Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
File: i3-BpueC4hEYnE805Fm0Imx19KY.mft (raw, json)
Hash identifier: oI1mgruOkiS3GVd7p4lGNSV4Hz6HFBavh+kKaAnPVkM=
Subject key identifier: 41:39:C7:2F:E8:07:F3:07:66:CC:C5:A9:1E:02:CF:74:93:9E:FC:22
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial: 019A4B18E73437FC7468DF56C23DA6203648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
Manifest number: 1710
Signing time: Mon 03 Nov 2025 19:01:54 +0000
Manifest this update: Mon 03 Nov 2025 19:01:54 +0000
Manifest next update: Tue 04 Nov 2025 19:01:54 +0000
Files and hashes: 1: CPJvfKG9AEorpsEiz1e05zSo0sY.roa (hash: NjB+IttX3MugwGYS/PHLAC82z3nIjH+wrKBqWV/iJTI=)
2: I_z7vCGW6xyHTeNvbDKPhdARG-M.roa (hash: 8r7UrdzqYCx67NNR1NUCqQusmj+6qkdlQ4GFbuJ8L+s=)
3: P2LC5eQJryM958-FLkXKkEDZeLw.roa (hash: QpIfoLa+fmj9YdQlV+XdklTrRRwRDMjjOVtTi9BX00s=)
4: i3-BpueC4hEYnE805Fm0Imx19KY.crl (hash: HnCJ5ik67chqbL4cBHdNC/Hd5QGS4Cz8C/a725ePv2o=)
5: uvd1cKCOmqZYi8L4xtWD1skpDvw.roa (hash: +e/+widvxtIhard+pWDd7C4vDgFDP2T3458Wltd2Nbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 19:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:18:e7:34:37:fc:74:68:df:56:c2:3d:a6:20:36:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Validity
Not Before: Nov 3 19:01:54 2025 GMT
Not After : Nov 4 19:01:54 2025 GMT
Subject: CN=4139c72fe807f30766ccc5a91e02cf74939efc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:60:07:3c:e6:d1:71:23:aa:e1:b8:27:f1:
aa:e4:28:2c:3c:7a:55:05:4b:b3:04:3f:26:dc:dd:
ce:82:d0:78:70:38:5f:67:8c:28:ca:43:87:9e:7c:
69:8b:0a:88:87:41:07:30:ad:18:29:1c:c5:b0:1f:
ad:d8:4a:ba:16:37:d2:10:4f:35:5a:a1:f9:12:3d:
7e:52:5b:b1:2b:bb:30:9e:86:d7:42:0f:4a:e7:8f:
34:42:b7:d4:cf:b9:72:6b:76:8e:08:7d:57:c2:13:
37:b2:26:52:dc:19:08:53:b7:02:2d:cb:0d:11:7d:
d3:e2:43:5e:cd:78:2c:9e:7e:d1:aa:43:d0:04:de:
ae:ea:ca:4f:44:dc:50:00:e3:7f:76:fb:2b:15:f4:
67:1b:2a:28:37:1f:09:7d:70:6c:e2:58:5e:cf:6e:
64:a7:27:49:37:b1:7d:1c:59:35:e4:0a:38:19:de:
12:7c:6f:17:27:18:0f:9f:3e:9a:2a:88:ae:4b:a6:
ec:4a:e5:61:7a:07:3e:71:47:65:e2:97:65:04:ba:
9c:43:13:dc:09:0b:d2:5b:87:e6:30:cc:b4:b9:c9:
9c:46:cc:bd:0b:b0:ea:b6:0a:e2:6d:af:1c:24:b0:
cb:e8:18:af:3d:77:fc:8f:ac:f1:47:08:bc:4f:1a:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:39:C7:2F:E8:07:F3:07:66:CC:C5:A9:1E:02:CF:74:93:9E:FC:22
