Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
File: I5Vy3fyrYpHmQQzNToYO42AA5mg.mft (raw, json)
Hash identifier: RAGa6AObnPVGo7u7fT79kuVU3wUFs5ScEhJBilH4Gdc=
Subject key identifier: 60:69:B8:44:80:B2:B8:7B:B3:E7:AD:12:9F:C3:0B:EE:10:7C:CF:2D
Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
Certificate issuer: /CN=239572ddfcab6291e6410ccd4e860ee36000e668
Certificate serial: 019A4EF5AF09FBF0534415CF00E3CA82C6EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:55 +0000
Manifest this update: Tue 04 Nov 2025 13:01:55 +0000
Manifest next update: Wed 05 Nov 2025 13:01:55 +0000
Files and hashes: 1: I5Vy3fyrYpHmQQzNToYO42AA5mg.crl (hash: YsJci3Nn3k3WN86Yv2w9oHykH6X5M+8oKeIXa9kgJoA=)
2: cEnlNHZ35kSVNo2T27Ex45pap18.roa (hash: q/g4pWJ8XYH4irxAQK7i5w/oElgLduGOhld/VI56BOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:af:09:fb:f0:53:44:15:cf:00:e3:ca:82:c6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668
Validity
Not Before: Nov 4 13:01:55 2025 GMT
Not After : Nov 5 13:01:55 2025 GMT
Subject: CN=6069b84480b2b87bb3e7ad129fc30bee107ccf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6d:de:fc:85:b7:bd:2b:8a:03:5c:06:46:f4:
27:b0:d8:49:55:af:70:a6:08:b1:8b:28:1f:bf:2b:
dc:4c:de:23:ce:ea:a4:96:cf:dc:2b:09:35:f8:76:
0f:a7:34:89:df:32:94:1d:92:d6:65:91:b8:09:60:
88:5c:e3:ed:30:c1:01:61:2f:30:2c:2d:81:bc:20:
96:4d:6e:51:ca:0a:b1:45:e5:13:67:27:4a:30:a1:
1a:af:58:db:51:cf:fb:8e:97:d2:9e:a8:a0:23:a2:
75:fb:17:47:1f:af:3b:91:84:a9:b2:26:d7:ad:90:
16:07:a8:74:6e:f1:bf:61:0a:1d:ac:dc:a1:e8:2d:
78:6f:b0:39:f2:e5:30:32:e6:86:63:7f:92:c6:6b:
b0:61:e2:66:46:ee:0f:02:9f:55:6a:c4:d6:60:73:
11:4a:5d:e0:36:2a:35:77:63:76:b8:15:fd:fc:66:
5e:f2:ca:99:56:fe:32:d5:1e:57:83:c4:27:e3:aa:
8e:03:1c:84:ce:3f:32:aa:a4:ca:07:ac:64:f2:e8:
35:bb:68:27:f6:bc:ce:3b:54:94:59:64:1a:01:3c:
5a:c5:82:c5:ba:40:ac:e4:22:8b:65:78:29:08:39:
7a:b9:28:c6:8a:df:c8:19:93:51:fe:a6:6a:85:76:
db:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:69:B8:44:80:B2:B8:7B:B3:E7:AD:12:9F:C3:0B:EE:10:7C:CF:2D
X509v3 Authority Key Identifier:
keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:88:0f:59:ef:1d:8d:5c:e1:46:99:7f:f9:c4:dd:4a:b0:4d:
b6:39:8d:78:83:28:f0:f4:a6:53:f9:8f:1c:20:ae:aa:df:4f:
d8:06:e5:a7:f6:c6:f3:7c:ec:1d:cf:d5:76:e3:9d:a1:94:5f:
