Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: M46UTX+LyS7Ahl8WjKanfSyA8QRRcgK07pHktL6hJPo=
Subject key identifier: D9:98:97:B9:39:70:54:ED:35:16:FB:CC:CF:BE:D6:C3:C7:D7:CB:EC
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 019A725CE49F08BCD696A4BAA9BBCFC9D6AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 06F1
Signing time: Tue 11 Nov 2025 10:01:21 +0000
Manifest this update: Tue 11 Nov 2025 10:01:21 +0000
Manifest next update: Wed 12 Nov 2025 10:01:21 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: Rhvueo6zgY2rgz5UV/LhfC679SkgQcOyiOup9v5aKDs=)
2: MgObQ10wwnTwMpDOp8O8ZUg1GzY.roa (hash: zFtBDJVKy0069qgd24TCedcTigM24qIyeHl/OMqiw7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e4:9f:08:bc:d6:96:a4:ba:a9:bb:cf:c9:d6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Nov 11 10:01:21 2025 GMT
Not After : Nov 12 10:01:21 2025 GMT
Subject: CN=d99897b9397054ed3516fbcccfbed6c3c7d7cbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:1a:4f:3d:58:7c:17:b8:36:09:d8:33:96:
0a:89:d3:22:f8:48:f9:0b:9e:44:c4:9b:10:4a:94:
b6:fe:8b:62:34:a8:93:c6:64:1d:a6:f2:e2:85:e6:
2a:85:71:81:6a:e2:e0:08:d4:69:18:81:2b:2c:96:
c3:c2:20:7b:87:1d:39:c5:04:0c:3f:bd:34:66:6c:
51:8e:92:9f:25:d0:4c:2b:41:22:df:51:5b:32:f5:
15:6c:e6:72:73:32:8b:47:cc:30:5f:f0:95:e3:86:
48:01:82:70:c9:e7:e0:6b:70:e9:df:56:4b:4c:ce:
23:b3:ad:a6:4a:af:c3:04:71:49:34:06:7f:1d:c5:
6f:54:b6:5d:88:74:6e:a9:ac:77:cd:af:9b:c2:80:
1b:07:69:c4:53:e4:63:c8:4c:f7:5b:8c:3d:22:9f:
93:b3:bc:3d:f4:cb:a7:4e:70:2f:ff:a3:67:83:a4:
37:5b:54:e5:cd:3f:61:cf:3a:83:67:8e:d2:12:1e:
e0:32:97:f0:2b:48:49:e5:36:5f:f5:c9:1b:fd:f1:
ba:fe:3b:2b:34:27:b4:e4:6f:1f:c9:19:6d:f4:ff:
82:ed:b8:0d:6e:65:e5:28:14:4e:eb:26:d6:6f:5c:
3e:34:ef:56:8e:83:b6:b4:b1:49:39:2f:31:88:fc:
2d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:98:97:B9:39:70:54:ED:35:16:FB:CC:CF:BE:D6:C3:C7:D7:CB:EC
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:98:ec:a5:ac:2d:81:50:0d:04:1d:f6:c5:37:0e:f8:5e:9c:
2a:04:a3:5a:6c:c7:b3:3c:bd:dc:52:78:b5:14:17:35:fe:ea:
65:83:0c:a4:e2:50:40:fa:2e:6b:df:d2:6d:92:2e:a9:3d:6e:
97:63:48:b6:66:4f:cc:72:f4:11:a7:b8:4a:fc:fd:02:b0:ad:
c0:e6:a3:4a:ee:a5:0a:c7:b5:c3:ed:28:0d:2a:4a:e8:84:40:
1a:58:b8:a4:bc:a0:26:37:75:87:ba:bf:a4:ea:08:19:5d:80:
6a:22:83:8e:89:61:d2:c5:aa:f0:29:12:99:88:92:61:af:5e:
ae:ab:21:ce:4a:2e:9b:66:89:b6:07:a6:58:a7:59:b0:bd:64:
c1:7f:38:9a:e0:be:08:77:fa:e5:d4:f7:17:8b:d0:ea:77:c3:
09:04:98:6d:51:3d:8f:34:60:d1:5f:11:b2:6e:92:78:0d:1e:
61:bd:e0:ee:9a:73:62:d8:29:54:32:55:62:ed:7c:ff:74:29:
61:eb:41:ed:fd:e2:2e:60:b6:01:2e:6f:ef:b2:e5:50:1e:68:
a1:fa:ce:d1:f6:57:df:eb:b5:b7:ae:34:ca:86:80:d5:86:c5:
95:a6:2a:08:5c:b9:bb:4b:28:23:34:11:b7:3a:d2:0d:43:4c:
08:03:2d:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXOSfCLzWlqS6qbvPydasMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMzI5Y2IzYWJlNGU5NDBjZmM2MmEyMGUyYTZlMmMyOGZj
MjgzMjkwHhcNMjUxMTExMTAwMTIxWhcNMjUxMTEyMTAwMTIxWjAzMTEwLwYDVQQD
EyhkOTk4OTdiOTM5NzA1NGVkMzUxNmZiY2NjZmJlZDZjM2M3ZDdjYmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6UaTz1YfBe4NgnYM5YKidMi+Ej5
C55ExJsQSpS2/otiNKiTxmQdpvLiheYqhXGBauLgCNRpGIErLJbDwiB7hx05xQQM
P700ZmxRjpKfJdBMK0Ei31FbMvUVbOZyczKLR8wwX/CV44ZIAYJwyefga3Dp31ZL
TM4js62mSq/DBHFJNAZ/HcVvVLZdiHRuqax3za+bwoAbB2nEU+RjyEz3W4w9Ip+T
s7w99MunTnAv/6Nng6Q3W1TlzT9hzzqDZ47SEh7gMpfwK0hJ5TZf9ckb/fG6/jsr
NCe05G8fyRlt9P+C7bgNbmXlKBRO6ybWb1w+NO9WjoO2tLFJOS8xiPwt9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmYl7k5cFTtNRb7zM++1sPH18vsMB8GA1UdIwQY
MBaAFCMynLOr5OlAz8YqIOKm4sKPwoMpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTIt
NTE4ZjJjOGY4NDZiLzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTItNTE4ZjJjOGY4NDZi
LzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5jspawt
gVANBB32xTcO+F6cKgSjWmzHszy93FJ4tRQXNf7qZYMMpOJQQPoua9/SbZIuqT1u
l2NItmZPzHL0Eae4Svz9ArCtwOajSu6lCse1w+0oDSpK6IRAGli4pLygJjd1h7q/
pOoIGV2AaiKDjolh0sWq8CkSmYiSYa9erqshzkoum2aJtgemWKdZsL1kwX84muC+
CHf65dT3F4vQ6nfDCQSYbVE9jzRg0V8Rsm6SeA0eYb3g7ppzYtgpVDJVYu18/3Qp
YetB7f3iLmC2AS5v77LlUB5oofrO0fZX3+u1t640yoaA1YbFlaYqCFy5u0soIzQR
tzrSDUNMCAMtYg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:13 2025 by rpki-client