Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File: INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier: QfWAGkIXDCxpuJPzTAN+8Q0rySQ13ORT97wTQ99Oe2I=
Subject key identifier: C5:99:96:50:A8:E6:27:F9:88:9E:BF:0B:15:7A:BB:7E:29:23:43:4B
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial: 019A70A57E982597BF616A9636436FF463F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number: 0C65
Signing time: Tue 11 Nov 2025 02:01:25 +0000
Manifest this update: Tue 11 Nov 2025 02:01:25 +0000
Manifest next update: Wed 12 Nov 2025 02:01:25 +0000
Files and hashes: 1: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: SRhee/9NSP7bkpwUlnileIe7s9UVGC6g7gLtcdVLcOg=)
2: ttJJaBUZDaYcQDBtp6etg0tHOcw.roa (hash: eyDaETbBTLM6QaTgVh4ZT2/g+b+CTdUyos3+nCYyg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:7e:98:25:97:bf:61:6a:96:36:43:6f:f4:63:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
Validity
Not Before: Nov 11 02:01:25 2025 GMT
Not After : Nov 12 02:01:25 2025 GMT
Subject: CN=c5999650a8e627f9889ebf0b157abb7e2923434b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:3d:96:1d:6b:75:7c:d7:73:8b:f5:ff:f1:
97:30:91:a2:68:65:15:49:cc:a8:3e:f1:bd:8e:a5:
69:b1:91:7e:d5:91:ae:0d:bb:f7:7d:43:7f:f8:52:
a5:7d:9d:96:56:45:a3:b1:1a:98:19:c2:a1:60:65:
d6:65:ae:43:30:74:78:07:0f:12:76:b2:09:5d:98:
19:a1:ab:4a:d8:e1:3a:c4:38:e9:a6:52:dc:a8:0e:
a3:9e:d3:cd:ea:b4:4f:fd:09:9d:fd:cd:24:ad:4c:
8e:7e:f7:3b:d4:fe:be:a4:58:9f:88:49:4e:d8:c4:
1e:6c:37:bb:ed:71:35:f7:e8:d7:01:1c:e6:33:14:
38:93:69:8f:6a:27:34:de:dd:9d:31:86:e0:78:59:
6d:52:d4:cf:78:6d:19:11:0e:34:b0:c3:b8:cf:54:
36:7a:69:6b:94:f7:db:79:9d:d9:0b:98:ea:98:30:
88:5a:ef:b4:bf:87:17:fa:fd:df:4e:ee:45:c4:54:
7c:2e:c4:e8:34:5e:de:bd:6c:19:19:2d:92:6b:e6:
d1:43:e6:02:9d:c7:eb:ca:26:ff:0a:f3:b1:35:6d:
64:e9:67:de:fe:3f:cb:fd:41:19:6e:d6:99:fd:c7:
fa:07:1c:2f:4e:ea:a2:b1:37:9a:77:7f:13:bc:ae:
0e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:99:96:50:A8:E6:27:F9:88:9E:BF:0B:15:7A:BB:7E:29:23:43:4B
X509v3 Authority Key Identifier:
keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:0f:be:49:87:58:de:9b:56:ea:96:83:87:5f:94:ba:42:10:
b1:9f:30:1c:99:50:29:c3:fc:e0:0d:1a:9d:f0:af:60:d6:19:
36:7b:99:90:4b:f6:ae:6e:34:86:4b:02:6f:76:91:fc:2f:c1:
ba:10:a9:d9:7f:25:a4:6a:29:81:aa:94:15:97:56:78:af:e0:
5f:04:0a:8e:59:83:39:bb:fe:d8:e0:fc:d9:c6:2a:ae:cc:30:
a3:6b:bc:0e:c2:22:60:75:2a:7a:ea:57:fd:8c:40:55:e2:40:
82:b3:ba:85:34:3a:5c:c6:0f:2e:92:fd:38:3d:fe:cb:29:da:
88:f3:89:64:70:c0:03:d1:fa:bf:4e:64:d6:7a:61:69:95:c9:
16:c4:0c:03:e0:27:8e:80:4b:cb:1d:41:ea:73:05:05:fe:08:
ef:b4:fb:d3:ef:cf:46:a6:28:2f:8d:9d:7f:33:b7:92:03:34:
08:c6:2d:77:47:b3:cc:9f:ac:f1:b9:1d:80:1e:cf:06:fc:7b:
da:49:8c:e7:bf:b8:97:50:59:6c:e0:3b:19:c4:92:1d:05:1b:
c9:77:22:97:90:8b:1e:34:da:79:b2:fe:91:e8:31:60:20:69:
04:64:1c:77:f5:90:ba:8d:00:ef:ba:e9:f8:7f:dc:c6:6c:0d:
3e:3f:f7:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpX6YJZe/YWqWNkNv9GP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDViODQ4M2IxNzEyYjcwMjM1NDEwNTZlNzMwODUzNjZk
MjkzNDYwHhcNMjUxMTExMDIwMTI1WhcNMjUxMTEyMDIwMTI1WjAzMTEwLwYDVQQD
EyhjNTk5OTY1MGE4ZTYyN2Y5ODg5ZWJmMGIxNTdhYmI3ZTI5MjM0MzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq109lh1rdXzXc4v1//GXMJGiaGUV
ScyoPvG9jqVpsZF+1ZGuDbv3fUN/+FKlfZ2WVkWjsRqYGcKhYGXWZa5DMHR4Bw8S
drIJXZgZoatK2OE6xDjpplLcqA6jntPN6rRP/Qmd/c0krUyOfvc71P6+pFifiElO
2MQebDe77XE19+jXARzmMxQ4k2mPaic03t2dMYbgeFltUtTPeG0ZEQ40sMO4z1Q2
emlrlPfbeZ3ZC5jqmDCIWu+0v4cX+v3fTu5FxFR8LsToNF7evWwZGS2Sa+bRQ+YC
ncfryib/CvOxNW1k6Wfe/j/L/UEZbtaZ/cf6BxwvTuqisTead38TvK4OGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWZllCo5if5iJ6/CxV6u34pI0NLMB8GA1UdIwQY
MBaAFCDVuEg7FxK3AjVBBW5zCFNm0pNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEt
MGMyZmY3OTM3ZTZmLzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEtMGMyZmY3OTM3ZTZm
LzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyg++SYdY
3ptW6paDh1+UukIQsZ8wHJlQKcP84A0anfCvYNYZNnuZkEv2rm40hksCb3aR/C/B
uhCp2X8lpGopgaqUFZdWeK/gXwQKjlmDObv+2OD82cYqrswwo2u8DsIiYHUqeupX
/YxAVeJAgrO6hTQ6XMYPLpL9OD3+yynaiPOJZHDAA9H6v05k1nphaZXJFsQMA+An
joBLyx1B6nMFBf4I77T70+/PRqYoL42dfzO3kgM0CMYtd0ezzJ+s8bkdgB7PBvx7
2kmM57+4l1BZbOA7GcSSHQUbyXcil5CLHjTaebL+kegxYCBpBGQcd/WQuo0A77rp
+H/cxmwNPj/3Ew==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:58 2025 by rpki-client