Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
File: I0AYtVE7d50uHjrBqGpZO92XTKc.mft (raw, json)
Hash identifier: CCg85/brNKBcaNuiAd5/tamYM6hCe4OXofXXBtk2wDw=
Subject key identifier: D9:B5:E1:F5:30:33:B9:5B:B2:6E:E9:C6:68:A1:AD:B4:A4:7B:93:07
Authority key identifier: 23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
Certificate issuer: /CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Certificate serial: 019A7225B641A36DD5C6383C23FB4A837F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
Manifest number: 0300
Signing time: Tue 11 Nov 2025 09:01:05 +0000
Manifest this update: Tue 11 Nov 2025 09:01:05 +0000
Manifest next update: Wed 12 Nov 2025 09:01:05 +0000
Files and hashes: 1: I0AYtVE7d50uHjrBqGpZO92XTKc.crl (hash: MoY/SvLayhj8WfOdhaEuvXDVsoeNUTpnJUm1PrJU4TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b6:41:a3:6d:d5:c6:38:3c:23:fb:4a:83:7f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Validity
Not Before: Nov 11 09:01:05 2025 GMT
Not After : Nov 12 09:01:05 2025 GMT
Subject: CN=d9b5e1f53033b95bb26ee9c668a1adb4a47b9307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5b:65:81:75:21:51:c9:c6:cc:8e:b0:61:cc:
f3:3d:d5:67:69:70:67:e3:b6:8c:8b:83:e0:df:4e:
49:f8:82:88:ac:cf:f5:c3:33:fe:96:e5:bf:c0:69:
10:71:ec:1c:78:ca:44:e9:60:de:ff:a9:4d:0a:95:
63:02:6f:e5:fa:ea:22:f4:b6:96:4f:10:9d:9c:1b:
7a:a0:bd:80:71:1a:e5:43:02:d7:0c:32:df:15:ef:
73:b2:c6:f4:ca:ff:1a:af:7b:7b:ad:ef:9c:b6:e0:
52:8d:26:74:ce:e4:e3:b9:41:78:ea:ff:c0:a3:9f:
4e:cd:5e:f7:40:46:8c:56:59:ce:de:9d:9b:a6:76:
97:a7:c8:70:33:c2:9a:6f:ea:32:bd:47:d4:e8:42:
e9:70:9c:30:3b:0d:00:80:31:25:78:c7:ee:fe:0b:
8c:c8:58:5b:9d:ef:7d:6a:5f:5b:fe:20:31:94:81:
05:e9:7f:13:4d:fe:18:59:ac:01:d3:45:22:03:92:
6e:bb:72:76:b9:9f:3e:c4:11:45:31:0d:cf:ce:4b:
0b:55:9b:1e:c5:88:34:42:38:c6:3f:e2:57:8d:01:
44:19:cf:5b:ad:29:f1:17:98:0d:85:13:f2:83:50:
80:3d:8d:85:1b:9a:f6:a7:54:d5:af:e1:2e:57:a2:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B5:E1:F5:30:33:B9:5B:B2:6E:E9:C6:68:A1:AD:B4:A4:7B:93:07
X509v3 Authority Key Identifier:
keyid:23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b9:a1:b7:95:66:4a:30:df:01:e4:4d:1d:3c:97:30:f1:6b:
16:a2:8b:2d:1a:a8:c1:dc:89:9f:f3:c0:99:a7:c4:4a:7e:a5:
8d:4e:6d:93:8e:a8:30:f8:d9:94:68:2b:4b:ab:a8:70:21:fc:
05:c3:be:bd:2e:83:82:1c:c1:db:5e:ea:ae:14:5c:3a:9b:b0:
85:2b:5a:fa:4c:88:c6:71:8c:79:4b:51:ef:a5:06:66:38:5a:
1c:4b:0f:e8:f0:ca:f4:11:4a:33:39:7f:e1:1b:54:6e:96:72:
89:22:b8:8d:e2:f9:13:f8:d2:cd:74:22:7c:af:32:31:47:6a:
ab:6e:aa:d6:e9:0f:17:d6:c2:0e:10:d1:9e:31:b0:a5:23:c6:
a2:5b:1f:9f:d8:11:7c:bb:b2:ed:78:bd:22:ed:e9:6f:69:55:
92:6c:97:6d:bc:39:fa:17:ee:c2:37:e5:b5:b6:6c:5f:5e:ab:
7c:77:7a:3c:5a:73:da:93:5b:f5:8a:b3:58:57:33:4c:c3:07:
15:ed:df:0f:05:d3:c5:d2:d0:8d:92:10:79:35:da:50:79:81:
77:a9:f7:48:a7:c0:9c:ee:61:b9:78:c2:6c:97:5f:8f:e3:71:
75:46:29:c6:7c:a0:f8:aa:b3:33:c4:26:fa:8e:ea:54:05:bf:
0c:ce:e7:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJbZBo23Vxjg8I/tKg38GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNDAxOGI1NTEzYjc3OWQyZTFlM2FjMWE4NmE1OTNiZGQ5
NzRjYTcwHhcNMjUxMTExMDkwMTA1WhcNMjUxMTEyMDkwMTA1WjAzMTEwLwYDVQQD
EyhkOWI1ZTFmNTMwMzNiOTViYjI2ZWU5YzY2OGExYWRiNGE0N2I5MzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ltlgXUhUcnGzI6wYczzPdVnaXBn
47aMi4Pg305J+IKIrM/1wzP+luW/wGkQcewceMpE6WDe/6lNCpVjAm/l+uoi9LaW
TxCdnBt6oL2AcRrlQwLXDDLfFe9zssb0yv8ar3t7re+ctuBSjSZ0zuTjuUF46v/A
o59OzV73QEaMVlnO3p2bpnaXp8hwM8Kab+oyvUfU6ELpcJwwOw0AgDEleMfu/guM
yFhbne99al9b/iAxlIEF6X8TTf4YWawB00UiA5Juu3J2uZ8+xBFFMQ3PzksLVZse
xYg0QjjGP+JXjQFEGc9brSnxF5gNhRPyg1CAPY2FG5r2p1TVr+EuV6IU9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNm14fUwM7lbsm7pxmihrbSke5MHMB8GA1UdIwQY
MBaAFCNAGLVRO3edLh46wahqWTvdl0ynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTBBWXRWRTdkNTB1SGpyQnFHcFpPOTJYVEtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9iMTgwODAtZTNjOS00MTE0LWExNzQt
YzNkNmM3YzhiYThhLzEvSTBBWXRWRTdkNTB1SGpyQnFHcFpPOTJYVEtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9iMTgwODAtZTNjOS00MTE0LWExNzQtYzNkNmM3YzhiYThh
LzEvSTBBWXRWRTdkNTB1SGpyQnFHcFpPOTJYVEtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLmht5Vm
SjDfAeRNHTyXMPFrFqKLLRqowdyJn/PAmafESn6ljU5tk46oMPjZlGgrS6uocCH8
BcO+vS6DghzB217qrhRcOpuwhSta+kyIxnGMeUtR76UGZjhaHEsP6PDK9BFKMzl/
4RtUbpZyiSK4jeL5E/jSzXQifK8yMUdqq26q1ukPF9bCDhDRnjGwpSPGolsfn9gR
fLuy7Xi9Iu3pb2lVkmyXbbw5+hfuwjfltbZsX16rfHd6PFpz2pNb9YqzWFczTMMH
Fe3fDwXTxdLQjZIQeTXaUHmBd6n3SKfAnO5huXjCbJdfj+NxdUYpxnyg+KqzM8Qm
+o7qVAW/DM7niQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:21 2025 by rpki-client