X509v3 Authority Key Identifier:
keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2c:0b:0c:0e:6c:c7:2a:70:31:57:39:4d:ec:7a:ab:45:9f:
77:c7:aa:d0:bc:f1:3b:b5:4b:b6:f2:18:ad:0c:74:e7:b4:56:
c2:a2:c0:1b:25:28:aa:3d:8d:84:8e:30:71:2a:22:65:09:40:
ba:04:51:17:04:73:ec:a0:9f:70:c1:aa:9e:28:72:43:fb:ab:
88:b7:2f:d5:a9:fa:27:80:68:7c:75:ed:00:41:40:38:ed:12:
c7:c3:2c:48:44:b5:3d:ec:9a:34:12:db:9d:fe:cf:c7:bf:53:
fe:7a:ca:ac:2b:7d:ef:fb:a8:c0:3e:58:a5:cd:05:9a:82:08:
66:af:19:6e:9d:04:ff:90:7e:e8:00:be:f9:6b:c0:ec:72:09:
7f:a4:27:8b:82:5a:71:72:96:5d:4f:c0:fc:cf:a8:c3:a4:b7:
50:70:13:9b:eb:ea:c0:28:18:70:87:bb:be:4f:87:25:6d:3a:
f1:f3:46:5a:1f:d4:60:a8:c6:da:6f:35:ca:9f:ce:e2:b9:32:
2b:87:ca:0a:c8:8b:10:a3:8f:49:0e:11:7c:e9:58:c5:57:0f:
50:dc:4a:49:ac:90:e2:74:07:9d:90:a2:16:af:73:c6:8d:3a:
4e:5f:f7:3f:bf:32:68:5b:e4:8b:64:88:cc:d2:d4:da:9e:3f:
d4:55:28:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpLGOc0N/x0aN9Wwj2mIDZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiN2Y4MWE2ZTc4MmUyMTExODljNGYzNGU0NTliNDIyNmM3
NWY0YTYwHhcNMjUxMTAzMTkwMTU0WhcNMjUxMTA0MTkwMTU0WjAzMTEwLwYDVQQD
Eyg0MTM5YzcyZmU4MDdmMzA3NjZjY2M1YTkxZTAyY2Y3NDkzOWVmYzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS9gBzzm0XEjquG4J/Gq5CgsPHpV
BUuzBD8m3N3OgtB4cDhfZ4woykOHnnxpiwqIh0EHMK0YKRzFsB+t2Eq6FjfSEE81
WqH5Ej1+UluxK7swnobXQg9K5480QrfUz7lya3aOCH1XwhM3siZS3BkIU7cCLcsN
EX3T4kNezXgsnn7RqkPQBN6u6spPRNxQAON/dvsrFfRnGyooNx8JfXBs4lhez25k
pydJN7F9HFk15Ao4Gd4SfG8XJxgPnz6aKoiuS6bsSuVhegc+cUdl4pdlBLqcQxPc
CQvSW4fmMMy0ucmcRsy9C7Dqtgriba8cJLDL6BivPXf8j6zxRwi8Txpz2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEE5xy/oB/MHZszFqR4Cz3STnvwiMB8GA1UdIwQY
MBaAFIt/gabnguIRGJxPNORZtCJsdfSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUt
ZjJmNDI2ZWZlMDM5LzEvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUtZjJmNDI2ZWZlMDM5
LzEvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiwLDA5s
xypwMVc5Tex6q0Wfd8eq0LzxO7VLtvIYrQx057RWwqLAGyUoqj2NhI4wcSoiZQlA
ugRRFwRz7KCfcMGqnihyQ/uriLcv1an6J4BofHXtAEFAOO0Sx8MsSES1PeyaNBLb
nf7Px79T/nrKrCt97/uowD5Ypc0FmoIIZq8Zbp0E/5B+6AC++WvA7HIJf6Qni4Ja
cXKWXU/A/M+ow6S3UHATm+vqwCgYcIe7vk+HJW068fNGWh/UYKjG2m81yp/O4rky
K4fKCsiLEKOPSQ4RfOlYxVcPUNxKSayQ4nQHnZCiFq9zxo06Tl/3P78yaFvki2SI
zNLU2p4/1FUosQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 04:00:52 2025 by rpki-client