Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
File: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft (raw, json)
Hash identifier: O6lUMYgKtBUCwnWCw/MJRsBxxh3bSrkiJdJp8HAoJxM=
Subject key identifier: 0F:F9:C5:0F:15:A1:7D:09:51:A7:C8:4B:16:01:81:1E:8C:9A:DC:85
Authority key identifier: 23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
Certificate issuer: /CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Certificate serial: 019A72935058FFD7A4F6A975567A3F1CA126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:00:48 +0000
Manifest this update: Tue 11 Nov 2025 11:00:48 +0000
Manifest next update: Wed 12 Nov 2025 11:00:48 +0000
Files and hashes: 1: HLzZYAURdW7ECuJc4fBvkEOMPUU.roa (hash: HLSzvw8EJ6C84Lk+YNRBmj8BE3yMR8wKB5nstwpxKJ8=)
2: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl (hash: h84jLbbQ+JyRwBPPMX0pSI+TtJTz9og2C3tC2E6B7Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:50:58:ff:d7:a4:f6:a9:75:56:7a:3f:1c:a1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Validity
Not Before: Nov 11 11:00:48 2025 GMT
Not After : Nov 12 11:00:48 2025 GMT
Subject: CN=0ff9c50f15a17d0951a7c84b1601811e8c9adc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:ca:02:7d:41:fb:6f:dd:1f:37:ea:b1:1c:
88:a3:12:af:f6:73:e6:3f:b1:55:59:e5:56:92:86:
55:c3:7e:ba:07:26:ff:7f:a5:60:95:17:8f:7a:6e:
38:aa:78:d8:5e:77:cf:59:ff:92:ff:88:21:31:4f:
6a:02:a3:a7:c5:1a:d3:82:9e:5f:1e:86:93:a3:ce:
ae:61:ca:1a:3e:7d:73:cd:f9:ca:b0:e2:8d:ac:9a:
b8:fc:f1:b2:21:e4:38:ec:8a:d4:da:7d:27:75:b2:
dd:ef:11:59:d1:84:b0:1d:ef:ac:a4:e1:a9:51:2c:
3e:30:b4:8c:5d:25:e7:12:c3:0d:bf:4e:53:53:37:
d8:a1:df:d5:50:d4:7f:9d:5c:74:2c:92:9b:12:d7:
ce:14:e7:a3:51:55:dd:c8:75:02:2f:5c:78:29:ed:
8f:c5:35:98:24:3d:c3:c7:64:20:9a:9a:c3:25:c4:
7a:da:14:c2:d3:64:d9:d2:dc:20:f2:7c:4b:64:c3:
70:8b:a6:89:a7:c2:0f:60:7a:08:00:16:91:f2:62:
93:7d:9c:9a:bf:9d:9a:f5:9d:fc:10:93:00:a4:4d:
7a:c6:b7:30:dd:ab:c2:c6:d1:7f:7f:14:33:ed:eb:
ce:61:68:38:14:69:19:ed:a2:c8:ab:e8:c4:6b:5a:
17:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F9:C5:0F:15:A1:7D:09:51:A7:C8:4B:16:01:81:1E:8C:9A:DC:85
X509v3 Authority Key Identifier:
keyid:23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8f:49:41:e0:9e:a7:ac:6f:d9:1f:e5:4e:fd:8d:33:1f:a8:
49:9c:d4:7f:8b:50:02:f4:f8:53:3e:ac:bf:22:b6:72:bf:bd:
