Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier: mjW2iPL1m2hMJcgo8C+jENp64h7CoTfr35pgGSeHBZA=
Subject key identifier: 7A:C2:1A:CC:A4:C2:7C:3B:34:E5:A4:EC:F1:DB:5D:81:4F:D1:69:E2
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 019A51505302BA8145FA540D54A15871F6EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 00:00:09 +0000
Manifest this update: Wed 05 Nov 2025 00:00:09 +0000
Manifest next update: Thu 06 Nov 2025 00:00:09 +0000
Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: VHWmJ5LajIt+UHYPulf0EuVjegV5ywfAnGMjIIVOe3o=)
2: h4MNBNIqF_ThX6XaH2WdhshuJOA.roa (hash: rTGzgorMfX1eun7k8wcYtv0yi00PmZQby+9ZEZuIh7g=)
3: nJekGUdzLnW-TjQjig7_IehTMxo.roa (hash: 7EP+L4VTl9fIN/VTMWiTcp215tfBsK8IFYr8aaBuzJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:53:02:ba:81:45:fa:54:0d:54:a1:58:71:f6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: Nov 5 00:00:09 2025 GMT
Not After : Nov 6 00:00:09 2025 GMT
Subject: CN=7ac21acca4c27c3b34e5a4ecf1db5d814fd169e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:e5:4c:dc:5d:f2:01:7a:c1:79:b7:93:12:
2b:fb:a8:82:a8:3d:a2:48:70:00:79:3a:99:2d:4b:
cb:8c:51:ef:07:9e:14:5d:62:a0:df:fd:cb:6e:c7:
5f:58:6e:e4:b4:7a:2d:f4:91:00:32:ee:45:98:b1:
f8:a9:ea:b5:e9:28:4c:47:4b:6d:92:b8:0f:0a:f6:
7d:b9:12:0d:a3:c8:21:8c:1c:69:23:5f:bc:47:d0:
e1:33:a4:97:12:3f:db:bd:cf:eb:d3:68:6c:df:5b:
b2:16:d6:b8:b7:65:9f:c0:8c:cd:54:c6:03:a0:66:
50:89:6b:4c:6b:54:b2:3b:d9:4b:2d:52:f7:d2:5e:
a8:22:a3:32:1b:69:87:4b:c3:1d:46:94:77:95:f8:
8c:10:f1:00:e4:a0:26:c9:eb:15:0e:7f:20:1f:49:
a6:98:f7:10:64:c8:7b:06:db:83:ab:96:aa:39:eb:
a8:f0:14:64:da:8c:e7:ba:18:31:99:f0:0c:4c:d1:
7c:ff:32:07:95:1f:3a:92:be:5b:81:ef:93:fb:7f:
ce:54:88:40:61:e3:c9:02:92:7e:90:9b:f4:97:4f:
f1:85:38:c9:94:b6:ff:9a:1c:bd:75:4c:10:65:24:
e3:1f:b7:18:c4:66:cf:2c:22:d9:7b:e6:48:c6:5a:
80:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C2:1A:CC:A4:C2:7C:3B:34:E5:A4:EC:F1:DB:5D:81:4F:D1:69:E2
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f5:83:94:e2:50:ab:1c:b2:e0:00:a7:9b:7e:3f:7b:6f:be:
c0:32:4c:f3:91:42:3a:d4:09:a7:73:46:0d:93:83:3a:e8:a4:
c3:2c:86:0c:98:7f:6a:8b:92:6c:9d:75:24:e2:d2:79:fc:9b:
c3:80:2e:59:64:7d:1f:c0:ff:30:9e:c9:0b:47:23:38:24:d5:
