Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: Cb4VpmZhXOYq4eo/Kr1u549o0o0PHlWovIAA0p65GUs=
Subject key identifier: C2:1B:70:13:4F:E8:84:E9:D1:50:7B:07:EA:AF:91:21:12:27:06:46
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 019A503E567DF0CB7982D9A211E42235F354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:53 +0000
Manifest this update: Tue 04 Nov 2025 19:00:53 +0000
Manifest next update: Wed 05 Nov 2025 19:00:53 +0000
Files and hashes: 1: CXV5h4NnxextID8ps-zs1B6iIxg.roa (hash: H0fWCwenw+LaQh1zQTvHX9xYl9ZHHPd/qzueTxfRIcY=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: 06wbQmmE2mD6JgNOWwFZYLg6fE62n7PRkHc7q22G+Uw=)
3: uXuzZdEmcXhnurqd_jWF8YOUHrw.roa (hash: 0tKKSAqCxTZYYBM2R7eXZ3g3GCiHz3+8Vn0Oldh70rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:56:7d:f0:cb:79:82:d9:a2:11:e4:22:35:f3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Nov 4 19:00:53 2025 GMT
Not After : Nov 5 19:00:53 2025 GMT
Subject: CN=c21b70134fe884e9d1507b07eaaf912112270646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:8a:04:e0:40:0e:a3:6f:65:ef:99:f2:39:
f3:27:c6:68:04:48:a4:de:b7:6c:5f:ad:51:07:60:
89:ac:5d:1b:bb:38:81:e0:e3:87:e7:58:56:44:8c:
b6:c9:f3:b8:72:e6:87:7e:a0:ff:4e:14:5c:33:f5:
e1:ff:bd:13:ae:ee:f5:ad:5a:d9:39:39:4b:d4:d8:
71:a3:ac:24:ec:a3:18:98:5a:5f:b9:84:f3:5d:89:
a6:0c:f8:e3:32:4c:b0:4b:a1:8b:58:78:31:39:a8:
34:1a:28:20:52:b8:82:0a:f4:ed:8d:dd:36:18:c9:
4f:03:2d:c3:5f:54:be:dc:71:fc:fe:2f:72:1a:d5:
da:12:94:d8:db:ff:00:00:65:56:89:0b:d6:ba:39:
2f:46:f3:71:e1:52:70:b8:11:bb:53:eb:70:33:0f:
56:f2:dd:38:4a:64:de:b5:c8:28:36:18:dc:52:4c:
d1:12:49:6f:9f:b3:8b:b7:56:05:98:cc:7d:e6:62:
93:f0:cc:71:69:c6:a3:81:11:08:20:9f:09:98:93:
ab:be:60:1c:5d:93:82:af:e0:69:ab:f7:2a:02:cb:
88:60:7c:6c:ce:00:0f:c6:5f:8a:a8:f6:aa:ba:3f:
cb:bb:07:ec:89:4f:30:ec:ad:7c:d1:98:cc:f2:74:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1B:70:13:4F:E8:84:E9:D1:50:7B:07:EA:AF:91:21:12:27:06:46
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2a:f0:3f:13:9e:99:c1:2b:7b:fd:b3:a3:24:73:0d:6f:16:
30:ce:97:42:7b:68:33:10:2f:29:14:af:3a:d8:31:08:15:33:
70:a0:a7:4c:07:9e:9d:36:31:04:d8:f4:5c:43:fd:fb:ab:c3:
ff:4e:b2:10:88:c4:49:6c:60:61:8b:4f:80:dd:48:74:a7:a7:
70:c0:d9:63:86:a7:26:65:53:34:df:55:a5:93:b2:67:f7:40:
54:ec:5d:7a:10:f5:af:16:9c:85:34:3b:c0:c4:ba:11:51:62:
75:f4:ae:ba:d6:0b:f6:cf:d2:5d:e6:2c:df:a7:58:e0:0e:07:
1a:b7:b3:6a:70:47:5b:40:ab:02:5a:cb:bc:3e:f6:eb:a6:40:
75:d9:3a:c6:40:2f:c6:ee:0d:3c:8a:3a:a7:a6:26:84:89:10:
db:62:a1:02:17:0e:8f:32:50:de:1d:f3:1d:35:0f:92:b0:81:
74:30:44:96:20:60:fa:13:1a:c9:4a:be:f9:46:3d:b0:5f:95:
84:48:f5:2f:68:6c:d8:53:c3:31:bc:99:ea:62:a2:4e:a1:d7:
99:9e:a0:20:c6:31:0e:de:f0:64:26:d7:67:81:e3:46:ea:05:
6a:1a:7c:b8:0e:0c:10:d5:1b:ea:e6:e0:59:c3:8b:e1:c1:8f:
78:25:24:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPlZ98Mt5gtmiEeQiNfNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGVhMmQ0YWIxMzgwZjBhM2I3ZmU3ZDRmYTc4MjhlMWM5
NDM1NTgwHhcNMjUxMTA0MTkwMDUzWhcNMjUxMTA1MTkwMDUzWjAzMTEwLwYDVQQD
EyhjMjFiNzAxMzRmZTg4NGU5ZDE1MDdiMDdlYWFmOTEyMTEyMjcwNjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobmKBOBADqNvZe+Z8jnzJ8ZoBEik
3rdsX61RB2CJrF0buziB4OOH51hWRIy2yfO4cuaHfqD/ThRcM/Xh/70Tru71rVrZ
OTlL1Nhxo6wk7KMYmFpfuYTzXYmmDPjjMkywS6GLWHgxOag0GiggUriCCvTtjd02
GMlPAy3DX1S+3HH8/i9yGtXaEpTY2/8AAGVWiQvWujkvRvNx4VJwuBG7U+twMw9W
8t04SmTetcgoNhjcUkzREklvn7OLt1YFmMx95mKT8MxxacajgREIIJ8JmJOrvmAc
XZOCr+Bpq/cqAsuIYHxszgAPxl+KqPaquj/LuwfsiU8w7K180ZjM8nQnQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIbcBNP6ITp0VB7B+qvkSESJwZGMB8GA1UdIwQY
MBaAFIveotSrE4Dwo7f+fU+ngo4clDVYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNjdkOTAtZDMwNC00ODFiLThhNjQt
MWUzMjZkZWJhNGQwLzEvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jNjdkOTAtZDMwNC00ODFiLThhNjQtMWUzMjZkZWJhNGQw
LzEvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyrwPxOe
mcEre/2zoyRzDW8WMM6XQntoMxAvKRSvOtgxCBUzcKCnTAeenTYxBNj0XEP9+6vD
/06yEIjESWxgYYtPgN1IdKencMDZY4anJmVTNN9VpZOyZ/dAVOxdehD1rxachTQ7
wMS6EVFidfSuutYL9s/SXeYs36dY4A4HGrezanBHW0CrAlrLvD7266ZAddk6xkAv
xu4NPIo6p6YmhIkQ22KhAhcOjzJQ3h3zHTUPkrCBdDBEliBg+hMayUq++UY9sF+V
hEj1L2hs2FPDMbyZ6mKiTqHXmZ6gIMYxDt7wZCbXZ4HjRuoFahp8uA4MENUb6ubg
WcOL4cGPeCUkfQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:12 2025 by rpki-client