Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
File: i5sBY-7p55KqoWt9UQXTRyEfMSM.mft (raw, json)
Hash identifier: s9lzMXtgZMjTWXMEoZ8lg4ddqOm19Z5goPbtMQfwydo=
Subject key identifier: A2:83:8A:E7:F3:05:BE:69:63:71:A2:E1:B3:8A:6E:45:42:20:6B:3E
Authority key identifier: 8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
Certificate issuer: /CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Certificate serial: 0199221EDD51D68FE2A4570ED8EE4DD38559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
Manifest number: 0EBE
Signing time: Sun 07 Sep 2025 03:01:11 +0000
Manifest this update: Sun 07 Sep 2025 03:01:11 +0000
Manifest next update: Mon 08 Sep 2025 03:01:11 +0000
Files and hashes: 1: 0SrGSoxm46KHk5s_SkJdGCE1HAE.roa (hash: JwOVM2pq6uVpoEw0ksou2dKNGwx9rwOtGk9iEkBHbFc=)
2: Fj752bkxuJMKiLz6DxiNHNPGnCc.roa (hash: igeXZDlVZiFGBhSeEn8vHaUr4m/y63zRGTprEOmyBsQ=)
3: i5sBY-7p55KqoWt9UQXTRyEfMSM.crl (hash: bSF09GQT2z7ugAbAZ+bQ24EgJRi44euM5xn6i158msk=)
4: t9CNJf3eXwpeMjr9B2y5JwU1fgQ.roa (hash: 1VYdgaCmthgCjQEP8F7ZlA1j3DUuIWlR2jF27HX+0/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:dd:51:d6:8f:e2:a4:57:0e:d8:ee:4d:d3:85:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Validity
Not Before: Sep 7 03:01:11 2025 GMT
Not After : Sep 8 03:01:11 2025 GMT
Subject: CN=a2838ae7f305be696371a2e1b38a6e4542206b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:7f:8b:65:d2:a1:8d:67:94:80:2b:ea:3e:
29:6f:fb:e5:5a:be:01:dd:eb:4c:3c:55:be:fd:82:
84:97:17:e5:a5:a5:b9:9a:28:da:56:4a:ef:f7:e5:
d5:b7:f3:3e:5f:61:67:20:8a:a9:db:18:32:54:c3:
07:c0:56:7c:69:68:29:ce:32:6a:1e:40:ed:85:ab:
f7:67:9a:8c:d1:d4:96:0d:1e:b5:90:78:4d:ca:b8:
54:51:35:1a:d7:6c:35:3c:a9:d7:53:88:a3:d8:84:
2a:35:95:bb:11:76:f5:63:66:ab:50:12:d1:36:c2:
5f:e8:59:fc:57:1a:13:7f:02:0a:ec:55:32:d9:b3:
84:2b:31:f2:c6:78:4e:9b:18:42:35:08:52:64:8c:
7e:2b:91:b5:19:38:ae:b7:b7:7d:13:c5:2c:08:fc:
82:b0:48:48:74:40:64:84:b1:3e:a3:ab:be:1c:3b:
43:84:4f:47:ce:d4:d3:68:30:d8:2c:d9:0d:b2:1d:
3e:77:ee:9a:f4:f6:ec:95:86:b8:6f:d6:f1:21:d9:
af:b2:6f:ad:65:f4:81:c7:60:a6:0d:10:0a:09:b6:
68:6e:3c:2c:0a:de:0f:12:e3:93:2e:0c:11:45:30:
1b:d0:a9:12:a4:e4:db:2f:ff:d3:ce:95:b4:ca:8f:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:83:8A:E7:F3:05:BE:69:63:71:A2:E1:B3:8A:6E:45:42:20:6B:3E
X509v3 Authority Key Identifier:
keyid:8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cf:ee:0f:73:f8:fe:a8:53:59:71:28:25:41:b8:16:99:43:
a5:0c:f4:5f:fa:13:5e:f9:07:0e:43:7e:1e:b7:0b:4a:a4:78:
9d:3c:6d:3f:91:0c:79:a4:3d:39:99:19:b1:67:94:36:80:b5:
f5:41:18:44:7c:f1:0b:43:1d:d7:6f:83:dd:72:67:23:6e:d9:
bf:5a:c6:86:61:c1:00:2b:3d:5b:5a:1d:a7:d2:2e:09:b5:d1:
0e:cf:8f:40:b1:bf:d8:83:3c:3e:21:6b:9e:0b:dd:4f:81:4e:
a5:05:f7:09:71:1a:d7:a4:47:a2:76:e5:87:b3:ce:e0:58:5f:
88:7f:77:82:f8:71:fc:74:ee:c4:11:49:b3:61:01:e0:ff:5b:
1d:d6:f0:56:b7:f9:59:c3:5f:b5:6e:05:2f:bd:b3:ad:98:10:
46:75:e9:5d:1b:ec:54:cf:f0:1b:68:0c:6d:b6:bc:85:d7:06:
de:4a:74:6c:98:2a:30:03:01:4e:62:e5:24:32:92:13:d0:e8:
a1:7a:ba:68:5a:ce:e5:7e:c2:0f:3b:94:15:4b:71:bd:1b:ab:
e0:60:e0:74:06:c2:0e:22:23:25:0f:9a:6b:44:b9:ad:a3:9c:
fb:a9:28:8e:62:a0:c6:fd:a4:0d:87:2d:fc:71:63:e2:18:fe:
0e:cd:d1:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHt1R1o/ipFcO2O5N04VZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOWIwMTYzZWVlOWU3OTJhYWExNmI3ZDUxMDVkMzQ3MjEx
ZjMxMjMwHhcNMjUwOTA3MDMwMTExWhcNMjUwOTA4MDMwMTExWjAzMTEwLwYDVQQD
EyhhMjgzOGFlN2YzMDViZTY5NjM3MWEyZTFiMzhhNmU0NTQyMjA2YjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU5/i2XSoY1nlIAr6j4pb/vlWr4B
3etMPFW+/YKElxflpaW5mijaVkrv9+XVt/M+X2FnIIqp2xgyVMMHwFZ8aWgpzjJq
HkDthav3Z5qM0dSWDR61kHhNyrhUUTUa12w1PKnXU4ij2IQqNZW7EXb1Y2arUBLR
NsJf6Fn8VxoTfwIK7FUy2bOEKzHyxnhOmxhCNQhSZIx+K5G1GTiut7d9E8UsCPyC
sEhIdEBkhLE+o6u+HDtDhE9HztTTaDDYLNkNsh0+d+6a9PbslYa4b9bxIdmvsm+t
ZfSBx2CmDRAKCbZobjwsCt4PEuOTLgwRRTAb0KkSpOTbL//TzpW0yo/fHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKDiufzBb5pY3Gi4bOKbkVCIGs+MB8GA1UdIwQY
MBaAFIubAWPu6eeSqqFrfVEF00chHzEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yYjgwMGUtNjk1My00MDA5LWIxOTUt
NDFiMjY2MDdiZjM2LzEvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yYjgwMGUtNjk1My00MDA5LWIxOTUtNDFiMjY2MDdiZjM2
LzEvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfc/uD3P4
/qhTWXEoJUG4FplDpQz0X/oTXvkHDkN+HrcLSqR4nTxtP5EMeaQ9OZkZsWeUNoC1
9UEYRHzxC0Md12+D3XJnI27Zv1rGhmHBACs9W1odp9IuCbXRDs+PQLG/2IM8PiFr
ngvdT4FOpQX3CXEa16RHonblh7PO4FhfiH93gvhx/HTuxBFJs2EB4P9bHdbwVrf5
WcNftW4FL72zrZgQRnXpXRvsVM/wG2gMbba8hdcG3kp0bJgqMAMBTmLlJDKSE9Do
oXq6aFrO5X7CDzuUFUtxvRur4GDgdAbCDiIjJQ+aa0S5raOc+6kojmKgxv2kDYct
/HFj4hj+Ds3RrA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:15 2025 by rpki-client