Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
File: iYh94B2LHL1Qt126yRM59mF6TYo.mft (raw, json)
Hash identifier: FrJOy5LS7rd/nYEUITh9/rx7ET8/yKF3oHQXwcHXrjA=
Subject key identifier: C6:E8:54:B7:28:BF:85:D2:E8:4E:1B:4F:DD:14:3D:1F:E6:34:7E:15
Authority key identifier: 89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
Certificate issuer: /CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Certificate serial: 019A7225AC7F8AC891A254DD998AEB4EAA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
Manifest number: 15F5
Signing time: Tue 11 Nov 2025 09:01:02 +0000
Manifest this update: Tue 11 Nov 2025 09:01:02 +0000
Manifest next update: Wed 12 Nov 2025 09:01:02 +0000
Files and hashes: 1: iYh94B2LHL1Qt126yRM59mF6TYo.crl (hash: CtXX/+SKdIuZZ/ZBHeceEnpj3pFma8X7hoQ+svnEMtw=)
2: jAe0olQrTlqlwekCa7zU__XvOnI.roa (hash: lpxqZITJHJnTC06LkfUlinyvWGfnxykj2N1zFv1cD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ac:7f:8a:c8:91:a2:54:dd:99:8a:eb:4e:aa:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Validity
Not Before: Nov 11 09:01:02 2025 GMT
Not After : Nov 12 09:01:02 2025 GMT
Subject: CN=c6e854b728bf85d2e84e1b4fdd143d1fe6347e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:d9:f6:f6:a4:8b:02:f7:40:51:fd:0f:37:
ac:b7:ed:ea:92:24:51:da:99:fc:7c:5d:7a:a1:66:
24:5b:fe:32:dc:2a:bf:83:d0:9e:bb:04:f7:1b:b9:
9f:6e:3e:ab:10:a9:72:f1:90:71:4d:57:92:ad:bb:
76:df:78:ad:4b:c8:60:28:cc:9d:01:9f:3f:2f:44:
d7:99:8d:37:b2:bf:bb:91:54:e5:72:49:98:48:2e:
0b:0b:e6:30:64:27:44:63:5b:81:60:a9:43:28:27:
ce:14:46:4c:22:f5:c2:6f:6b:78:b5:31:af:b7:59:
39:30:4a:a2:c6:5d:2c:24:39:ea:04:8d:ea:53:9c:
b9:8e:88:08:e0:41:21:be:9b:eb:21:d3:a5:59:56:
64:66:0c:63:99:dd:2a:f0:03:57:5c:cf:3a:c0:1a:
9d:5d:bd:f9:8f:59:68:bc:09:1e:6f:1b:b3:93:eb:
e9:4d:c4:7d:02:ee:cc:a8:68:f1:2f:99:b9:a8:e7:
d9:4e:c6:73:00:0f:d5:5c:18:04:70:20:d7:15:71:
fc:0f:a3:b7:88:7f:a7:4a:fd:9d:fa:a2:54:a8:39:
7b:ad:c7:09:e7:5c:48:35:8a:a5:2f:67:b5:d5:3c:
8f:bb:c9:ec:2d:db:68:26:3c:13:a1:b1:31:a8:91:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E8:54:B7:28:BF:85:D2:E8:4E:1B:4F:DD:14:3D:1F:E6:34:7E:15
X509v3 Authority Key Identifier:
keyid:89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e7:12:aa:b3:58:7a:7c:ed:81:af:b8:a9:61:06:24:fd:1b:
19:a8:bd:5e:24:3d:99:0b:af:89:2f:5b:f4:ab:0b:40:1d:90:
8e:3f:24:7c:82:16:d4:22:28:73:40:10:97:5a:4f:d6:98:84:
7b:6b:35:68:94:86:7b:29:af:d4:4e:36:ac:74:33:b5:64:46:
10:08:07:e4:f1:d3:0b:4c:1f:60:b6:9b:c3:6b:f2:64:ab:31:
6d:53:d6:80:fc:59:cf:bd:d0:a9:ca:ab:2d:64:43:cb:15:5d:
3c:e5:fe:5b:29:95:a9:b7:c9:0a:2a:57:31:f0:41:69:23:3a:
ea:43:2c:d5:e3:14:38:44:44:47:b5:06:8f:42:60:37:2e:18:
61:39:a4:ba:b0:75:15:ad:0b:bc:41:cc:2c:cf:3a:6d:1a:47:
3a:67:39:54:81:69:b5:67:6e:4b:56:c0:08:88:36:22:53:6a:
23:f2:c1:b9:70:29:cb:e5:a5:ae:2f:cd:2a:84:34:d8:da:55:
fc:e6:80:4f:2b:8f:3b:0c:db:e9:95:a1:a0:eb:49:fd:ea:5f:
07:de:0a:f0:03:5c:3b:e3:4d:34:0d:6a:19:5a:55:ad:e9:01:
68:8d:2a:16:34:90:5d:ca:2a:8e:8f:25:54:d1:6f:83:44:8d:
5b:20:b6:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJax/isiRolTdmYrrTqpjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ODg3ZGUwMWQ4YjFjYmQ1MGI3NWRiYWM5MTMzOWY2NjE3
YTRkOGEwHhcNMjUxMTExMDkwMTAyWhcNMjUxMTEyMDkwMTAyWjAzMTEwLwYDVQQD
EyhjNmU4NTRiNzI4YmY4NWQyZTg0ZTFiNGZkZDE0M2QxZmU2MzQ3ZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjzZ9vakiwL3QFH9Dzest+3qkiRR
2pn8fF16oWYkW/4y3Cq/g9CeuwT3G7mfbj6rEKly8ZBxTVeSrbt233itS8hgKMyd
AZ8/L0TXmY03sr+7kVTlckmYSC4LC+YwZCdEY1uBYKlDKCfOFEZMIvXCb2t4tTGv
t1k5MEqixl0sJDnqBI3qU5y5jogI4EEhvpvrIdOlWVZkZgxjmd0q8ANXXM86wBqd
Xb35j1lovAkebxuzk+vpTcR9Au7MqGjxL5m5qOfZTsZzAA/VXBgEcCDXFXH8D6O3
iH+nSv2d+qJUqDl7rccJ51xINYqlL2e11TyPu8nsLdtoJjwTobExqJGghwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMboVLcov4XS6E4bT90UPR/mNH4VMB8GA1UdIwQY
MBaAFImIfeAdixy9ULdduskTOfZhek2KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVloOTRCMkxITDFRdDEyNnlSTTU5bUY2VFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85Y2U3NDItMGM1ZC00YzM0LTg3NjUt
NWVkNTE1N2NlZDBhLzEvaVloOTRCMkxITDFRdDEyNnlSTTU5bUY2VFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS85Y2U3NDItMGM1ZC00YzM0LTg3NjUtNWVkNTE1N2NlZDBh
LzEvaVloOTRCMkxITDFRdDEyNnlSTTU5bUY2VFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALucSqrNY
enztga+4qWEGJP0bGai9XiQ9mQuviS9b9KsLQB2Qjj8kfIIW1CIoc0AQl1pP1piE
e2s1aJSGeymv1E42rHQztWRGEAgH5PHTC0wfYLabw2vyZKsxbVPWgPxZz73Qqcqr
LWRDyxVdPOX+WymVqbfJCipXMfBBaSM66kMs1eMUOERER7UGj0JgNy4YYTmkurB1
Fa0LvEHMLM86bRpHOmc5VIFptWduS1bACIg2IlNqI/LBuXApy+Wlri/NKoQ02NpV
/OaATyuPOwzb6ZWhoOtJ/epfB94K8ANcO+NNNA1qGVpVrekBaI0qFjSQXcoqjo8l
VNFvg0SNWyC2Dg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:42 2025 by rpki-client