Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
File: i5PlZ68ZipTh_PBf4P58khCVqEo.mft (raw, json)
Hash identifier: 2Mn54W/JiI/c8vO0Lqppx0NEOS6zPp2RgJ17i1uey7U=
Subject key identifier: C6:8C:CE:BC:E9:B9:E9:C7:CD:7E:7D:5B:25:EE:8D:74:3E:4C:87:8D
Authority key identifier: 8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
Certificate issuer: /CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Certificate serial: 019A0CA64024C248F313E2D50D96D1F88A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
Manifest number: 0B94
Signing time: Wed 22 Oct 2025 16:00:13 +0000
Manifest this update: Wed 22 Oct 2025 16:00:13 +0000
Manifest next update: Thu 23 Oct 2025 16:00:13 +0000
Files and hashes: 1: 6DAE46YGraEJYVV3HiGtZg9tT3U.roa (hash: 9Q8yRtyc9v/k/ONyDJo3tJ6f8FW5cGNXex+XpsJxg2Q=)
2: i5PlZ68ZipTh_PBf4P58khCVqEo.crl (hash: y/OCifp3ye4hIIYhHpkWdyvfbvLfA6J+rPk8uXxEFws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:a6:40:24:c2:48:f3:13:e2:d5:0d:96:d1:f8:8a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Validity
Not Before: Oct 22 16:00:13 2025 GMT
Not After : Oct 23 16:00:13 2025 GMT
Subject: CN=c68ccebce9b9e9c7cd7e7d5b25ee8d743e4c878d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:b9:11:7a:2d:06:a6:a0:f7:34:8e:e7:8f:
23:33:29:bf:ac:2d:6b:8c:d8:e2:0f:cf:77:db:2c:
8a:4f:f7:a2:f3:3a:2f:c0:ba:4c:3d:53:1e:59:5c:
fb:f4:66:85:13:45:49:ac:dd:b6:e2:3d:9c:fc:bd:
99:0b:a9:77:e2:1f:79:6d:4e:37:a5:c1:56:41:83:
3c:62:5c:32:e7:a0:bf:94:fd:4c:cf:8d:92:e8:26:
c4:85:43:7a:0b:57:df:b4:a2:43:3f:09:db:10:a9:
36:ef:e7:d6:3f:71:86:3d:c8:3c:c2:6a:87:bf:8e:
be:16:51:e4:f0:f1:9e:f2:7a:68:2d:3e:7d:b4:c3:
b4:f5:57:50:87:b1:e1:45:f8:ca:0a:c7:53:ce:4a:
9b:03:0f:c4:a5:81:35:79:74:c9:bb:a1:9a:bb:b5:
af:af:78:8b:c5:60:95:25:fc:a5:d2:5a:25:52:d7:
a2:f7:44:00:73:6e:08:a8:00:46:7f:92:09:b4:28:
9c:e4:06:bf:0f:b0:5e:73:18:a7:97:f4:89:21:3e:
93:4f:b0:a5:c2:39:b0:61:0f:21:58:7c:f7:c2:0b:
d4:ea:b0:a3:66:53:8a:e8:89:47:ca:a1:ea:91:70:
70:c2:4b:09:09:cf:f7:1a:7f:86:df:b3:cf:e7:e5:
54:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8C:CE:BC:E9:B9:E9:C7:CD:7E:7D:5B:25:EE:8D:74:3E:4C:87:8D
X509v3 Authority Key Identifier:
keyid:8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8d:32:1c:e3:41:1a:31:0f:ff:71:cf:62:46:3f:c5:49:aa:
11:12:55:f7:62:aa:92:31:60:56:1d:ae:72:c8:ca:94:75:12:
bc:ff:c2:7d:23:6c:fc:a4:52:37:8c:dd:00:c0:d3:c6:88:bb:
66:59:84:32:9a:49:a5:45:31:f0:46:70:93:b7:52:d3:a4:5b:
5b:c2:cd:17:36:d3:cf:ad:5a:b2:92:fd:e2:79:e7:24:9b:80:
a8:89:39:35:d7:3b:3f:c8:17:25:b8:a2:3a:e9:53:89:3c:79:
b1:55:dd:25:02:83:3c:d6:8e:fc:c0:43:23:12:d2:41:8d:1a:
fe:cb:d0:3e:06:09:b8:8a:9b:3a:80:4f:6d:d0:41:b0:10:68:
9d:bc:58:c1:ad:2c:fc:42:45:b9:36:06:78:7f:37:09:92:64:
39:6a:22:d4:49:d1:10:e6:2c:8f:f5:1e:9d:84:44:0e:4f:ed:
b8:6d:1b:a0:6a:42:07:84:a3:97:42:9f:43:a7:42:be:79:38:
10:4c:08:26:a3:6e:6f:ae:95:9b:1d:bc:f8:cc:d8:3c:82:3c:
99:64:ea:1b:c5:2b:5a:90:8e:a1:e4:99:ff:b3:a4:74:e4:53:
86:13:8c:43:1c:c7:73:3b:17:86:3a:5f:88:1c:b8:d0:bb:e5:
d9:bd:c8:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoMpkAkwkjzE+LVDZbR+IqcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOTNlNTY3YWYxOThhOTRlMWZjZjA1ZmUwZmU3YzkyMTA5
NWE4NGEwHhcNMjUxMDIyMTYwMDEzWhcNMjUxMDIzMTYwMDEzWjAzMTEwLwYDVQQD
EyhjNjhjY2ViY2U5YjllOWM3Y2Q3ZTdkNWIyNWVlOGQ3NDNlNGM4NzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppe5EXotBqag9zSO548jMym/rC1r
jNjiD8932yyKT/ei8zovwLpMPVMeWVz79GaFE0VJrN224j2c/L2ZC6l34h95bU43
pcFWQYM8Ylwy56C/lP1Mz42S6CbEhUN6C1fftKJDPwnbEKk27+fWP3GGPcg8wmqH
v46+FlHk8PGe8npoLT59tMO09VdQh7HhRfjKCsdTzkqbAw/EpYE1eXTJu6Gau7Wv
r3iLxWCVJfyl0lolUtei90QAc24IqABGf5IJtCic5Aa/D7Becxinl/SJIT6TT7Cl
wjmwYQ8hWHz3wgvU6rCjZlOK6IlHyqHqkXBwwksJCc/3Gn+G37PP5+VUuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaMzrzpuenHzX59WyXujXQ+TIeNMB8GA1UdIwQY
MBaAFIuT5WevGYqU4fzwX+D+fJIQlahKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVQbFo2OFppcFRoX1BCZjRQNThraENWcUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jZjEzMGQtZWZkNC00ZGZiLWExYTMt
YTJiZjBhMThjZGRjLzEvaTVQbFo2OFppcFRoX1BCZjRQNThraENWcUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jZjEzMGQtZWZkNC00ZGZiLWExYTMtYTJiZjBhMThjZGRj
LzEvaTVQbFo2OFppcFRoX1BCZjRQNThraENWcUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQI0yHONB
GjEP/3HPYkY/xUmqERJV92KqkjFgVh2ucsjKlHUSvP/CfSNs/KRSN4zdAMDTxoi7
ZlmEMppJpUUx8EZwk7dS06RbW8LNFzbTz61aspL94nnnJJuAqIk5Ndc7P8gXJbii
OulTiTx5sVXdJQKDPNaO/MBDIxLSQY0a/svQPgYJuIqbOoBPbdBBsBBonbxYwa0s
/EJFuTYGeH83CZJkOWoi1EnREOYsj/UenYREDk/tuG0boGpCB4Sjl0KfQ6dCvnk4
EEwIJqNub66Vmx28+MzYPII8mWTqG8UrWpCOoeSZ/7OkdORThhOMQxzHczsXhjpf
iBy40Lvl2b3IZg==
-----END CERTIFICATE-----
Generated at Thu Oct 23 00:27:28 2025 by rpki-client