Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
File: i5sBY-7p55KqoWt9UQXTRyEfMSM.mft (raw, json)
Hash identifier: 3NHW2N9RYtum22Y7OWc0aWJ90eFj2ArHvVHY8OFGTII=
Subject key identifier: C6:3A:A6:51:6E:69:49:C5:1D:8A:F7:CA:D6:E7:28:20:8E:BC:86:9D
Authority key identifier: 8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
Certificate issuer: /CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Certificate serial: 019A4D74235ABB03E1B706805E0C7F86EBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
Manifest number: 0F59
Signing time: Tue 04 Nov 2025 06:00:48 +0000
Manifest this update: Tue 04 Nov 2025 06:00:48 +0000
Manifest next update: Wed 05 Nov 2025 06:00:48 +0000
Files and hashes: 1: 0SrGSoxm46KHk5s_SkJdGCE1HAE.roa (hash: JwOVM2pq6uVpoEw0ksou2dKNGwx9rwOtGk9iEkBHbFc=)
2: Fj752bkxuJMKiLz6DxiNHNPGnCc.roa (hash: igeXZDlVZiFGBhSeEn8vHaUr4m/y63zRGTprEOmyBsQ=)
3: i5sBY-7p55KqoWt9UQXTRyEfMSM.crl (hash: WUmLo85D1vLQ7Gb1Tk8Dq8ptK7pl+KnttyTrEsU37Gc=)
4: t9CNJf3eXwpeMjr9B2y5JwU1fgQ.roa (hash: 1VYdgaCmthgCjQEP8F7ZlA1j3DUuIWlR2jF27HX+0/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:23:5a:bb:03:e1:b7:06:80:5e:0c:7f:86:eb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Validity
Not Before: Nov 4 06:00:48 2025 GMT
Not After : Nov 5 06:00:48 2025 GMT
Subject: CN=c63aa6516e6949c51d8af7cad6e728208ebc869d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:38:04:5d:4c:37:87:ce:d0:b1:17:23:fa:
49:71:47:f3:b5:4c:d5:71:73:e7:64:8d:b9:bd:25:
c4:b6:2f:9c:1d:87:cb:c7:6a:ff:f8:2b:f7:12:8c:
ce:b4:07:60:23:89:5d:f3:f1:09:83:c4:3b:c2:21:
c6:e3:c0:93:e8:36:08:65:e3:0a:db:b9:0a:95:3a:
91:bc:f1:cd:59:4b:2f:ff:0d:23:fc:d2:c6:bc:ec:
de:d4:f8:4f:c5:93:0c:7d:41:67:7f:29:12:1f:2a:
73:0b:13:4f:09:ee:da:4b:b1:d8:e5:62:f6:8b:e0:
02:a6:a8:b0:5b:3d:c1:ab:ef:f8:26:d5:4f:d2:b1:
55:8c:59:6a:37:c1:c8:fd:b3:68:62:77:bc:cd:53:
67:91:9a:e1:5c:58:33:c3:d6:8e:b1:d1:1b:fb:04:
4c:ad:0c:ac:93:c9:c8:1a:54:28:ae:b5:37:ce:f9:
02:1c:26:bf:35:1c:bf:3c:97:9a:c4:3d:65:51:7c:
07:e7:4a:e6:70:4d:67:d0:30:a4:1f:5b:b2:6b:64:
6e:44:c2:ff:1f:41:ca:85:fb:dd:62:06:79:ff:18:
8d:8f:bc:a8:93:cc:fd:70:0f:ac:ad:4e:3c:1d:ab:
d1:06:0f:59:31:f3:42:75:d4:86:8d:97:2d:49:64:
9f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3A:A6:51:6E:69:49:C5:1D:8A:F7:CA:D6:E7:28:20:8E:BC:86:9D
X509v3 Authority Key Identifier:
keyid:8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e5:3b:b5:22:60:98:4e:22:e6:d4:61:90:c6:95:ec:bd:38:
7c:b1:fc:1c:ad:ab:14:28:07:4d:61:c7:78:83:1d:5a:2b:58:
67:be:e1:7b:aa:bc:00:20:a1:06:bd:f5:45:16:cc:05:33:7a:
29:d1:7b:0d:37:b3:dd:6e:68:fc:ae:8b:29:f5:eb:97:0c:fd:
88:e8:4d:99:41:11:b9:bb:6d:f6:f2:63:62:fa:fe:c4:95:23:
20:57:5a:3a:9f:f4:c8:d1:72:17:bc:0b:73:26:19:f6:bd:32:
d9:86:43:9e:19:df:a1:df:da:ec:05:20:1e:51:a0:79:0c:af:
8e:1f:56:ff:d1:73:06:d3:4f:ee:14:fa:17:62:78:56:24:19:
09:f8:4c:cf:db:a8:bc:c0:a4:24:db:a5:28:ed:7c:a0:77:e3:
c3:78:13:13:68:83:36:3a:44:e8:60:71:e1:74:5d:33:97:39:
31:26:d8:7b:c0:a3:5b:65:88:b1:7b:cb:67:26:a5:11:9c:9c:
58:af:cc:58:ab:6e:87:bd:fc:f4:84:ac:eb:33:91:0a:12:64:
91:13:41:23:bd:40:68:65:a4:1a:49:a8:b2:74:b8:eb:1e:ec:
6a:c7:40:9a:5b:d5:99:2c:09:97:32:97:a0:fa:00:69:de:33:
16:ae:43:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdCNauwPhtwaAXgx/huulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOWIwMTYzZWVlOWU3OTJhYWExNmI3ZDUxMDVkMzQ3MjEx
ZjMxMjMwHhcNMjUxMTA0MDYwMDQ4WhcNMjUxMTA1MDYwMDQ4WjAzMTEwLwYDVQQD
EyhjNjNhYTY1MTZlNjk0OWM1MWQ4YWY3Y2FkNmU3MjgyMDhlYmM4NjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aI4BF1MN4fO0LEXI/pJcUfztUzV
cXPnZI25vSXEti+cHYfLx2r/+Cv3EozOtAdgI4ld8/EJg8Q7wiHG48CT6DYIZeMK
27kKlTqRvPHNWUsv/w0j/NLGvOze1PhPxZMMfUFnfykSHypzCxNPCe7aS7HY5WL2
i+ACpqiwWz3Bq+/4JtVP0rFVjFlqN8HI/bNoYne8zVNnkZrhXFgzw9aOsdEb+wRM
rQysk8nIGlQorrU3zvkCHCa/NRy/PJeaxD1lUXwH50rmcE1n0DCkH1uya2RuRML/
H0HKhfvdYgZ5/xiNj7yok8z9cA+srU48HavRBg9ZMfNCddSGjZctSWSfxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMY6plFuaUnFHYr3ytbnKCCOvIadMB8GA1UdIwQY
MBaAFIubAWPu6eeSqqFrfVEF00chHzEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yYjgwMGUtNjk1My00MDA5LWIxOTUt
NDFiMjY2MDdiZjM2LzEvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yYjgwMGUtNjk1My00MDA5LWIxOTUtNDFiMjY2MDdiZjM2
LzEvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOU7tSJg
mE4i5tRhkMaV7L04fLH8HK2rFCgHTWHHeIMdWitYZ77he6q8ACChBr31RRbMBTN6
KdF7DTez3W5o/K6LKfXrlwz9iOhNmUERubtt9vJjYvr+xJUjIFdaOp/0yNFyF7wL
cyYZ9r0y2YZDnhnfod/a7AUgHlGgeQyvjh9W/9FzBtNP7hT6F2J4ViQZCfhMz9uo
vMCkJNulKO18oHfjw3gTE2iDNjpE6GBx4XRdM5c5MSbYe8CjW2WIsXvLZyalEZyc
WK/MWKtuh7389ISs6zORChJkkRNBI71AaGWkGkmosnS46x7sasdAmlvVmSwJlzKX
oPoAad4zFq5DXg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:53 2025 by rpki-client