Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: lO2aCLEZ68NU9mH9qvPRabCAy69e31ihrSN2za/wp+A=
Subject key identifier: 4A:47:29:6F:DF:B9:7E:FA:06:47:37:5B:F4:47:8B:F4:13:E5:C0:9B
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019A24AEBA5EF83C6E82879557BE47154BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 1689
Signing time: Mon 27 Oct 2025 08:00:21 +0000
Manifest this update: Mon 27 Oct 2025 08:00:21 +0000
Manifest next update: Tue 28 Oct 2025 08:00:21 +0000
Files and hashes: 1: 92LlPsnUIAq2_qCu90vUr2n0raU.roa (hash: foBfA1Aqx+KxyLS/ipFmoqJrrHi0Kf81SvkfmiaHeCY=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: WR+Y6TWqvDxcfcKKnTSo69lfFS0Tdr4t60IVjD42lGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:ba:5e:f8:3c:6e:82:87:95:57:be:47:15:4b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Oct 27 08:00:21 2025 GMT
Not After : Oct 28 08:00:21 2025 GMT
Subject: CN=4a47296fdfb97efa0647375bf4478bf413e5c09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c5:6a:50:39:3d:ba:f6:c3:cf:0f:35:1a:88:
87:9b:31:f5:d3:40:3f:2e:d4:04:22:e7:9a:48:8f:
26:20:23:d8:24:ad:4c:8a:af:09:2d:a9:1c:3a:be:
aa:dd:81:ef:4b:78:d3:3b:20:43:c8:58:dc:76:cf:
9c:ed:63:58:5a:08:df:85:04:e6:c9:06:3d:d1:84:
16:06:2c:e0:05:4c:ef:fc:ab:9e:a5:f2:db:03:95:
1b:b8:e5:ea:9a:a0:3d:7d:a1:2f:dd:95:4a:a1:4b:
c1:be:b2:ed:1b:61:dc:78:bf:9a:aa:ac:ce:9f:0c:
3f:f2:12:15:f7:c2:ad:a7:85:65:31:59:eb:58:1b:
c1:a0:d2:31:62:44:37:36:4d:94:ac:11:4d:8c:6c:
98:55:9a:0f:a8:6b:79:9e:45:16:9d:c7:d4:26:29:
5a:71:bc:64:96:43:e3:69:1d:29:0b:7b:c5:b6:05:
dd:66:36:89:e8:63:c9:59:f7:a8:14:14:10:14:9e:
69:67:df:b9:3d:4a:0a:98:83:01:8a:a6:ed:85:2c:
88:b7:19:1c:92:6d:71:a7:5a:50:b2:84:f8:6c:8b:
c6:33:73:2c:9b:a5:05:03:25:b5:ae:9a:3e:e8:0a:
af:f6:99:c7:09:1c:62:3f:5e:3c:aa:c7:5d:b2:59:
24:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:47:29:6F:DF:B9:7E:FA:06:47:37:5B:F4:47:8B:F4:13:E5:C0:9B
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1a:6a:0e:5a:fb:ce:0b:6f:fe:fd:d8:a5:26:ec:1c:d3:da:
9a:be:a9:1b:91:41:f8:b4:05:02:e8:9c:a5:d2:92:fd:35:c3:
8b:cf:b4:eb:9e:e5:fe:ae:47:91:7a:ad:85:5a:a9:3e:41:f1:
57:ba:31:de:ee:e1:c6:ea:e9:4d:a0:2f:df:e9:6e:ab:3f:f6:
81:8a:3a:3e:70:ec:ee:ac:f0:fd:ca:5e:54:7d:70:73:94:8e:
59:44:60:4c:fe:c0:1a:7e:91:24:d3:b2:2d:17:ee:93:d4:81:
5d:e8:5c:6e:1c:0a:cc:b6:cc:d8:3c:4d:40:92:09:b3:33:4f:
9d:c6:15:b7:0a:d3:6d:19:8c:c1:f7:38:96:28:3c:6a:69:dd:
d9:f6:5f:5a:4e:c9:3a:15:59:9e:3b:cf:5c:58:0a:37:8f:25:
e0:e6:65:39:35:3b:88:76:a9:00:47:3c:f0:82:b5:13:ef:77:
a4:cf:31:dc:57:c0:d0:92:f9:0d:ef:cd:37:89:35:78:6c:ac:
60:5f:4d:4a:d9:b1:97:e3:2f:db:14:fb:91:db:72:44:58:9d:
db:68:79:b1:86:74:bb:52:c2:79:49:7d:b0:b5:7d:34:42:8b:
2c:6d:1b:c6:bf:01:f1:e0:58:40:2f:62:17:e1:97:2d:c6:da:
bd:25:19:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokrrpe+DxugoeVV75HFUuxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2U0MjgxYTk5NGQ1MjE2NmVmM2ZmMTc3MjhiYWUyMTg4
NTVmYzQwHhcNMjUxMDI3MDgwMDIxWhcNMjUxMDI4MDgwMDIxWjAzMTEwLwYDVQQD
Eyg0YTQ3Mjk2ZmRmYjk3ZWZhMDY0NzM3NWJmNDQ3OGJmNDEzZTVjMDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8VqUDk9uvbDzw81GoiHmzH100A/
LtQEIueaSI8mICPYJK1Miq8JLakcOr6q3YHvS3jTOyBDyFjcds+c7WNYWgjfhQTm
yQY90YQWBizgBUzv/KuepfLbA5UbuOXqmqA9faEv3ZVKoUvBvrLtG2HceL+aqqzO
nww/8hIV98Ktp4VlMVnrWBvBoNIxYkQ3Nk2UrBFNjGyYVZoPqGt5nkUWncfUJila
cbxklkPjaR0pC3vFtgXdZjaJ6GPJWfeoFBQQFJ5pZ9+5PUoKmIMBiqbthSyItxkc
km1xp1pQsoT4bIvGM3Msm6UFAyW1rpo+6Aqv9pnHCRxiP148qsddslkk2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpHKW/fuX76Bkc3W/RHi/QT5cCbMB8GA1UdIwQY
MBaAFIvOQoGplNUhZu8/8XcouuIYhV/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUt
YTFlMDFjNjMzNDNhLzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUtYTFlMDFjNjMzNDNh
LzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRpqDlr7
zgtv/v3YpSbsHNPamr6pG5FB+LQFAuicpdKS/TXDi8+0657l/q5HkXqthVqpPkHx
V7ox3u7hxurpTaAv3+luqz/2gYo6PnDs7qzw/cpeVH1wc5SOWURgTP7AGn6RJNOy
LRfuk9SBXehcbhwKzLbM2DxNQJIJszNPncYVtwrTbRmMwfc4lig8amnd2fZfWk7J
OhVZnjvPXFgKN48l4OZlOTU7iHapAEc88IK1E+93pM8x3FfA0JL5De/NN4k1eGys
YF9NStmxl+Mv2xT7kdtyRFid22h5sYZ0u1LCeUl9sLV9NEKLLG0bxr8B8eBYQC9i
F+GXLcbavSUZdg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 09:19:33 2025 by rpki-client