44:21:8c:2e:65:87:7e:44:d0:f3:b6:64:2f:47:7f:3e:ce:5a:
ba:4c:57:c2:46:27:3a:e1:99:c7:1a:e7:6d:a8:d9:6a:44:e4:
86:27:58:31:9b:1e:dd:dc:45:44:02:75:75:be:f7:d6:bd:7c:
ef:2b:18:53:6d:0b:8f:91:18:9a:8a:47:bc:72:1a:38:60:88:
05:a9:44:c8:b1:63:50:96:36:ac:c6:1a:6a:8f:0f:52:fb:9c:
c3:89:9d:48:5f:b8:aa:5f:45:03:0a:21:4d:4f:5f:a0:a7:63:
e4:c6:db:a3:ae:e8:f4:77:a9:cb:f1:62:75:3f:0b:f5:2c:97:
f8:25:c5:b8:b8:88:57:f2:eb:43:4f:cd:a2:57:e6:26:2f:68:
20:90:73:44:ca:d5:70:41:85:53:de:30:03:e5:15:cb:f0:c2:
6b:c4:33:2e:0b:7b:4e:be:44:f5:0e:10:5e:02:14:46:e8:e8:
3c:27:c5:85:70:2c:84:6d:7b:ec:1c:c9:09:6b:dc:1d:8c:96:
26:07:f1:86:5d:79:b5:31:85:fc:a2:0d:b8:65:e5:80:c2:7c:
38:57:2b:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk1BY/9ek9ql1Vno/HKEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZGNkNmYxNzEyNmQ0ZTk1MWQ5MmJjNWY0YzA2YmE5NDUw
ZmM4ZDQwHhcNMjUxMTExMTEwMDQ4WhcNMjUxMTEyMTEwMDQ4WjAzMTEwLwYDVQQD
EygwZmY5YzUwZjE1YTE3ZDA5NTFhN2M4NGIxNjAxODExZThjOWFkYzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy/KAn1B+2/dHzfqsRyIoxKv9nPm
P7FVWeVWkoZVw366Byb/f6VglRePem44qnjYXnfPWf+S/4ghMU9qAqOnxRrTgp5f
HoaTo86uYcoaPn1zzfnKsOKNrJq4/PGyIeQ47IrU2n0ndbLd7xFZ0YSwHe+spOGp
USw+MLSMXSXnEsMNv05TUzfYod/VUNR/nVx0LJKbEtfOFOejUVXdyHUCL1x4Ke2P
xTWYJD3Dx2QgmprDJcR62hTC02TZ0twg8nxLZMNwi6aJp8IPYHoIABaR8mKTfZya
v52a9Z38EJMApE16xrcw3avCxtF/fxQz7evOYWg4FGkZ7aLIq+jEa1oXhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/5xQ8VoX0JUafISxYBgR6MmtyFMB8GA1UdIwQY
MBaAFCPc1vFxJtTpUdkrxfTAa6lFD8jUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTl6VzhYRW0xT2xSMlN2RjlNQnJxVVVQeU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9mZGEwNTktMzQzNi00MTU4LWExZTQt
NDlkYTA1OTc4YWQwLzEvSTl6VzhYRW0xT2xSMlN2RjlNQnJxVVVQeU5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9mZGEwNTktMzQzNi00MTU4LWExZTQtNDlkYTA1OTc4YWQw
LzEvSTl6VzhYRW0xT2xSMlN2RjlNQnJxVVVQeU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgI9JQeCe
p6xv2R/lTv2NMx+oSZzUf4tQAvT4Uz6svyK2cr+9RCGMLmWHfkTQ87ZkL0d/Ps5a
ukxXwkYnOuGZxxrnbajZakTkhidYMZse3dxFRAJ1db731r187ysYU20Lj5EYmopH
vHIaOGCIBalEyLFjUJY2rMYaao8PUvucw4mdSF+4ql9FAwohTU9foKdj5Mbbo67o
9Hepy/FidT8L9SyX+CXFuLiIV/LrQ0/NolfmJi9oIJBzRMrVcEGFU94wA+UVy/DC
a8QzLgt7Tr5E9Q4QXgIURujoPCfFhXAshG177BzJCWvcHYyWJgfxhl15tTGF/KIN
uGXlgMJ8OFcrAQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:06 2025 by rpki-client