6d:8d:8d:a6:35:0c:5d:28:b2:ca:e9:dd:84:97:be:02:94:70:
90:be:b8:ca:97:93:4d:c5:b8:04:ac:51:1a:7e:46:b7:6c:4f:
72:8a:b7:3d:dc:f9:0c:7b:9f:b2:27:99:6e:42:cc:c4:c1:07:
5d:cf:e7:39:ce:3e:78:49:b6:07:dc:1f:f3:ba:d4:bb:61:d0:
e0:f5:9b:c1:b7:99:1a:35:1c:23:1a:4c:21:5d:e4:ae:62:a6:
27:63:f5:59:13:a2:0c:fc:0a:95:bb:44:11:b8:9b:43:d7:ea:
60:7f:b8:27:c5:0b:35:e4:ee:82:ff:78:29:bd:9a:d9:26:88:
9c:d4:86:8c:9c:3b:16:6d:2d:5a:5c:58:03:15:4c:76:4f:22:
2e:c3:82:66:fd:0b:95:f3:10:19:f0:66:01:fb:f8:38:78:a2:
ed:2a:35:ea:f4:0b:db:6f:61:84:5b:ad:83:9b:ec:1b:9e:a1:
bf:a6:64:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUFMCuoFF+lQNVKFYcfbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGNkMzQ5MTFjZmNlOTQ2YTIyZWE4NDY2MzczOGNkY2Mw
NzZkNDUwHhcNMjUxMTA1MDAwMDA5WhcNMjUxMTA2MDAwMDA5WjAzMTEwLwYDVQQD
Eyg3YWMyMWFjY2E0YzI3YzNiMzRlNWE0ZWNmMWRiNWQ4MTRmZDE2OWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7nlTNxd8gF6wXm3kxIr+6iCqD2i
SHAAeTqZLUvLjFHvB54UXWKg3/3LbsdfWG7ktHot9JEAMu5FmLH4qeq16ShMR0tt
krgPCvZ9uRINo8ghjBxpI1+8R9DhM6SXEj/bvc/r02hs31uyFta4t2WfwIzNVMYD
oGZQiWtMa1SyO9lLLVL30l6oIqMyG2mHS8MdRpR3lfiMEPEA5KAmyesVDn8gH0mm
mPcQZMh7BtuDq5aqOeuo8BRk2oznuhgxmfAMTNF8/zIHlR86kr5bge+T+3/OVIhA
YePJApJ+kJv0l0/xhTjJlLb/mhy9dUwQZSTjH7cYxGbPLCLZe+ZIxlqAzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrCGsykwnw7NOWk7PHbXYFP0WniMB8GA1UdIwQY
MBaAFCNM00kRz86UaiLqhGY3OM3MB21FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTB6VFNSSFB6cFJxSXVxRVpqYzR6Y3dIYlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjUzNmYtMzhmZS00NWJlLWI4Zjkt
MTI1NTAwZDJiZTk0LzEvSTB6VFNSSFB6cFJxSXVxRVpqYzR6Y3dIYlVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81ZjUzNmYtMzhmZS00NWJlLWI4ZjktMTI1NTAwZDJiZTk0
LzEvSTB6VFNSSFB6cFJxSXVxRVpqYzR6Y3dIYlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvWDlOJQ
qxyy4ACnm34/e2++wDJM85FCOtQJp3NGDZODOuikwyyGDJh/aouSbJ11JOLSefyb
w4AuWWR9H8D/MJ7JC0cjOCTVbY2NpjUMXSiyyundhJe+ApRwkL64ypeTTcW4BKxR
Gn5Gt2xPcoq3Pdz5DHufsieZbkLMxMEHXc/nOc4+eEm2B9wf87rUu2HQ4PWbwbeZ
GjUcIxpMIV3krmKmJ2P1WROiDPwKlbtEEbibQ9fqYH+4J8ULNeTugv94Kb2a2SaI
nNSGjJw7Fm0tWlxYAxVMdk8iLsOCZv0LlfMQGfBmAfv4OHii7So16vQL229hhFut
g5vsG56hv6Zk/g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:43:20 2025 by rpki-client