Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft
File: iuSaSeoGdwqH11pcg1b0Vk4asew.mft (raw, json)
Hash identifier: Oz09M6d4TBbQ/M9GHZ+Y7W5CauALJRc39wrbQ9LbsIQ=
Subject key identifier: CB:60:A7:CF:7F:A3:96:BF:2D:64:FE:93:D2:CF:9B:9F:84:8D:AB:F4
Authority key identifier: 8A:E4:9A:49:EA:06:77:0A:87:D7:5A:5C:83:56:F4:56:4E:1A:B1:EC
Certificate issuer: /CN=8ae49a49ea06770a87d75a5c8356f4564e1ab1ec
Certificate serial: 019A711320FC26BEEE239E159E9C7C795889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuSaSeoGdwqH11pcg1b0Vk4asew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft
Manifest number: 04B5
Signing time: Tue 11 Nov 2025 04:01:10 +0000
Manifest this update: Tue 11 Nov 2025 04:01:10 +0000
Manifest next update: Wed 12 Nov 2025 04:01:10 +0000
Files and hashes: 1: iuSaSeoGdwqH11pcg1b0Vk4asew.crl (hash: 4JdSQj18+TNtwvUaPg8rcniJ01MonSx7tKi/Wnimrw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuSaSeoGdwqH11pcg1b0Vk4asew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:20:fc:26:be:ee:23:9e:15:9e:9c:7c:79:58:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae49a49ea06770a87d75a5c8356f4564e1ab1ec
Validity
Not Before: Nov 11 04:01:10 2025 GMT
Not After : Nov 12 04:01:10 2025 GMT
Subject: CN=cb60a7cf7fa396bf2d64fe93d2cf9b9f848dabf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:b6:5f:97:0f:83:02:3b:1c:4b:b8:b9:e9:
ef:85:c0:f0:fe:e6:fc:e5:7d:e3:04:f5:72:a1:4f:
fd:9b:e2:ae:04:82:0e:0c:dd:48:db:47:a1:44:62:
a1:99:d6:64:66:0d:b9:ec:75:b2:48:f7:89:8d:b2:
cc:5d:02:da:fa:f3:f2:42:1f:5f:9b:05:73:59:cc:
c5:4f:0a:20:58:39:0b:36:42:3b:51:1e:c6:88:d1:
8f:b9:53:3d:b0:eb:17:86:da:39:df:0e:73:ce:43:
98:f8:e1:f5:49:db:db:9f:08:a5:79:13:97:5a:76:
45:2c:7f:6a:f9:f9:0b:25:ae:06:fc:9d:e1:99:24:
85:60:b1:8a:99:4a:78:b6:65:9c:14:49:29:8a:80:
2d:ef:ae:05:d6:a1:e6:d5:0c:9a:c3:de:e9:42:ef:
e4:ac:9e:e2:91:99:77:ba:9c:30:33:5a:47:80:5c:
64:41:55:07:35:17:27:57:d9:f3:bf:3d:ad:c8:8c:
6f:cc:07:0a:0f:96:97:b4:19:7a:94:f6:70:d0:3c:
83:15:7c:22:b6:be:0c:71:0b:da:7a:07:3a:3b:6f:
4a:5f:ff:e6:d9:cb:7c:59:ad:65:ba:cf:99:08:57:
6a:6e:2d:cd:af:aa:c8:2f:9b:18:40:0a:2f:2c:ef:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:60:A7:CF:7F:A3:96:BF:2D:64:FE:93:D2:CF:9B:9F:84:8D:AB:F4
X509v3 Authority Key Identifier:
keyid:8A:E4:9A:49:EA:06:77:0A:87:D7:5A:5C:83:56:F4:56:4E:1A:B1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuSaSeoGdwqH11pcg1b0Vk4asew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c9:a3:34:05:bb:aa:7d:d2:d6:3e:a0:7c:88:58:df:f7:2b:
74:44:4a:de:58:09:1a:4e:4d:dc:30:7d:92:d2:4b:af:0a:d1:
b6:10:ce:ab:34:85:42:d1:f8:d1:27:95:a3:e6:82:f6:4d:98:
fa:81:77:5e:ef:ce:80:64:9b:e8:41:45:9b:be:db:4a:b5:82:
c7:30:22:ec:47:16:5c:13:af:2e:85:83:39:de:78:1d:59:23:
95:bd:8f:1e:19:14:59:bb:89:31:3d:6b:84:e7:d1:5b:88:6b:
6a:c9:19:94:81:6e:61:70:9b:3c:f0:f7:0f:9e:d8:8a:2c:22:
77:6b:4f:2f:50:52:96:59:63:1b:29:bf:41:2f:c5:58:29:4a:
8e:32:8a:02:bf:fc:99:3a:f0:0a:3b:09:b1:14:19:e4:ec:7a:
19:b3:d7:64:1b:84:2e:11:90:90:7d:de:42:33:a0:76:91:51:
bb:e0:50:29:23:ff:fc:07:76:19:6c:e5:6b:da:2d:7d:56:44:
08:d4:40:7c:99:f5:2b:25:dd:1b:14:17:81:4e:5e:ab:c8:e5:
a4:6a:b4:87:7f:27:c5:ef:89:21:11:b7:60:04:a7:62:d2:6d:
b6:4d:ec:08:24:4b:73:d1:8f:de:22:63:66:03:ae:64:51:de:
db:a3:5c:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEyD8Jr7uI54Vnpx8eViJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZTQ5YTQ5ZWEwNjc3MGE4N2Q3NWE1YzgzNTZmNDU2NGUx
YWIxZWMwHhcNMjUxMTExMDQwMTEwWhcNMjUxMTEyMDQwMTEwWjAzMTEwLwYDVQQD
EyhjYjYwYTdjZjdmYTM5NmJmMmQ2NGZlOTNkMmNmOWI5Zjg0OGRhYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ22X5cPgwI7HEu4uenvhcDw/ub8
5X3jBPVyoU/9m+KuBIIODN1I20ehRGKhmdZkZg257HWySPeJjbLMXQLa+vPyQh9f
mwVzWczFTwogWDkLNkI7UR7GiNGPuVM9sOsXhto53w5zzkOY+OH1SdvbnwileROX
WnZFLH9q+fkLJa4G/J3hmSSFYLGKmUp4tmWcFEkpioAt764F1qHm1Qyaw97pQu/k
rJ7ikZl3upwwM1pHgFxkQVUHNRcnV9nzvz2tyIxvzAcKD5aXtBl6lPZw0DyDFXwi
tr4McQvaegc6O29KX//m2ct8Wa1lus+ZCFdqbi3Nr6rIL5sYQAovLO9CQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtgp89/o5a/LWT+k9LPm5+Ejav0MB8GA1UdIwQY
MBaAFIrkmknqBncKh9daXINW9FZOGrHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXVTYVNlb0dkd3FIMTFwY2cxYjBWazRhc2V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hMDIyMWEtNzcxZi00NmU2LWIzYzMt
OTdmMDhjNmQ5OGQzLzEvaXVTYVNlb0dkd3FIMTFwY2cxYjBWazRhc2V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hMDIyMWEtNzcxZi00NmU2LWIzYzMtOTdmMDhjNmQ5OGQz
LzEvaXVTYVNlb0dkd3FIMTFwY2cxYjBWazRhc2V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcmjNAW7
qn3S1j6gfIhY3/crdERK3lgJGk5N3DB9ktJLrwrRthDOqzSFQtH40SeVo+aC9k2Y
+oF3Xu/OgGSb6EFFm77bSrWCxzAi7EcWXBOvLoWDOd54HVkjlb2PHhkUWbuJMT1r
hOfRW4hraskZlIFuYXCbPPD3D57Yiiwid2tPL1BSllljGym/QS/FWClKjjKKAr/8
mTrwCjsJsRQZ5Ox6GbPXZBuELhGQkH3eQjOgdpFRu+BQKSP//Ad2GWzla9otfVZE
CNRAfJn1KyXdGxQXgU5eq8jlpGq0h38nxe+JIRG3YASnYtJttk3sCCRLc9GP3iJj
ZgOuZFHe26Nc0Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:33 2025 by rpki-client