Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft
File: Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft (raw, json)
Hash identifier: hjyld6tTZb/cJRs1XDC2OdqKjr7aWORBVjD1RiNQrYE=
Subject key identifier: 04:A7:45:03:6D:DB:E4:98:95:60:75:5E:18:34:D8:4F:1B:F1:28:4D
Authority key identifier: 22:CE:6F:80:D7:67:09:73:D3:2E:C4:74:53:01:01:12:17:46:88:22
Certificate issuer: /CN=22ce6f80d7670973d32ec4745301011217468822
Certificate serial: 019A71AB86D08F7718A4913BEB0AF5ECD939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft
Manifest number: 02
Signing time: Tue 11 Nov 2025 06:47:37 +0000
Manifest this update: Tue 11 Nov 2025 06:47:37 +0000
Manifest next update: Wed 12 Nov 2025 06:47:37 +0000
Files and hashes: 1: Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl (hash: EIAihvekZdRUL8HIKc53v55ZTtbA+HMH5gmbPZnpxqU=)
2: _MzRbBxyGoy9PEsWIvACK-CtNic.roa (hash: 08IFLLSc5HylsTSbFSeyhHQH9IHTjqat4y1TvqrHWhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ab:86:d0:8f:77:18:a4:91:3b:eb:0a:f5:ec:d9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ce6f80d7670973d32ec4745301011217468822
Validity
Not Before: Nov 11 06:47:37 2025 GMT
Not After : Nov 12 06:47:37 2025 GMT
Subject: CN=04a745036ddbe4989560755e1834d84f1bf1284d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:47:8d:52:07:62:b0:5e:86:2a:40:57:9b:ca:
62:59:0d:67:51:40:92:e3:15:fd:60:74:22:92:07:
1b:4a:30:56:a9:13:70:00:0d:03:bc:84:33:56:95:
f7:92:9d:75:3a:4b:fc:7a:c7:64:d1:b4:8a:a2:31:
ce:ae:cb:cb:1d:be:c8:15:05:67:ac:ce:d4:bd:aa:
59:ea:bf:17:28:62:9d:e7:5c:58:8d:3d:b7:9f:45:
29:c2:56:7f:a2:cb:cb:53:9d:17:ef:8a:42:eb:a2:
b4:92:50:88:e4:89:2a:83:c5:10:1b:bb:e2:1e:13:
2e:53:6c:c6:ad:c6:5d:5c:e0:77:3b:d4:31:32:9b:
65:6e:a2:27:6e:a3:90:5a:91:da:47:c8:2c:75:88:
8d:35:2f:3a:18:10:90:79:71:ce:7a:13:93:75:60:
8c:6c:ed:96:26:b9:0d:cc:07:ea:0b:a9:54:fa:b3:
f0:a5:ff:b4:48:00:43:ea:b9:53:df:9d:51:5d:bc:
f7:f2:af:c2:d8:0a:ad:42:57:50:13:df:df:a9:d4:
ee:08:4a:09:4e:39:a7:04:74:a0:f6:28:c8:ec:f4:
b6:c4:3f:ee:99:f8:e0:f3:14:93:f8:6c:ae:b1:aa:
96:0c:f2:52:68:a0:c8:a5:61:5a:95:28:3c:d1:04:
2c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A7:45:03:6D:DB:E4:98:95:60:75:5E:18:34:D8:4F:1B:F1:28:4D
X509v3 Authority Key Identifier:
keyid:22:CE:6F:80:D7:67:09:73:D3:2E:C4:74:53:01:01:12:17:46:88:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:20:78:ed:3a:a1:a4:5c:a3:c1:00:52:a9:25:98:cb:ee:82:
1f:0c:dc:a6:c3:20:3b:1d:e9:93:be:e8:08:4c:f0:ef:a8:ba:
78:c4:1d:df:f3:de:a3:7b:8d:b8:41:b4:20:78:28:55:c7:4d:
ab:18:a2:2a:09:f6:8e:2e:c1:49:10:c3:ab:aa:a0:ba:93:0e:
00:fa:86:19:06:1f:55:6d:79:99:9e:23:6d:1e:7f:ef:95:a8:
10:c0:21:14:4d:aa:c8:cc:c5:ea:9b:05:cd:ab:86:6d:41:ec:
ac:48:2a:fe:f7:84:43:9f:eb:a1:37:33:9a:81:84:d9:60:bd:
98:8a:75:03:ba:f5:aa:37:c2:f0:04:06:6f:6e:ed:d6:7d:c7:
cb:0c:28:0e:24:65:7b:ba:5e:68:4b:e3:fa:0e:63:8c:ec:51:
a3:8d:ca:6a:7c:20:c8:6e:4e:ab:47:fc:8f:c2:95:ac:5e:1e:
04:51:ba:20:64:1a:80:68:b7:07:54:68:33:ed:f9:73:fe:dd:
12:f4:ff:8f:30:b8:3a:db:57:98:62:33:02:69:85:90:29:2c:
ec:5d:f8:21:d2:5a:26:07:1b:a2:e5:99:fd:52:a4:07:59:26:
d3:03:e6:4e:89:fd:60:73:4c:8f:3e:72:11:05:eb:00:51:8b:
f9:3a:54:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxq4bQj3cYpJE76wr17Nk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyY2U2ZjgwZDc2NzA5NzNkMzJlYzQ3NDUzMDEwMTEyMTc0
Njg4MjIwHhcNMjUxMTExMDY0NzM3WhcNMjUxMTEyMDY0NzM3WjAzMTEwLwYDVQQD
EygwNGE3NDUwMzZkZGJlNDk4OTU2MDc1NWUxODM0ZDg0ZjFiZjEyODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkeNUgdisF6GKkBXm8piWQ1nUUCS
4xX9YHQikgcbSjBWqRNwAA0DvIQzVpX3kp11Okv8esdk0bSKojHOrsvLHb7IFQVn
rM7UvapZ6r8XKGKd51xYjT23n0UpwlZ/osvLU50X74pC66K0klCI5Ikqg8UQG7vi
HhMuU2zGrcZdXOB3O9QxMptlbqInbqOQWpHaR8gsdYiNNS86GBCQeXHOehOTdWCM
bO2WJrkNzAfqC6lU+rPwpf+0SABD6rlT351RXbz38q/C2AqtQldQE9/fqdTuCEoJ
TjmnBHSg9ijI7PS2xD/umfjg8xST+GyusaqWDPJSaKDIpWFalSg80QQs1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASnRQNt2+SYlWB1Xhg02E8b8ShNMB8GA1UdIwQY
MBaAFCLOb4DXZwlz0y7EdFMBARIXRogiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83Mjc0ZmYtMjUxNi00MmRhLTk1ZDUt
NWFhYmRlMzExZmRiLzEvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83Mjc0ZmYtMjUxNi00MmRhLTk1ZDUtNWFhYmRlMzExZmRi
LzEvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiB47Tqh
pFyjwQBSqSWYy+6CHwzcpsMgOx3pk77oCEzw76i6eMQd3/Peo3uNuEG0IHgoVcdN
qxiiKgn2ji7BSRDDq6qgupMOAPqGGQYfVW15mZ4jbR5/75WoEMAhFE2qyMzF6psF
zauGbUHsrEgq/veEQ5/roTczmoGE2WC9mIp1A7r1qjfC8AQGb27t1n3HywwoDiRl
e7peaEvj+g5jjOxRo43KanwgyG5Oq0f8j8KVrF4eBFG6IGQagGi3B1RoM+35c/7d
EvT/jzC4OttXmGIzAmmFkCks7F34IdJaJgcbouWZ/VKkB1km0wPmTon9YHNMjz5y
EQXrAFGL+TpUow==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:52 2025 by rpki-client