52:d8:68:5f:a1:2c:2a:60:54:31:d4:d1:65:47:c3:40:b3:6f:
9c:aa:11:1f:dc:e8:f9:a7:fa:1a:e9:c0:28:42:02:04:a2:1c:
31:1d:c2:e1:04:c2:c0:15:29:48:4a:01:42:91:cd:02:9a:48:
c3:1d:08:18:d0:e5:8b:34:29:7a:b2:7d:55:ff:7c:02:08:75:
57:d4:83:d3:bb:bd:ea:f5:6d:36:1f:74:60:64:53:5b:46:31:
c7:40:a0:2c:f9:96:90:21:3a:ef:c6:24:20:bd:d9:ba:56:b9:
f4:c5:d7:e2:6f:d9:4c:e2:da:54:51:f5:ec:81:fc:51:71:0c:
77:f4:eb:2a:f3:a3:77:ae:34:57:1f:94:6f:67:61:e9:46:ab:
9a:b4:13:0f:4f:68:70:46:0d:37:45:31:e7:f6:3d:d0:e2:e3:
72:fc:fc:ac:73:ea:43:f6:37:32:8b:91:29:e7:16:f6:6f:7c:
b5:c8:5f:dd:ff:8c:a8:3a:a4:64:54:30:6f:32:7d:aa:af:e5:
24:06:fc:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9a8J+/BTRBXPAOPKgsbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzOTU3MmRkZmNhYjYyOTFlNjQxMGNjZDRlODYwZWUzNjAw
MGU2NjgwHhcNMjUxMTA0MTMwMTU1WhcNMjUxMTA1MTMwMTU1WjAzMTEwLwYDVQQD
Eyg2MDY5Yjg0NDgwYjJiODdiYjNlN2FkMTI5ZmMzMGJlZTEwN2NjZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G3e/IW3vSuKA1wGRvQnsNhJVa9w
pgixiygfvyvcTN4jzuqkls/cKwk1+HYPpzSJ3zKUHZLWZZG4CWCIXOPtMMEBYS8w
LC2BvCCWTW5RygqxReUTZydKMKEar1jbUc/7jpfSnqigI6J1+xdHH687kYSpsibX
rZAWB6h0bvG/YQodrNyh6C14b7A58uUwMuaGY3+SxmuwYeJmRu4PAp9VasTWYHMR
Sl3gNio1d2N2uBX9/GZe8sqZVv4y1R5Xg8Qn46qOAxyEzj8yqqTKB6xk8ug1u2gn
9rzOO1SUWWQaATxaxYLFukCs5CKLZXgpCDl6uSjGit/IGZNR/qZqhXbb4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBpuESAsrh7s+etEp/DC+4QfM8tMB8GA1UdIwQY
MBaAFCOVct38q2KR5kEMzU6GDuNgAOZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTVWeTNmeXJZcEhtUVF6TlRvWU80MkFBNW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZDdmMDgtZTc3Yy00MzM4LTlhMzkt
OGUxOWMwZGI4NmMyLzEvSTVWeTNmeXJZcEhtUVF6TlRvWU80MkFBNW1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xZDdmMDgtZTc3Yy00MzM4LTlhMzktOGUxOWMwZGI4NmMy
LzEvSTVWeTNmeXJZcEhtUVF6TlRvWU80MkFBNW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIgPWe8d
jVzhRpl/+cTdSrBNtjmNeIMo8PSmU/mPHCCuqt9P2Ablp/bG83zsHc/VduOdoZRf
UthoX6EsKmBUMdTRZUfDQLNvnKoRH9zo+af6GunAKEICBKIcMR3C4QTCwBUpSEoB
QpHNAppIwx0IGNDlizQperJ9Vf98Agh1V9SD07u96vVtNh90YGRTW0Yxx0CgLPmW
kCE678YkIL3Zula59MXX4m/ZTOLaVFH17IH8UXEMd/TrKvOjd640Vx+Ub2dh6Uar
mrQTD09ocEYNN0Ux5/Y90OLjcvz8rHPqQ/Y3MouRKecW9m98tchf3f+MqDqkZFQw
bzJ9qq/lJAb8SA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:33:28 2025 by rpki-client