Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: WEcU85DnqaUUBJiNx+L883G0eJ0WExDgSRqwgOUvPSA=
Subject key identifier: 4D:0F:99:58:98:B9:18:6C:43:30:4A:BC:8E:BD:89:97:D4:D9:2C:52
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 01993047DA16FFEE92A1917476149C7A9174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 04A7
Signing time: Tue 09 Sep 2025 21:00:39 +0000
Manifest this update: Tue 09 Sep 2025 21:00:39 +0000
Manifest next update: Wed 10 Sep 2025 21:00:39 +0000
Files and hashes: 1: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: f0kmIo3sLPbs5sFO6dhzjSGiplfM9rA4/SajJq39TD8=)
2: tCW9fwISpjkcZibIaKBsjXs7N7A.roa (hash: NwxiC6aogmrL5itM5Y4be2nBp9O9LLOH8w2QrDP5u38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:47:da:16:ff:ee:92:a1:91:74:76:14:9c:7a:91:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Sep 9 21:00:39 2025 GMT
Not After : Sep 10 21:00:39 2025 GMT
Subject: CN=4d0f995898b9186c43304abc8ebd8997d4d92c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:a4:c8:46:45:70:e7:4b:f0:8e:73:34:43:
1b:53:d9:37:bc:6f:da:18:44:f5:6c:4e:7c:8a:44:
d4:ed:78:58:11:4f:e3:f5:ae:ad:07:38:94:41:14:
6c:d7:f3:66:f7:e4:5e:f9:3c:19:7e:5d:59:4a:1d:
4d:05:98:46:30:4e:fd:57:77:8b:28:b1:bd:50:68:
b0:87:6c:0e:a2:ef:29:23:42:8c:a6:7f:30:94:1e:
5a:72:d0:a9:29:1b:e9:c9:81:a5:73:5f:1d:e3:3e:
15:73:84:5a:bd:d9:3a:8d:78:42:25:6a:02:41:9b:
09:bb:fe:1a:cf:f6:7f:e7:ce:59:fa:f2:d0:6f:c2:
47:93:f2:be:bd:a9:c9:72:d2:80:ed:53:8d:96:79:
86:d9:78:12:2c:a5:47:47:79:98:a8:d3:5c:52:f6:
9b:14:c2:ce:2d:e6:9a:fe:d1:52:ab:20:8e:38:a4:
62:cd:dd:1d:9f:74:9f:6e:ac:4b:cd:3b:f0:54:3f:
1e:b4:62:4a:e5:0b:c9:46:4d:ea:e4:bf:71:82:14:
dd:79:f8:d3:62:a9:a1:d3:42:7c:1b:e8:9f:7f:ca:
fc:5c:d9:69:8e:06:99:c5:b5:69:d3:0d:46:25:31:
05:57:61:45:50:d8:0d:e4:0c:27:48:be:a5:12:0e:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0F:99:58:98:B9:18:6C:43:30:4A:BC:8E:BD:89:97:D4:D9:2C:52
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:46:22:1b:e4:92:37:28:ed:cb:c9:29:97:cf:07:fb:87:63:
53:c1:58:59:0d:76:8f:66:c4:0b:06:80:0a:6c:18:02:90:25:
78:d1:0a:5e:3b:2a:08:7a:64:c2:0b:dc:4d:33:48:0b:14:16:
ad:b3:2c:93:ad:20:ca:89:93:d1:b9:a3:da:bd:c8:9e:c7:dd:
5b:d9:fc:fe:d4:1f:6d:65:e8:d1:d3:1d:89:d0:2f:5b:5f:f9:
34:bd:d8:9d:a8:01:bd:14:1a:6a:9d:79:ab:a0:34:b6:9e:1c:
6b:42:37:9b:25:60:54:1c:89:1b:e3:0e:8c:fa:33:53:8c:da:
49:12:4c:90:c6:e2:0e:4c:3c:fc:eb:18:d2:28:32:38:be:64:
c5:ca:3a:67:14:af:39:b9:64:8e:89:e8:7e:7e:61:b3:50:5f:
53:82:cf:b5:f2:b0:73:7a:11:0e:cd:ce:79:d5:b7:16:96:f8:
41:23:35:2b:45:a5:84:86:ec:46:bd:7f:6c:11:60:32:b2:07:
10:05:8b:ba:6c:96:34:12:77:30:ea:f0:b2:94:cc:fa:c5:aa:
44:ad:37:41:63:f5:67:2f:22:a0:86:d0:f4:8c:48:d9:cd:6e:
dd:6a:d1:e5:db:16:47:ec:1f:b4:36:e8:b7:25:0a:91:f9:98:
5e:2f:cb:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwR9oW/+6SoZF0dhScepF0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOWNjNTdjYTg0NzIzYWVjMjg0MTE0NWY2ZjdkMzAxYmRm
MzViYWMwHhcNMjUwOTA5MjEwMDM5WhcNMjUwOTEwMjEwMDM5WjAzMTEwLwYDVQQD
Eyg0ZDBmOTk1ODk4YjkxODZjNDMzMDRhYmM4ZWJkODk5N2Q0ZDkyYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30ykyEZFcOdL8I5zNEMbU9k3vG/a
GET1bE58ikTU7XhYEU/j9a6tBziUQRRs1/Nm9+Re+TwZfl1ZSh1NBZhGME79V3eL
KLG9UGiwh2wOou8pI0KMpn8wlB5actCpKRvpyYGlc18d4z4Vc4Ravdk6jXhCJWoC
QZsJu/4az/Z/585Z+vLQb8JHk/K+vanJctKA7VONlnmG2XgSLKVHR3mYqNNcUvab
FMLOLeaa/tFSqyCOOKRizd0dn3SfbqxLzTvwVD8etGJK5QvJRk3q5L9xghTdefjT
Yqmh00J8G+iff8r8XNlpjgaZxbVp0w1GJTEFV2FFUNgN5AwnSL6lEg7rdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0PmViYuRhsQzBKvI69iZfU2SxSMB8GA1UdIwQY
MBaAFIucxXyoRyOuwoQRRfb30wG981usMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zOGU2ZjctNGUzNS00YzJkLTk5Nzct
MDk3Y2I4ZGYyYTI0LzEvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zOGU2ZjctNGUzNS00YzJkLTk5NzctMDk3Y2I4ZGYyYTI0
LzEvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEYiG+SS
Nyjty8kpl88H+4djU8FYWQ12j2bECwaACmwYApAleNEKXjsqCHpkwgvcTTNICxQW
rbMsk60gyomT0bmj2r3InsfdW9n8/tQfbWXo0dMdidAvW1/5NL3YnagBvRQaap15
q6A0tp4ca0I3myVgVByJG+MOjPozU4zaSRJMkMbiDkw8/OsY0igyOL5kxco6ZxSv
Oblkjonofn5hs1BfU4LPtfKwc3oRDs3OedW3Fpb4QSM1K0WlhIbsRr1/bBFgMrIH
EAWLumyWNBJ3MOrwspTM+sWqRK03QWP1Zy8ioIbQ9IxI2c1u3WrR5dsWR+wftDbo
tyUKkfmYXi/LkA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 23:57:52 2025 by rpki-client