Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
File: I15QLDFNUQT3xgzNaXicuEj_Xgc.mft (raw, json)
Hash identifier: zcYewST+dAVIgR/9mbsG1ZvZ8TcJ5NC9vEeiR55ixJw=
Subject key identifier: D3:2E:33:BD:E7:69:C4:B7:99:74:11:61:9B:B3:AB:C1:32:83:B6:42
Authority key identifier: 23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
Certificate issuer: /CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Certificate serial: 019A51BEE3C7E0C42D606606A5E0521E594F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
Manifest number: 0234
Signing time: Wed 05 Nov 2025 02:00:55 +0000
Manifest this update: Wed 05 Nov 2025 02:00:55 +0000
Manifest next update: Thu 06 Nov 2025 02:00:55 +0000
Files and hashes: 1: GLkcEMe4eneYkegJdDsN96p2G5w.roa (hash: a+Y+AIr4ILwMbtFOtGWppkOOeW987wrq4kOZaYCKOMI=)
2: I15QLDFNUQT3xgzNaXicuEj_Xgc.crl (hash: l2PWZB/M2WsI8nKEK2LqOgGZv/Uo45oViaxjBbZwFcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:e3:c7:e0:c4:2d:60:66:06:a5:e0:52:1e:59:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Validity
Not Before: Nov 5 02:00:55 2025 GMT
Not After : Nov 6 02:00:55 2025 GMT
Subject: CN=d32e33bde769c4b7997411619bb3abc13283b642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:30:3f:09:b4:d4:f6:9a:36:ad:0c:e6:ea:
53:a5:f7:44:d7:32:ec:05:bc:dc:cf:58:43:09:87:
02:13:47:19:09:91:22:35:0a:1f:eb:d5:88:5d:b6:
47:9c:3a:40:7e:e5:b2:a8:c6:76:a3:1b:2e:07:36:
b0:13:ef:00:e9:4c:0a:c2:66:c7:a2:7b:47:98:66:
54:c1:32:e5:b5:f1:8e:9a:09:e5:cb:a2:6c:05:ed:
2c:38:25:27:76:ee:3a:07:da:61:d2:8c:aa:b8:7a:
3f:42:8f:2f:d5:c9:06:ab:69:22:dd:9b:97:91:96:
bd:25:c2:2a:3e:87:6f:34:8e:bd:7e:26:48:b6:59:
f7:b2:7c:59:53:33:81:ba:47:9d:33:58:d9:95:ae:
9f:10:36:e8:25:92:dd:67:13:f1:0c:3e:17:c0:01:
dc:fe:8e:f6:31:e5:6b:4c:84:55:76:d1:2b:3f:4b:
c7:94:c5:c1:3f:2d:23:f6:12:a8:d7:d4:a2:6a:6c:
95:13:26:94:87:a1:c3:bf:0f:98:5b:99:7d:df:14:
28:07:93:69:44:19:a2:18:cd:a0:7b:46:37:4e:99:
52:db:b0:81:a0:38:66:91:3a:74:c7:6a:9c:30:31:
b8:0d:2f:0f:3d:3a:06:3e:bf:00:b8:62:64:f2:f2:
7c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2E:33:BD:E7:69:C4:B7:99:74:11:61:9B:B3:AB:C1:32:83:B6:42
X509v3 Authority Key Identifier:
keyid:23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fe:ca:2d:d8:e0:5e:cc:8c:12:05:22:fd:63:8a:79:60:4d:
a6:57:3a:ab:39:8c:3e:76:da:6e:5d:10:21:e2:d6:0c:ea:56:
c3:c4:b9:89:76:38:5c:c6:67:54:de:b6:76:fd:c7:83:e1:40:
de:97:1b:4c:64:84:02:b0:8a:c8:33:d7:e0:81:b8:08:fb:d7:
11:85:4b:8c:53:1e:21:84:d3:15:97:26:fb:c8:2f:b2:ad:74:
2b:40:8b:22:eb:c8:f1:41:4a:a3:ba:c0:00:16:ca:f3:3b:2a:
4d:31:94:9e:a0:f3:4d:d3:76:ed:d3:02:0a:09:90:98:36:02:
70:6e:8a:01:97:30:e9:09:5e:e0:68:ae:74:01:d9:49:21:bf:
8c:64:a5:50:42:19:1a:81:31:f4:62:84:e9:79:3a:30:5a:84:
56:9e:63:3b:89:8e:88:be:14:52:9e:b8:41:19:6b:5c:b9:b7:
48:84:9b:e8:6e:cf:ba:79:a5:69:7f:f9:02:c8:02:3b:2e:2a:
92:01:e0:35:9c:da:09:c1:7a:b9:d8:9f:9a:ff:57:86:0d:71:
b4:12:b7:de:10:83:67:5f:c2:59:3f:05:20:d6:5b:ff:17:a7:
72:fd:be:28:bb:80:71:db:51:cf:a1:7e:c2:31:cc:6e:da:79:
95:ce:6e:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvuPH4MQtYGYGpeBSHllPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNWU1MDJjMzE0ZDUxMDRmN2M2MGNjZDY5Nzg5Y2I4NDhm
ZjVlMDcwHhcNMjUxMTA1MDIwMDU1WhcNMjUxMTA2MDIwMDU1WjAzMTEwLwYDVQQD
EyhkMzJlMzNiZGU3NjljNGI3OTk3NDExNjE5YmIzYWJjMTMyODNiNjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQAwPwm01PaaNq0M5upTpfdE1zLs
Bbzcz1hDCYcCE0cZCZEiNQof69WIXbZHnDpAfuWyqMZ2oxsuBzawE+8A6UwKwmbH
ontHmGZUwTLltfGOmgnly6JsBe0sOCUndu46B9ph0oyquHo/Qo8v1ckGq2ki3ZuX
kZa9JcIqPodvNI69fiZItln3snxZUzOBukedM1jZla6fEDboJZLdZxPxDD4XwAHc
/o72MeVrTIRVdtErP0vHlMXBPy0j9hKo19SiamyVEyaUh6HDvw+YW5l93xQoB5Np
RBmiGM2ge0Y3TplS27CBoDhmkTp0x2qcMDG4DS8PPToGPr8AuGJk8vJ8iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMuM73nacS3mXQRYZuzq8Eyg7ZCMB8GA1UdIwQY
MBaAFCNeUCwxTVEE98YMzWl4nLhI/14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mYTI0NWYtZGM3NC00OTc0LTgyZTAt
YTU2ZTY3ODQ4ZjExLzEvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mYTI0NWYtZGM3NC00OTc0LTgyZTAtYTU2ZTY3ODQ4ZjEx
LzEvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKf7KLdjg
XsyMEgUi/WOKeWBNplc6qzmMPnbabl0QIeLWDOpWw8S5iXY4XMZnVN62dv3Hg+FA
3pcbTGSEArCKyDPX4IG4CPvXEYVLjFMeIYTTFZcm+8gvsq10K0CLIuvI8UFKo7rA
ABbK8zsqTTGUnqDzTdN27dMCCgmQmDYCcG6KAZcw6Qle4GiudAHZSSG/jGSlUEIZ
GoEx9GKE6Xk6MFqEVp5jO4mOiL4UUp64QRlrXLm3SISb6G7PunmlaX/5AsgCOy4q
kgHgNZzaCcF6udifmv9Xhg1xtBK33hCDZ1/CWT8FINZb/xencv2+KLuAcdtRz6F+
wjHMbtp5lc5u7g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:54 2025 by rpki-client