Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
File: is0usvBhi3LGRtmX08ld2Da90AY.mft (raw, json)
Hash identifier: s/msk03IeZu77djPf6XceLwHfc1LcCajWQtWXr73oXE=
Subject key identifier: B9:66:48:D0:6B:E2:47:BD:7F:3C:B2:0B:16:DC:DF:A9:8E:60:03:1B
Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Certificate issuer: /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Certificate serial: 019A4D740107B082C2E8F80879126A461DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
Manifest number: 07AE
Signing time: Tue 04 Nov 2025 06:00:39 +0000
Manifest this update: Tue 04 Nov 2025 06:00:39 +0000
Manifest next update: Wed 05 Nov 2025 06:00:39 +0000
Files and hashes: 1: NxVQaX6suFkgxiAAF2vWtVQF7dk.roa (hash: zsaYmfZBz75BAmMTNCovG+cBN7yV/z5nE5MvUK9bhp0=)
2: QB7BRHUFuZiz_JCklEdTGkiHDXA.roa (hash: T5whSTEBQz0KfK/+KqfcupXVgP1i6/CuX9EnL85Iy64=)
3: hzmnrqGEcmQoLE8-QnNCBlnG1g4.roa (hash: BMDDmrLQ040JiodI6CtpS7rhdysF3qgW4lRm+vEVeGs=)
4: is0usvBhi3LGRtmX08ld2Da90AY.crl (hash: rqDSSgcJ6E2JdhQUPJzQ6UBqYo7rKQ2VpjPfzlCIs6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:01:07:b0:82:c2:e8:f8:08:79:12:6a:46:1d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Validity
Not Before: Nov 4 06:00:39 2025 GMT
Not After : Nov 5 06:00:39 2025 GMT
Subject: CN=b96648d06be247bd7f3cb20b16dcdfa98e60031b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:df:85:ed:a9:5b:7e:a3:5c:33:1c:b1:e9:
33:6e:5c:45:8b:10:4e:67:09:96:76:6d:05:7a:2b:
5d:b5:f5:2e:d1:97:9a:bb:6e:35:00:bb:9e:59:1b:
9c:df:cb:b8:f7:ad:41:c8:7d:80:a0:a0:20:e7:bb:
78:bb:cf:f5:ba:bc:21:55:e8:63:fe:4e:d1:45:b1:
4e:99:96:93:ea:38:26:64:30:b6:f3:49:f4:90:39:
30:0b:05:9b:6f:6f:26:7f:69:54:7a:ab:ec:b5:ca:
ab:1d:12:89:1e:65:87:85:ac:61:8b:f9:a3:c6:e9:
1a:97:84:05:63:75:39:5a:c6:b3:10:8a:c5:ab:59:
99:8f:35:30:d2:a1:8d:a6:0f:a9:48:7e:30:57:96:
8a:b0:1f:18:91:99:5a:e6:b2:3b:d6:0a:35:fc:bc:
9e:14:aa:23:29:3d:a9:07:72:4e:2b:1c:71:e2:87:
a2:80:57:5e:0e:5b:56:3a:66:64:90:47:6e:02:49:
31:9a:af:8e:f1:9c:2b:6c:d7:79:07:a3:e3:8d:fe:
53:ac:e4:d2:fb:c1:ef:07:23:3f:55:8e:ca:3e:04:
8e:3b:0d:16:46:3d:21:46:c6:b3:11:75:e5:d5:da:
b0:f3:e2:bb:f8:2f:db:76:0f:c0:06:4d:15:e6:a1:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:66:48:D0:6B:E2:47:BD:7F:3C:B2:0B:16:DC:DF:A9:8E:60:03:1B
X509v3 Authority Key Identifier:
keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c3:ab:03:31:4b:a5:73:7f:c9:89:46:21:72:62:da:ff:07:
55:6d:9b:06:5d:7d:7f:25:ba:9d:7a:d3:4f:39:3d:b0:9a:49:
a6:25:b8:c3:22:36:85:19:66:e9:18:4c:27:02:d8:f4:33:cb:
50:86:3e:98:77:15:5b:07:f9:67:51:b6:8e:30:bc:d3:7c:6f:
c8:18:52:df:9e:36:1b:2d:5d:7c:40:42:5b:f2:a7:67:02:f5:
01:d1:79:7f:f6:bf:d5:de:34:83:5a:f1:92:79:28:a1:33:78:
a4:7d:e8:7c:09:71:e3:86:0d:d8:59:7f:a4:30:8b:5b:87:d3:
88:20:f5:33:80:12:b0:3c:f9:d5:52:e3:e6:94:8a:d5:db:8f:
3f:c8:99:c2:d7:bb:06:18:ef:05:4d:b3:fc:40:89:85:b5:22:
3c:50:ce:7c:0d:9b:48:e6:08:76:51:1b:7d:c3:01:64:2b:4b:
26:8a:06:73:c6:4d:66:a5:b5:d5:54:e7:83:7b:82:fd:4d:1b:
8c:50:4a:66:13:1a:79:b8:47:4c:30:9c:16:ae:dd:fb:c5:e6:
a1:1b:cb:52:a5:9a:a7:3f:66:b7:3e:7e:af:bc:e0:12:b2:24:
fd:73:1d:05:f4:51:b5:be:0f:1e:d6:7f:d2:1f:c1:3b:02:54:
6c:4b:d1:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdAEHsILC6PgIeRJqRh3RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhY2QyZWIyZjA2MThiNzJjNjQ2ZDk5N2QzYzk1ZGQ4MzZi
ZGQwMDYwHhcNMjUxMTA0MDYwMDM5WhcNMjUxMTA1MDYwMDM5WjAzMTEwLwYDVQQD
EyhiOTY2NDhkMDZiZTI0N2JkN2YzY2IyMGIxNmRjZGZhOThlNjAwMzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY/fhe2pW36jXDMcsekzblxFixBO
ZwmWdm0FeitdtfUu0Zeau241ALueWRuc38u4961ByH2AoKAg57t4u8/1urwhVehj
/k7RRbFOmZaT6jgmZDC280n0kDkwCwWbb28mf2lUeqvstcqrHRKJHmWHhaxhi/mj
xukal4QFY3U5WsazEIrFq1mZjzUw0qGNpg+pSH4wV5aKsB8YkZla5rI71go1/Lye
FKojKT2pB3JOKxxx4oeigFdeDltWOmZkkEduAkkxmq+O8ZwrbNd5B6Pjjf5TrOTS
+8HvByM/VY7KPgSOOw0WRj0hRsazEXXl1dqw8+K7+C/bdg/ABk0V5qGiqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlmSNBr4ke9fzyyCxbc36mOYAMbMB8GA1UdIwQY
MBaAFIrNLrLwYYtyxkbZl9PJXdg2vdAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjkt
Nzk0YzlkOTI4Y2RjLzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjktNzk0YzlkOTI4Y2Rj
LzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacOrAzFL
pXN/yYlGIXJi2v8HVW2bBl19fyW6nXrTTzk9sJpJpiW4wyI2hRlm6RhMJwLY9DPL
UIY+mHcVWwf5Z1G2jjC803xvyBhS3542Gy1dfEBCW/KnZwL1AdF5f/a/1d40g1rx
knkooTN4pH3ofAlx44YN2Fl/pDCLW4fTiCD1M4ASsDz51VLj5pSK1duPP8iZwte7
BhjvBU2z/ECJhbUiPFDOfA2bSOYIdlEbfcMBZCtLJooGc8ZNZqW11VTng3uC/U0b
jFBKZhMaebhHTDCcFq7d+8XmoRvLUqWapz9mtz5+r7zgErIk/XMdBfRRtb4PHtZ/
0h/BOwJUbEvRPA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:16 2025 by rpki-client