Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: tIGxEp0Gk2n2RsQ1wqYK+msRLIKG17Z0XRINZVj+0Mk=
Subject key identifier: 9D:40:64:2B:B1:AC:DB:D2:6D:D0:03:B3:A4:EC:26:5F:59:1C:67:5F
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 019A5263533E8B7E8AF72EC8375A13259E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 01E5
Signing time: Wed 05 Nov 2025 05:00:32 +0000
Manifest this update: Wed 05 Nov 2025 05:00:32 +0000
Manifest next update: Thu 06 Nov 2025 05:00:32 +0000
Files and hashes: 1: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: pePlMiPQvhgIGcyhNA7GzKiTwBfOCaDAgPcauvWqfaI=)
2: jS5n1QIkV5a4mMLNQcvKPtlrQ-M.roa (hash: lelwm9WsLrqz4fINUrusZCHF/wAouDsWxQ/qaZbxy6o=)
3: kt9kY-16BQ4necIVFRgAtvjd9vU.roa (hash: 66gMsyaOtysX+kjpi4hM+Oe5TYeIKMy84VcIEuNL1pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:53:3e:8b:7e:8a:f7:2e:c8:37:5a:13:25:9e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Nov 5 05:00:32 2025 GMT
Not After : Nov 6 05:00:32 2025 GMT
Subject: CN=9d40642bb1acdbd26dd003b3a4ec265f591c675f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:d3:ec:48:33:80:67:09:4e:5d:d2:b6:e1:
ad:c6:13:4b:81:22:22:c0:41:c7:b6:22:88:11:57:
df:f7:0e:92:ea:4f:43:4b:1b:a4:be:09:04:23:51:
a9:ce:24:54:d6:fd:35:64:b1:e8:20:a2:b1:f3:d8:
d8:b3:10:0f:40:9c:a5:5a:1c:6b:fa:a9:e1:65:9b:
ea:a0:e7:d0:8b:6f:df:20:c8:4c:2e:a5:f5:59:af:
af:08:76:d9:03:d7:0d:af:17:6a:22:04:b6:d1:36:
ca:5d:31:d6:e8:af:8d:57:ae:24:9f:a4:e0:ad:da:
b7:18:eb:8f:c0:ba:af:e7:08:86:03:96:c1:51:a4:
a9:85:3c:e6:0f:9d:1e:93:fe:18:8a:dd:b4:5a:fc:
09:9a:3f:1a:0a:38:e2:d3:60:ea:e2:7b:a0:b5:b3:
16:d4:25:7d:9b:aa:d9:4a:55:c7:d7:54:c0:8b:50:
4c:c5:01:fe:28:72:3d:91:1e:66:0a:ae:93:cf:8c:
1a:dd:3d:59:26:73:f3:db:7b:2f:e3:58:04:19:bf:
64:1c:bf:5c:49:be:d2:52:60:aa:32:46:d0:69:40:
68:2a:7c:39:6a:be:4a:f9:f5:22:78:ed:d1:cf:a0:
b3:70:81:67:2d:3c:db:80:6c:8a:2c:61:64:cc:51:
0c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:40:64:2B:B1:AC:DB:D2:6D:D0:03:B3:A4:EC:26:5F:59:1C:67:5F
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a2:7d:79:9a:2d:c8:87:4c:37:97:2c:02:6b:30:c2:6f:98:
12:e3:b2:ac:b1:a4:9f:90:27:2b:65:49:2a:56:3d:11:cf:41:
1f:1d:43:b5:30:0a:b3:2b:c5:33:39:c1:85:72:54:09:43:c8:
c5:56:c6:82:54:da:ba:d6:a8:ea:e4:2c:7c:69:4e:91:08:ce:
f7:85:70:2d:29:c6:bc:85:72:25:d3:de:0a:75:e0:f7:1e:4d:
ff:05:ab:43:df:6f:c0:b6:26:b7:b6:59:e0:63:ca:f5:50:7c:
17:5e:a3:49:ec:63:d4:6a:79:a7:30:3d:9c:d0:ac:f3:3f:f5:
f3:c0:26:b4:35:13:39:c6:0a:1d:d5:96:9e:c7:c9:11:83:14:
23:76:b2:8d:c9:1d:b0:7c:34:37:a7:ad:81:28:0e:65:5f:44:
c0:8b:fe:b3:05:4b:05:47:9f:09:5e:84:d7:f8:62:c5:d2:54:
70:78:bf:0b:86:b7:23:79:7c:b4:fa:95:42:cb:13:64:e7:33:
64:29:83:59:9f:06:7d:ec:90:d7:7b:60:b0:96:c3:8c:76:41:
c5:74:37:e8:40:6c:88:cc:3d:7e:ee:a9:9b:37:de:14:0f:42:
34:78:68:a7:d8:23:62:57:32:4d:cf:2d:df:55:6b:90:76:16:
0b:aa:0c:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSY1M+i36K9y7IN1oTJZ5CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZGQwNWViN2JkOTQ1YzY1ZGYxODczNTUyZGNjOTBjYjJl
MTc3MjMwHhcNMjUxMTA1MDUwMDMyWhcNMjUxMTA2MDUwMDMyWjAzMTEwLwYDVQQD
Eyg5ZDQwNjQyYmIxYWNkYmQyNmRkMDAzYjNhNGVjMjY1ZjU5MWM2NzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtjT7EgzgGcJTl3StuGtxhNLgSIi
wEHHtiKIEVff9w6S6k9DSxukvgkEI1GpziRU1v01ZLHoIKKx89jYsxAPQJylWhxr
+qnhZZvqoOfQi2/fIMhMLqX1Wa+vCHbZA9cNrxdqIgS20TbKXTHW6K+NV64kn6Tg
rdq3GOuPwLqv5wiGA5bBUaSphTzmD50ek/4Yit20WvwJmj8aCjji02Dq4nugtbMW
1CV9m6rZSlXH11TAi1BMxQH+KHI9kR5mCq6Tz4wa3T1ZJnPz23sv41gEGb9kHL9c
Sb7SUmCqMkbQaUBoKnw5ar5K+fUieO3Rz6CzcIFnLTzbgGyKLGFkzFEM1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1AZCuxrNvSbdADs6TsJl9ZHGdfMB8GA1UdIwQY
MBaAFCPdBet72UXGXfGHNVLcyQyy4XcjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTkwRjYzdlpSY1pkOFljMVV0ekpETExoZHlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iODdlNTAtMzUxMC00MjBlLThiZjUt
YzRhM2EwYTVhOWIxLzEvSTkwRjYzdlpSY1pkOFljMVV0ekpETExoZHlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iODdlNTAtMzUxMC00MjBlLThiZjUtYzRhM2EwYTVhOWIx
LzEvSTkwRjYzdlpSY1pkOFljMVV0ekpETExoZHlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKJ9eZot
yIdMN5csAmswwm+YEuOyrLGkn5AnK2VJKlY9Ec9BHx1DtTAKsyvFMznBhXJUCUPI
xVbGglTautao6uQsfGlOkQjO94VwLSnGvIVyJdPeCnXg9x5N/wWrQ99vwLYmt7ZZ
4GPK9VB8F16jSexj1Gp5pzA9nNCs8z/188AmtDUTOcYKHdWWnsfJEYMUI3ayjckd
sHw0N6etgSgOZV9EwIv+swVLBUefCV6E1/hixdJUcHi/C4a3I3l8tPqVQssTZOcz
ZCmDWZ8GfeyQ13tgsJbDjHZBxXQ36EBsiMw9fu6pmzfeFA9CNHhop9gjYlcyTc8t
31VrkHYWC6oM5g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:45:55 2025 by rpki-client