Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: I5GEfXdvW2AdMj5pCuJ2NR6X8RfWc4dFfypc1LXUCsA=
Subject key identifier: E4:68:2D:8D:04:26:F7:EE:4A:4C:CC:50:63:AA:63:C6:03:FB:F6:53
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 019A7149F72CB4A3BFBD8448A0AF55971243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 14EB
Signing time: Tue 11 Nov 2025 05:01:03 +0000
Manifest this update: Tue 11 Nov 2025 05:01:03 +0000
Manifest next update: Wed 12 Nov 2025 05:01:03 +0000
Files and hashes: 1: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (hash: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=)
2: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (hash: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=)
3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: 2M5Lw0ANP1DtYSVGk0x/C49ncLMTRL2sbzE8+g8tKu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f7:2c:b4:a3:bf:bd:84:48:a0:af:55:97:12:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Nov 11 05:01:03 2025 GMT
Not After : Nov 12 05:01:03 2025 GMT
Subject: CN=e4682d8d0426f7ee4a4ccc5063aa63c603fbf653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:a3:5f:3b:53:16:c8:c4:cb:ff:fe:03:12:
43:a6:ef:80:ad:07:55:81:31:90:67:4e:58:71:c6:
54:c4:b8:d8:01:a5:a6:65:78:21:99:f4:91:a7:5d:
0d:d9:f0:37:20:36:7b:82:fe:3f:c2:af:46:79:d9:
35:a5:07:78:5f:39:ce:11:8a:7f:4a:b6:53:43:d4:
cf:28:54:29:03:c3:58:d5:3d:6b:09:0a:77:dc:1b:
a1:3d:53:5e:c3:44:85:ab:12:ba:dd:4c:ce:9d:61:
38:0d:aa:03:bd:54:3c:ba:49:73:c8:29:b5:54:2b:
35:5e:89:db:9f:a5:86:13:fe:fc:fc:dc:da:8b:2a:
0a:ef:fe:62:40:8d:db:82:35:ff:4d:51:4a:2d:e1:
31:28:90:10:15:12:9a:65:c7:14:f0:3d:32:f1:f3:
4f:ca:a3:a0:ca:a0:ad:53:15:a4:bf:56:6a:9b:be:
ff:52:72:b9:78:7d:66:22:d2:34:e0:64:4e:50:73:
64:0e:ef:c4:0c:5b:2a:24:51:24:14:7c:55:0a:d5:
ee:9f:c4:91:c1:d8:48:55:2e:4c:5e:1e:e3:d0:88:
a0:11:e1:85:d5:ee:4b:6d:34:46:92:e4:69:77:2d:
38:11:68:3d:70:f1:3e:39:97:b4:6f:d4:bb:af:cf:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:68:2D:8D:04:26:F7:EE:4A:4C:CC:50:63:AA:63:C6:03:FB:F6:53
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e0:03:b6:9b:1f:6b:de:32:b3:40:5f:18:28:2d:93:6c:af:
f6:76:e6:47:20:2c:ea:98:cb:85:82:e6:ad:fd:6e:69:52:2f:
26:cb:90:b4:f5:34:bb:52:c8:b4:2a:1a:aa:45:32:90:0c:0c:
24:22:90:0b:bd:ae:a0:55:a1:3f:1f:dd:a0:c7:1b:96:5f:1b:
cd:c5:5e:0b:4b:84:dc:01:d2:18:99:95:c6:5b:91:f5:e1:77:
eb:84:87:ab:3c:dd:e3:0c:3a:6e:15:fe:47:f6:e8:93:ea:e8:
4a:6f:fb:d6:3e:cc:28:fa:14:ff:94:7d:e6:10:13:eb:67:6b:
c8:8d:d7:b3:56:38:ab:bc:09:1c:ba:68:fb:71:1a:7b:db:f5:
8a:7a:e1:71:5c:a9:a4:5a:d7:07:2f:0e:74:17:4f:1c:32:95:
d4:64:e9:ac:86:5f:e2:0e:d4:7f:3b:21:76:6f:c6:2d:b8:61:
da:c8:c6:5c:12:95:91:c3:7a:7b:78:42:73:9d:e3:73:fe:9f:
e8:24:ed:68:40:67:ad:15:90:24:a0:3c:04:0b:fc:da:81:4f:
6e:12:ff:76:65:89:39:66:03:eb:70:e6:66:46:8b:d4:58:ac:
cc:00:13:ee:01:47:7f:f8:51:c6:41:14:e7:17:12:a4:50:e6:
f0:63:97:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSfcstKO/vYRIoK9VlxJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZDRiY2JmMzVkYjdmZTJlZjY2MzUyMmE1YTNhMzk3OWE0
ZjFmZjgwHhcNMjUxMTExMDUwMTAzWhcNMjUxMTEyMDUwMTAzWjAzMTEwLwYDVQQD
EyhlNDY4MmQ4ZDA0MjZmN2VlNGE0Y2NjNTA2M2FhNjNjNjAzZmJmNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3qjXztTFsjEy//+AxJDpu+ArQdV
gTGQZ05YccZUxLjYAaWmZXghmfSRp10N2fA3IDZ7gv4/wq9Gedk1pQd4XznOEYp/
SrZTQ9TPKFQpA8NY1T1rCQp33BuhPVNew0SFqxK63UzOnWE4DaoDvVQ8uklzyCm1
VCs1Xonbn6WGE/78/NzaiyoK7/5iQI3bgjX/TVFKLeExKJAQFRKaZccU8D0y8fNP
yqOgyqCtUxWkv1Zqm77/UnK5eH1mItI04GROUHNkDu/EDFsqJFEkFHxVCtXun8SR
wdhIVS5MXh7j0IigEeGF1e5LbTRGkuRpdy04EWg9cPE+OZe0b9S7r880tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORoLY0EJvfuSkzMUGOqY8YD+/ZTMB8GA1UdIwQY
MBaAFIvUvL8123/i72Y1IqWjo5eaTx/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAt
NDc4ZWQ3ZjhkMDVlLzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAtNDc4ZWQ3ZjhkMDVl
LzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieADtpsf
a94ys0BfGCgtk2yv9nbmRyAs6pjLhYLmrf1uaVIvJsuQtPU0u1LItCoaqkUykAwM
JCKQC72uoFWhPx/doMcbll8bzcVeC0uE3AHSGJmVxluR9eF364SHqzzd4ww6bhX+
R/bok+roSm/71j7MKPoU/5R95hAT62dryI3Xs1Y4q7wJHLpo+3Eae9v1inrhcVyp
pFrXBy8OdBdPHDKV1GTprIZf4g7Ufzshdm/GLbhh2sjGXBKVkcN6e3hCc53jc/6f
6CTtaEBnrRWQJKA8BAv82oFPbhL/dmWJOWYD63DmZkaL1FiszAAT7gFHf/hRxkEU
5xcSpFDm8GOXnQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:48 2025 by rpki-client