Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
File: IMnySVGbH_R5NQ8xclT0Bei_yr0.mft (raw, json)
Hash identifier: euKehreEfnjx5pgsfvuUzSVBow5qFgn6P+Q4gutRH0w=
Subject key identifier: 21:EA:05:F4:D6:BA:BF:05:2C:94:DF:A2:5B:CD:00:05:00:B4:55:71
Authority key identifier: 20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
Certificate issuer: /CN=20c9f249519b1ff479350f317254f405e8bfcabd
Certificate serial: 019A4FCFEC7984B396516D7555FA5CFC9A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
Manifest number: 1103
Signing time: Tue 04 Nov 2025 17:00:17 +0000
Manifest this update: Tue 04 Nov 2025 17:00:17 +0000
Manifest next update: Wed 05 Nov 2025 17:00:17 +0000
Files and hashes: 1: IMnySVGbH_R5NQ8xclT0Bei_yr0.crl (hash: g8+MzrBgVLxcce+tSM7d8dZX0u1dYeOZW7g9wdhJYpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:ec:79:84:b3:96:51:6d:75:55:fa:5c:fc:9a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c9f249519b1ff479350f317254f405e8bfcabd
Validity
Not Before: Nov 4 17:00:17 2025 GMT
Not After : Nov 5 17:00:17 2025 GMT
Subject: CN=21ea05f4d6babf052c94dfa25bcd000500b45571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:11:7c:ad:88:81:8f:08:95:ea:50:19:df:
6c:26:94:7c:d6:d7:98:3f:5c:de:43:73:92:aa:06:
c0:c6:24:50:1c:9e:37:1d:60:cc:3a:46:f9:d2:ac:
be:13:9c:1d:a7:7d:eb:3d:1f:9f:61:2d:54:d6:f6:
41:0e:d1:0e:4f:37:a5:4f:ed:2a:84:7f:a7:d5:96:
6a:15:a8:34:3d:81:1d:b1:5e:05:ae:cc:bc:ed:e0:
07:d6:3d:0b:e8:84:ba:57:51:c4:df:60:e5:a7:7f:
81:8e:61:3c:aa:f0:e0:c2:6b:d9:ed:30:4b:d2:70:
2a:1b:8b:07:82:0f:13:e5:6a:be:a8:19:b5:eb:f3:
00:05:0d:28:0e:d7:83:21:db:77:40:b9:1d:8b:ec:
96:58:9d:57:fa:90:ce:67:ad:72:b4:14:1d:27:38:
fd:58:7b:f0:f0:f6:c1:da:db:53:9d:26:5d:ed:bd:
bd:2e:e9:08:3d:db:cb:a5:b8:05:ff:7f:f5:ba:d1:
3a:c4:f9:9c:c0:02:8a:06:fe:7b:22:76:ff:e7:51:
4a:8e:4a:fc:98:f7:2e:c1:2f:89:c1:02:c3:95:83:
0f:85:52:fc:be:5f:b3:0e:83:93:16:3b:bf:84:86:
97:d4:41:bb:df:b9:99:b8:75:c5:c6:59:8a:57:00:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EA:05:F4:D6:BA:BF:05:2C:94:DF:A2:5B:CD:00:05:00:B4:55:71
X509v3 Authority Key Identifier:
keyid:20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:81:b1:e1:8c:69:20:47:67:b0:d5:33:2a:df:65:44:71:55:
81:bc:28:0c:7d:9e:22:cd:39:83:ea:34:7d:5d:e3:23:90:0f:
9a:cf:05:d0:d9:3f:e6:a1:c2:72:8b:8a:1d:30:6b:89:60:f2:
96:c6:38:15:ea:af:cf:e2:90:b5:dc:b4:66:de:bd:4d:8e:de:
ad:91:cf:ce:b6:86:c5:6c:7e:08:d5:2c:b2:62:d2:e4:31:a5:
7e:a6:d7:32:a2:fd:86:19:94:eb:ab:12:7d:6f:4c:da:82:43:
dc:17:ec:39:49:98:23:02:29:9d:d7:14:f2:67:61:6a:73:c5:
d3:6f:73:29:8f:2f:0a:0e:bd:19:b8:eb:70:9a:66:24:ef:9d:
5f:5a:03:72:6c:85:82:7b:78:55:7e:8f:8b:ba:68:6b:a0:b2:
f3:95:d5:f4:5d:bd:f3:6f:7c:89:dc:f8:6c:c4:0c:3d:ee:d4:
57:96:65:43:61:56:49:a3:69:ef:66:77:16:77:01:58:de:86:
97:a1:8d:38:6e:9e:fb:5a:6e:b2:43:f8:40:ac:b2:72:cc:2c:
03:dd:25:33:a0:91:64:9a:9f:55:f6:05:ca:a9:b6:2a:26:59:
16:a1:cd:95:25:50:44:58:83:83:5f:ca:87:8f:eb:35:6a:d4:
46:cd:c0:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz+x5hLOWUW11Vfpc/JpbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzlmMjQ5NTE5YjFmZjQ3OTM1MGYzMTcyNTRmNDA1ZThi
ZmNhYmQwHhcNMjUxMTA0MTcwMDE3WhcNMjUxMTA1MTcwMDE3WjAzMTEwLwYDVQQD
EygyMWVhMDVmNGQ2YmFiZjA1MmM5NGRmYTI1YmNkMDAwNTAwYjQ1NTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqcRfK2IgY8IlepQGd9sJpR81teY
P1zeQ3OSqgbAxiRQHJ43HWDMOkb50qy+E5wdp33rPR+fYS1U1vZBDtEOTzelT+0q
hH+n1ZZqFag0PYEdsV4Frsy87eAH1j0L6IS6V1HE32Dlp3+BjmE8qvDgwmvZ7TBL
0nAqG4sHgg8T5Wq+qBm16/MABQ0oDteDIdt3QLkdi+yWWJ1X+pDOZ61ytBQdJzj9
WHvw8PbB2ttTnSZd7b29LukIPdvLpbgF/3/1utE6xPmcwAKKBv57Inb/51FKjkr8
mPcuwS+JwQLDlYMPhVL8vl+zDoOTFju/hIaX1EG737mZuHXFxlmKVwBRFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHqBfTWur8FLJTfolvNAAUAtFVxMB8GA1UdIwQY
MBaAFCDJ8klRmx/0eTUPMXJU9AXov8q9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOGMyNmYtMjVhMi00YjIwLTllY2Qt
MGU2YmNlZDAwNDYzLzEvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOGMyNmYtMjVhMi00YjIwLTllY2QtMGU2YmNlZDAwNDYz
LzEvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz4Gx4Yxp
IEdnsNUzKt9lRHFVgbwoDH2eIs05g+o0fV3jI5APms8F0Nk/5qHCcouKHTBriWDy
lsY4Feqvz+KQtdy0Zt69TY7erZHPzraGxWx+CNUssmLS5DGlfqbXMqL9hhmU66sS
fW9M2oJD3BfsOUmYIwIpndcU8mdhanPF029zKY8vCg69GbjrcJpmJO+dX1oDcmyF
gnt4VX6Pi7poa6Cy85XV9F298298idz4bMQMPe7UV5ZlQ2FWSaNp72Z3FncBWN6G
l6GNOG6e+1puskP4QKyycswsA90lM6CRZJqfVfYFyqm2KiZZFqHNlSVQRFiDg1/K
h4/rNWrURs3Abw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:26 2025 by rpki-client