Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File: i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier: x5jnZNctL8dWtM/pw4a6oP0N/Jz6gkb1VqoEKM2NTOo=
Subject key identifier: DD:86:3C:90:01:63:85:51:06:8E:82:5E:32:50:33:4C:41:A5:F1:5B
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 019A5150C563E91EF0155B57DC5F7D62D36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number: 1724
Signing time: Wed 05 Nov 2025 00:00:39 +0000
Manifest this update: Wed 05 Nov 2025 00:00:39 +0000
Manifest next update: Thu 06 Nov 2025 00:00:39 +0000
Files and hashes: 1: RZK0b0ovThhwOspu5E-ursP21fk.roa (hash: QD9vKhIKNC6G+l7AznXUzzLsXomMDZljRclFB7nn2HQ=)
2: fiISLcTtszje5XVI9V1A5UtzzeY.roa (hash: eVRxObYN5WO+IJLUe7vH/MdccTrSwqFAfOP7RIW37BY=)
3: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: BeN7o+HztpQpHxM2Q0b8I8Gh407j0ymiriwAbpiM50Y=)
4: jI6BNQdThJo2MEdSZOm1_susYMk.roa (hash: rpQAWWU68zMZ9YE0YNIh6QHC51Xor5PQY1DDvCq8+m8=)
5: uqvRjoImP67-V2pzEWGA2vqwBPY.roa (hash: yGPp5s4cB95t+0hM/KR3osWVzparRNQvZpkZjxE6wzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:c5:63:e9:1e:f0:15:5b:57:dc:5f:7d:62:d3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Nov 5 00:00:39 2025 GMT
Not After : Nov 6 00:00:39 2025 GMT
Subject: CN=dd863c9001638551068e825e3250334c41a5f15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:56:cf:c1:b8:aa:15:2d:31:03:e6:71:82:
13:f5:b8:9f:de:7c:7c:44:58:59:a1:7e:96:ad:5b:
64:3c:c2:1e:60:ab:cf:2d:af:5d:4f:c9:fb:13:04:
a0:26:6f:63:66:a7:43:76:74:b9:8b:94:b0:c6:e2:
51:e6:62:df:f9:66:72:09:4c:03:f3:7e:44:98:94:
e3:5c:62:73:ca:d6:78:4a:ae:d6:e5:b4:4d:f3:57:
6e:95:e6:7f:ba:2c:0d:0d:c8:30:2d:34:35:75:90:
4c:8a:e7:42:1c:af:96:2c:62:53:4a:8c:f8:1f:60:
1a:a2:be:23:f7:46:61:df:75:f3:fa:b0:93:b2:59:
92:1f:2b:19:83:4a:13:a9:d4:cc:b0:5a:91:ca:e1:
68:e1:2e:76:c2:7f:bf:fa:3b:5a:a9:cc:ca:61:c9:
31:c0:10:0f:ea:65:61:93:c9:50:01:18:41:5d:20:
2b:bc:ff:e6:66:b0:37:dc:9f:67:8d:54:ef:57:ae:
fa:90:15:f1:4a:59:1d:62:b6:cb:d5:72:a9:3e:03:
d3:f4:7f:6f:20:d8:98:e1:e7:45:44:f6:3c:dd:e6:
64:b1:4a:10:ff:e7:21:0a:7d:84:2b:c4:ee:e5:12:
f3:16:9c:75:d0:94:6e:a9:56:43:20:dc:b3:b0:de:
c5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:86:3C:90:01:63:85:51:06:8E:82:5E:32:50:33:4C:41:A5:F1:5B
