Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File: i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier: JSqCrJmaKzyw+GaSKYpseaPkt4zy1tkkgumyppA4FW0=
Subject key identifier: 9A:D8:B4:9C:2D:08:BA:DB:F7:51:F9:AE:6B:C0:BD:9F:EC:59:56:25
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer: /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial: 019A714A22ACE6642EDF8C27C76565425C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number: 05E2
Signing time: Tue 11 Nov 2025 05:01:15 +0000
Manifest this update: Tue 11 Nov 2025 05:01:15 +0000
Manifest next update: Wed 12 Nov 2025 05:01:15 +0000
Files and hashes: 1: L3ocwI9skWdmpza9Qr_soDnI5iA.roa (hash: 9lUp3ywFYQ08BYq4aJkqYCgUsr8TmtCB3L7KRcDWSOM=)
2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: fmuCR0eMnuT+Avv8ogaI/6BNNwAa1K03Co1+8GlzZG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:22:ac:e6:64:2e:df:8c:27:c7:65:65:42:5c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Validity
Not Before: Nov 11 05:01:15 2025 GMT
Not After : Nov 12 05:01:15 2025 GMT
Subject: CN=9ad8b49c2d08badbf751f9ae6bc0bd9fec595625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:4f:8c:47:c2:9b:74:af:74:7b:fd:59:ad:
d9:2a:38:41:69:99:0d:fb:1b:d6:dd:24:aa:e1:fa:
d7:2a:43:c8:ee:fa:aa:0f:1d:26:c5:d1:de:d1:81:
5d:98:a5:49:eb:ab:50:da:dc:5c:29:14:af:4c:6c:
c3:40:fd:ad:d9:37:3a:c6:cb:70:09:f0:d6:d3:f8:
27:87:00:ef:bf:c8:b2:89:a6:69:5b:c9:98:35:3e:
14:97:e2:c6:a7:93:73:ea:e0:7e:7f:ee:1b:28:df:
13:15:20:46:05:41:48:c9:b6:8c:bb:4b:42:f6:07:
3b:dd:e4:58:82:91:8b:8f:b6:a8:39:21:95:bf:23:
fc:29:02:28:9e:6a:4f:a9:ae:ab:5b:42:a1:7e:6d:
6e:62:bd:f8:22:ff:ee:a4:f9:14:6c:c8:a6:f2:af:
4b:50:a7:71:cc:f9:e7:6f:e2:0b:9e:4c:10:8f:fe:
6b:b0:c4:26:39:2b:92:aa:77:bd:ab:4e:36:1c:ea:
de:f3:ad:c8:0e:0c:59:c2:8b:46:83:33:c0:de:45:
e7:94:04:43:d1:df:87:f2:4d:1b:aa:6e:8c:17:19:
b0:36:41:e2:40:1b:e6:ad:bf:5a:f6:ec:a3:9e:a3:
fb:54:7e:b9:90:03:8d:c1:37:6e:6e:1c:52:69:55:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D8:B4:9C:2D:08:BA:DB:F7:51:F9:AE:6B:C0:BD:9F:EC:59:56:25
X509v3 Authority Key Identifier:
keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d6:3a:b1:b1:dc:a7:88:f7:da:ed:7f:7f:8d:11:b5:a3:b5:
11:b9:10:b2:39:a9:35:1e:02:21:fd:a9:95:f2:25:9b:03:ef:
4d:a9:8c:cd:81:f6:01:0c:85:9d:1d:be:74:7e:47:c0:50:1b:
1a:15:ca:78:83:3f:c6:54:19:0f:4c:4b:30:74:dc:43:57:54:
fd:90:1c:c5:fb:29:1e:f6:75:de:1c:5d:14:ff:cb:28:0e:70:
41:8d:1f:e6:32:d4:14:3e:a1:19:e3:dd:41:1c:46:66:20:3e:
0b:3a:74:77:e6:9a:4b:2d:f1:4b:94:76:ef:e9:91:9d:2b:db:
a0:19:79:2c:1a:76:43:6f:f1:c5:8f:78:f1:f9:f9:b9:b4:ee:
b9:0a:33:89:cd:bc:71:86:3c:82:7f:82:d3:00:8f:ed:29:64:
07:7c:00:98:63:64:cf:f8:a5:8b:78:8a:c7:64:6b:fd:49:37:
47:d0:2c:a6:38:39:3a:ab:86:fa:ec:39:c4:45:db:9f:11:4e:
6e:07:03:2f:51:07:a9:48:7f:40:df:ec:84:47:73:00:22:5b:
8b:d8:5b:64:9f:20:a7:9a:65:bc:f3:85:c0:fc:93:6e:62:a7:
9b:b2:3f:05:d1:06:69:06:0f:32:67:d4:c5:37:ef:19:21:0a:
f5:12:23:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSiKs5mQu34wnx2VlQlwDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNzNmODM3MzVjOGFiMTBhMGE4ZDQ0ZTE3MDEyOGYwMjM4
NDZlNzkwHhcNMjUxMTExMDUwMTE1WhcNMjUxMTEyMDUwMTE1WjAzMTEwLwYDVQQD
Eyg5YWQ4YjQ5YzJkMDhiYWRiZjc1MWY5YWU2YmMwYmQ5ZmVjNTk1NjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0BPjEfCm3SvdHv9Wa3ZKjhBaZkN
+xvW3SSq4frXKkPI7vqqDx0mxdHe0YFdmKVJ66tQ2txcKRSvTGzDQP2t2Tc6xstw
CfDW0/gnhwDvv8iyiaZpW8mYNT4Ul+LGp5Nz6uB+f+4bKN8TFSBGBUFIybaMu0tC
9gc73eRYgpGLj7aoOSGVvyP8KQIonmpPqa6rW0Khfm1uYr34Iv/upPkUbMim8q9L
UKdxzPnnb+ILnkwQj/5rsMQmOSuSqne9q042HOre863IDgxZwotGgzPA3kXnlARD
0d+H8k0bqm6MFxmwNkHiQBvmrb9a9uyjnqP7VH65kAONwTdubhxSaVWCVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrYtJwtCLrb91H5rmvAvZ/sWVYlMB8GA1UdIwQY
MBaAFItz+Dc1yKsQoKjUThcBKPAjhG55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNzZhOTUtZjdhZS00NGI5LTlkOGQt
NjVkZDdmNTJlNDZjLzEvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNzZhOTUtZjdhZS00NGI5LTlkOGQtNjVkZDdmNTJlNDZj
LzEvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdY6sbHc
p4j32u1/f40RtaO1EbkQsjmpNR4CIf2plfIlmwPvTamMzYH2AQyFnR2+dH5HwFAb
GhXKeIM/xlQZD0xLMHTcQ1dU/ZAcxfspHvZ13hxdFP/LKA5wQY0f5jLUFD6hGePd
QRxGZiA+Czp0d+aaSy3xS5R27+mRnSvboBl5LBp2Q2/xxY948fn5ubTuuQozic28
cYY8gn+C0wCP7SlkB3wAmGNkz/ili3iKx2Rr/Uk3R9Aspjg5OquG+uw5xEXbnxFO
bgcDL1EHqUh/QN/shEdzACJbi9hbZJ8gp5plvPOFwPyTbmKnm7I/BdEGaQYPMmfU
xTfvGSEK9RIj6w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:28 2025 by rpki-client