbNU
oIsY9HXXhJzTVp/7g3nIgwe3w7DBgOkua41EeQ3eLsLPRbsBlxVTP+6Pbus9VSSI
61BHbr/sjr7NzLXinnCQM5gllc3TwlMPws8fvsW9S9oR1mL4Ew43idJ4YiOo7Vv2
13e4E3eMz2t17IkQ5IOxCvpRijshaiiw8ZSR4cU3WqekIv7i7i4TdNxfna+MCm3h
xf+OIxwvmhVs0HU6VU88lfsWQlouYJ7xZUKnh3NaePaaJ7pIBT57OSrtedHTh6Z9
uch4IQ/Zq2ij+g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:38 2025 by rpki-client