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:85:3c:c3:c8:99:21:fa:aa:7f:d5:d7:c7:fb:9a:7f:bf:f9:
0d:9f:f1:f5:f9:6d:a9:89:8d:11:a2:d0:b9:af:c9:0f:6f:19:
3e:1a:d4:ba:29:73:fa:3e:3e:ee:fd:50:98:8e:cf:ee:3d:97:
5e:11:2e:9c:61:ac:fd:74:4b:e6:e1:e5:74:ec:5e:f0:3c:82:
73:ab:90:af:79:50:62:6b:68:ab:d8:11:1a:f7:c8:86:ff:ef:
87:25:a3:c0:9a:b0:f0:ad:0a:2f:96:f7:37:ba:88:67:f3:3f:
d0:f4:81:51:75:cf:ec:4d:e3:28:9e:42:15:cf:f3:17:d4:60:
5c:37:3b:54:01:76:56:94:92:db:28:8d:f0:de:5d:70:b3:fe:
ee:7a:73:74:4f:32:92:88:79:b0:66:ac:92:5f:a8:d1:e7:41:
67:4a:e3:a4:4a:49:a8:d0:33:3d:74:44:d5:62:e8:08:ce:d8:
c6:be:8c:5c:3b:30:8f:44:42:13:9c:e4:a3:95:ec:a1:44:4d:
26:6a:92:ce:79:b8:41:51:d2:cc:73:a6:8d:16:73:97:a9:bb:
6e:81:7a:38:68:64:4f:01:1c:84:7f:ab:ef:2b:b8:1d:dd:e9:
ae:d0:61:8b:62:78:ce:22:23:79:62:d3:4e:45:c1:c5:8a:a6:
52:74:fb:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUMVj6R7wFVtX3F99YtNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjlmYzYxMjhiZTU5MTQwMWFjZjgyYmMyNDYxYWY2MzZl
YmU4ZTYwHhcNMjUxMTA1MDAwMDM5WhcNMjUxMTA2MDAwMDM5WjAzMTEwLwYDVQQD
EyhkZDg2M2M5MDAxNjM4NTUxMDY4ZTgyNWUzMjUwMzM0YzQxYTVmMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSdWz8G4qhUtMQPmcYIT9bif3nx8
RFhZoX6WrVtkPMIeYKvPLa9dT8n7EwSgJm9jZqdDdnS5i5SwxuJR5mLf+WZyCUwD
835EmJTjXGJzytZ4Sq7W5bRN81duleZ/uiwNDcgwLTQ1dZBMiudCHK+WLGJTSoz4
H2Aaor4j90Zh33Xz+rCTslmSHysZg0oTqdTMsFqRyuFo4S52wn+/+jtaqczKYckx
wBAP6mVhk8lQARhBXSArvP/mZrA33J9njVTvV676kBXxSlkdYrbL1XKpPgPT9H9v
INiY4edFRPY83eZksUoQ/+chCn2EK8Tu5RLzFpx10JRuqVZDINyzsN7F4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2GPJABY4VRBo6CXjJQM0xBpfFbMB8GA1UdIwQY
MBaAFItp/GEovlkUAaz4K8JGGvY26+jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUt
MjY1ZjJiZDBmOGYzLzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUtMjY1ZjJiZDBmOGYz
LzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4U8w8iZ
Ifqqf9XXx/uaf7/5DZ/x9fltqYmNEaLQua/JD28ZPhrUuilz+j4+7v1QmI7P7j2X
XhEunGGs/XRL5uHldOxe8DyCc6uQr3lQYmtoq9gRGvfIhv/vhyWjwJqw8K0KL5b3
N7qIZ/M/0PSBUXXP7E3jKJ5CFc/zF9RgXDc7VAF2VpSS2yiN8N5dcLP+7npzdE8y
koh5sGaskl+o0edBZ0rjpEpJqNAzPXRE1WLoCM7Yxr6MXDswj0RCE5zko5XsoURN
JmqSznm4QVHSzHOmjRZzl6m7boF6OGhkTwEchH+r7yu4Hd3prtBhi2J4ziIjeWLT
TkXBxYqmUnT7Kg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:55:26 2025 by rpki-client