Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
File: i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json)
Hash identifier: pY0NEIZpNsfAa2HUPgscGIJrtI219Nx8QuwUo73uWs0=
Subject key identifier: 9C:BA:72:46:B4:6F:12:29:C1:07:8A:4A:F1:BC:3C:FA:44:9C:44:15
Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
Certificate issuer: /CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Certificate serial: 019A73012F741E854958851A23B3497BCA87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
Manifest number: 0321
Signing time: Tue 11 Nov 2025 13:00:48 +0000
Manifest this update: Tue 11 Nov 2025 13:00:48 +0000
Manifest next update: Wed 12 Nov 2025 13:00:48 +0000
Files and hashes: 1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: A4DnGzGS2GIradjN5Hml1tunWD/QAD+EN/K/e2yu82I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:2f:74:1e:85:49:58:85:1a:23:b3:49:7b:ca:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Validity
Not Before: Nov 11 13:00:48 2025 GMT
Not After : Nov 12 13:00:48 2025 GMT
Subject: CN=9cba7246b46f1229c1078a4af1bc3cfa449c4415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:d8:74:5e:2d:39:a0:8e:ce:9b:d1:ab:c6:
e9:8d:ce:88:fd:b2:0e:af:92:c3:a5:40:2d:63:92:
3c:ec:a9:c1:38:13:3b:18:67:d2:71:b5:1e:69:11:
35:89:ee:09:35:0e:fc:65:d1:d2:be:17:51:37:9a:
b5:eb:0f:3b:eb:39:4b:f2:1f:11:05:b6:14:18:0e:
51:a5:21:c6:04:f1:b0:45:89:72:e4:51:79:08:5c:
cb:9f:1c:21:03:a6:43:56:4a:ba:a9:96:0f:fe:b6:
60:83:d5:48:31:13:45:06:a3:4b:82:4d:06:36:b0:
ad:05:5a:70:96:88:02:12:8f:e2:9e:d2:05:99:ce:
bc:75:16:e9:8f:74:3e:e3:5d:e3:13:23:60:cf:c1:
d6:e0:b4:e1:51:6c:c4:7c:a5:82:97:78:18:10:07:
12:68:94:a9:b9:04:ba:bf:4d:46:5b:03:ff:68:51:
9a:5b:a4:bc:65:25:33:11:b1:1e:11:eb:23:d7:d3:
d1:4a:2a:68:05:90:60:91:ef:01:d4:61:d3:32:3a:
13:1d:f1:50:55:c5:ee:51:d6:c6:4c:3b:b0:b2:98:
4b:80:9e:ec:80:66:a0:d3:b7:06:a0:51:32:f8:9e:
cd:ef:40:4a:81:9a:f4:b8:4b:9a:f6:8f:0e:a2:ce:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BA:72:46:B4:6F:12:29:C1:07:8A:4A:F1:BC:3C:FA:44:9C:44:15
X509v3 Authority Key Identifier:
keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5b:2d:01:7f:8d:90:42:81:d0:10:71:48:3b:26:de:40:fc:
b6:95:cf:95:ad:8c:9b:63:55:28:60:35:7c:b2:d1:bd:20:98:
01:4b:b2:d6:f1:27:c9:d1:10:83:9e:9b:6d:9d:b1:b2:46:f1:
cf:de:70:63:0c:7c:77:3f:53:d0:a0:b9:56:ab:b7:36:42:28:
9b:fb:05:89:dc:36:61:82:67:66:48:4c:f0:6a:7e:94:6d:fc:
de:ce:c8:de:78:e6:38:5f:d3:49:b3:60:a0:dd:28:fa:81:e7:
0c:35:79:fc:43:1d:09:14:f1:f8:7f:f3:64:d4:7a:0a:86:dd:
ca:08:05:81:f8:86:77:25:74:84:1e:cf:43:12:7e:34:b5:e6:
92:9f:a7:d7:e3:83:46:38:44:1d:1b:bc:2b:57:05:46:a5:88:
17:18:27:07:87:1e:71:2d:67:59:71:e2:4a:67:5b:d9:72:8c:
f4:08:0e:cd:b1:eb:12:0d:59:66:5a:c1:64:f4:88:5f:24:35:
7c:69:48:65:9a:bb:8b:c5:8e:c4:32:96:a0:4b:76:c8:f7:bc:
c6:d1:41:e5:b0:92:90:88:c5:81:e7:19:80:7a:77:be:44:82:
57:79:ba:61:06:28:32:36:e9:2e:42:de:c1:45:89:e0:0f:06:
1f:1a:68:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAS90HoVJWIUaI7NJe8qHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjkxNDk4ODE5NzZlZTI3M2M1MTEwNDNlNTgwYjdkMWQx
YmE3YzQwHhcNMjUxMTExMTMwMDQ4WhcNMjUxMTEyMTMwMDQ4WjAzMTEwLwYDVQQD
Eyg5Y2JhNzI0NmI0NmYxMjI5YzEwNzhhNGFmMWJjM2NmYTQ0OWM0NDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcfYdF4tOaCOzpvRq8bpjc6I/bIO
r5LDpUAtY5I87KnBOBM7GGfScbUeaRE1ie4JNQ78ZdHSvhdRN5q16w876zlL8h8R
BbYUGA5RpSHGBPGwRYly5FF5CFzLnxwhA6ZDVkq6qZYP/rZgg9VIMRNFBqNLgk0G
NrCtBVpwlogCEo/intIFmc68dRbpj3Q+413jEyNgz8HW4LThUWzEfKWCl3gYEAcS
aJSpuQS6v01GWwP/aFGaW6S8ZSUzEbEeEesj19PRSipoBZBgke8B1GHTMjoTHfFQ
VcXuUdbGTDuwsphLgJ7sgGag07cGoFEy+J7N70BKgZr0uEua9o8Oos49hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJy6cka0bxIpwQeKSvG8PPpEnEQVMB8GA1UdIwQY
MBaAFItpFJiBl27ic8URBD5YC30dG6fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYt
OTYyMDMyMmU0ZjE1LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYtOTYyMDMyMmU0ZjE1
LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVstAX+N
kEKB0BBxSDsm3kD8tpXPla2Mm2NVKGA1fLLRvSCYAUuy1vEnydEQg56bbZ2xskbx
z95wYwx8dz9T0KC5Vqu3NkIom/sFidw2YYJnZkhM8Gp+lG383s7I3njmOF/TSbNg
oN0o+oHnDDV5/EMdCRTx+H/zZNR6CobdyggFgfiGdyV0hB7PQxJ+NLXmkp+n1+OD
RjhEHRu8K1cFRqWIFxgnB4cecS1nWXHiSmdb2XKM9AgOzbHrEg1ZZlrBZPSIXyQ1
fGlIZZq7i8WOxDKWoEt2yPe8xtFB5bCSkIjFgecZgHp3vkSCV3m6YQYoMjbpLkLe
wUWJ4A8GHxpodw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:16 2025 by rpki-client