Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
File: I3ikqcUjJahZIICboaTYniHALxc.mft (raw, json)
Hash identifier: RmQHl4ZVZg96ujEW/u4aTLwCvevRdUl9MaOtLInXQPg=
Subject key identifier: 25:58:1E:8E:63:F8:03:7C:27:9B:75:29:EE:F8:A0:C4:24:28:91:1B
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 0199616B6E39E80DBC1590D7FF481A3840FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
Manifest number: 13E1
Signing time: Fri 19 Sep 2025 10:00:54 +0000
Manifest this update: Fri 19 Sep 2025 10:00:54 +0000
Manifest next update: Sat 20 Sep 2025 10:00:54 +0000
Files and hashes: 1: I3ikqcUjJahZIICboaTYniHALxc.crl (hash: OgPgEGs0Ww/AgFmELuf7xqvKc1ya/TukEgepMuGmekA=)
2: LWXmlZUU3ecfqvwZHXpe4N13PwE.roa (hash: 4NYVwWGAs7YF0X626zcPKU0/2BhITxR5hdojEVCb7vQ=)
3: Sb-J4R6jgDy1hu0trOifGY0aUIY.roa (hash: BnRnuIbBZBHwGOy/+XFTLzwpti+5vGhUFRVEfpqfups=)
4: XNLU8qoxsRXpQnmwz4ctSe-cqyE.roa (hash: JQ5L08jadmyYilDYeIqvPylZ8SNDZ1MGMwYpTLmwoLo=)
5: caXYCCXqjYg5FcmsNZB3ePKReDk.roa (hash: XSzupsyXsQ8GmhQZJGGSHfiNeG8fCN+9mFDFmlJ4Bu4=)
6: gnOWx6TZJqqJDVFgIEMBOXAqJm4.roa (hash: fy9tgSe6kfwMDX9Ibp9s7/6EtOy/O5uDNSQU1PskuXs=)
7: pCwDdjVqKehtW8BEUKXN0O7wEnk.roa (hash: 9s0GASAbpwgJKOxbp75/GwEb4yuJGmhv0RUIKaWppDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:6b:6e:39:e8:0d:bc:15:90:d7:ff:48:1a:38:40:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Sep 19 10:00:54 2025 GMT
Not After : Sep 20 10:00:54 2025 GMT
Subject: CN=25581e8e63f8037c279b7529eef8a0c42428911b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:65:05:db:db:49:63:f7:bf:47:1c:c1:a9:
fd:c6:a1:45:ff:d9:a4:b5:c5:53:d5:20:33:ab:bb:
17:3b:42:3f:bc:ba:e5:79:9c:d6:06:56:dd:94:04:
ed:a4:40:df:6c:90:1c:dd:24:5e:63:dd:be:06:4a:
96:cf:09:10:5a:3f:f3:ef:0f:45:d1:23:56:69:e4:
27:2f:05:ce:c5:06:ba:9b:3b:86:65:e6:66:dd:4f:
23:e2:e7:cd:ca:87:ba:17:56:db:87:01:9f:db:5a:
3a:5f:6e:1b:0c:c8:63:66:dc:cc:71:0d:fa:6a:8d:
b2:5c:c0:1e:3a:b5:d0:2c:74:29:44:42:47:bb:23:
fd:6a:e1:e0:05:9f:62:0d:4c:b2:02:5d:66:43:53:
c2:27:85:81:86:ae:bb:be:9c:85:8a:24:2c:4f:9e:
d0:3e:e3:86:73:1c:7a:27:ca:25:45:e4:e5:3c:57:
24:17:18:09:1d:4c:0b:89:c4:aa:52:99:21:28:a2:
55:28:06:0a:c7:51:12:26:f2:9d:9c:11:de:30:17:
a1:67:d8:73:2f:9c:ea:0d:1d:a0:fb:1c:ec:59:c8:
ca:fc:64:02:6a:93:d1:8f:b7:5a:42:b4:de:0c:fa:
d8:60:2f:ca:7d:f7:78:be:3b:ed:6d:4c:c3:c6:7d:
b8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:58:1E:8E:63:F8:03:7C:27:9B:75:29:EE:F8:A0:C4:24:28:91:1B
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1e:8d:55:bb:89:79:9d:0d:20:f6:f0:87:59:24:a4:cd:01:
72:a4:79:c2:11:17:96:09:1a:99:38:3e:e5:8e:41:bc:f3:e0:
59:5b:43:96:47:c1:70:8f:85:bd:dc:6a:92:9c:b5:bd:98:2e:
1c:13:ea:83:b8:c4:56:60:e1:4d:16:3d:dd:19:0a:25:2d:b0:
45:1b:d2:66:50:db:d0:ce:9b:c5:cd:01:be:21:c9:92:b3:2f:
71:f4:02:b6:f2:92:7d:1c:e4:bb:5e:99:0c:58:90:46:5d:02:
d6:87:ca:4b:27:06:01:d2:a7:c4:6e:43:53:34:95:1e:23:2d:
61:b0:6a:bd:52:0f:0b:fe:1c:6a:85:ef:9a:bd:b8:09:ba:1f:
54:0b:1f:af:a6:7f:50:de:7d:13:1e:b6:6e:fe:c8:b2:ac:df:
e8:f0:84:3d:f9:1d:a5:1c:a6:b6:28:4f:bc:2c:c8:ac:ef:21:
68:18:2e:88:eb:89:27:13:d7:d5:30:dd:a4:64:cf:fa:f9:b0:
3d:67:9c:60:47:66:fe:6c:cf:e8:39:f9:6b:f8:09:bb:a4:4d:
b0:c9:5c:c3:6e:da:fc:ae:1b:b2:25:ea:79:65:19:9e:7e:29:
5f:6a:4f:6c:35:81:22:20:76:94:3b:c4:23:7a:b0:20:b5:bb:
1f:89:ad:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlha2456A28FZDX/0gaOED6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNzhhNGE5YzUyMzI1YTg1OTIwODA5YmExYTRkODllMjFj
MDJmMTcwHhcNMjUwOTE5MTAwMDU0WhcNMjUwOTIwMTAwMDU0WjAzMTEwLwYDVQQD
EygyNTU4MWU4ZTYzZjgwMzdjMjc5Yjc1MjllZWY4YTBjNDI0Mjg5MTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlhlBdvbSWP3v0ccwan9xqFF/9mk
tcVT1SAzq7sXO0I/vLrleZzWBlbdlATtpEDfbJAc3SReY92+BkqWzwkQWj/z7w9F
0SNWaeQnLwXOxQa6mzuGZeZm3U8j4ufNyoe6F1bbhwGf21o6X24bDMhjZtzMcQ36
ao2yXMAeOrXQLHQpREJHuyP9auHgBZ9iDUyyAl1mQ1PCJ4WBhq67vpyFiiQsT57Q
PuOGcxx6J8olReTlPFckFxgJHUwLicSqUpkhKKJVKAYKx1ESJvKdnBHeMBehZ9hz
L5zqDR2g+xzsWcjK/GQCapPRj7daQrTeDPrYYC/Kffd4vjvtbUzDxn24CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVYHo5j+AN8J5t1Ke74oMQkKJEbMB8GA1UdIwQY
MBaAFCN4pKnFIyWoWSCAm6Gk2J4hwC8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmIt
OTM3ZTI3ZWUxYjViLzEvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmItOTM3ZTI3ZWUxYjVi
LzEvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWR6NVbuJ
eZ0NIPbwh1kkpM0BcqR5whEXlgkamTg+5Y5BvPPgWVtDlkfBcI+Fvdxqkpy1vZgu
HBPqg7jEVmDhTRY93RkKJS2wRRvSZlDb0M6bxc0BviHJkrMvcfQCtvKSfRzku16Z
DFiQRl0C1ofKSycGAdKnxG5DUzSVHiMtYbBqvVIPC/4caoXvmr24CbofVAsfr6Z/
UN59Ex62bv7Isqzf6PCEPfkdpRymtihPvCzIrO8haBguiOuJJxPX1TDdpGTP+vmw
PWecYEdm/mzP6Dn5a/gJu6RNsMlcw27a/K4bsiXqeWUZnn4pX2pPbDWBIiB2lDvE
I3qwILW7H4mthw==
-----END CERTIFICATE-----
Generated at Fri Sep 19 12:53:30 2025 by rpki-client