Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
File: i6gkldaDsIyIGoGM0B-kL_9v9tE.mft (raw, json)
Hash identifier: hw1G1gSEumhDtsxcL7f39jkhmmZrQO/7aClqUdF398k=
Subject key identifier: D5:8A:A6:9C:C3:E0:17:1C:05:A3:A3:AF:8B:BE:54:F8:69:26:BB:B4
Authority key identifier: 8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1
Certificate issuer: /CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1
Certificate serial: 019A7301A619A2E9CDB70E083A11D91CFB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
Manifest number: 0315
Signing time: Tue 11 Nov 2025 13:01:18 +0000
Manifest this update: Tue 11 Nov 2025 13:01:18 +0000
Manifest next update: Wed 12 Nov 2025 13:01:18 +0000
Files and hashes: 1: i6gkldaDsIyIGoGM0B-kL_9v9tE.crl (hash: omPNn7tk+wkql6AGxPPR5NTcpU80gL2dLlHLnXRwgQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:a6:19:a2:e9:cd:b7:0e:08:3a:11:d9:1c:fb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1
Validity
Not Before: Nov 11 13:01:18 2025 GMT
Not After : Nov 12 13:01:18 2025 GMT
Subject: CN=d58aa69cc3e0171c05a3a3af8bbe54f86926bbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:b5:99:1c:f7:84:0e:5b:c6:44:e9:94:76:
35:aa:11:37:f8:90:43:4a:24:de:57:8c:20:b8:f8:
3a:32:56:6b:10:cc:2b:f7:67:3d:0f:23:9e:90:e5:
53:cc:6d:12:8b:70:4f:a1:5a:b9:85:1c:b3:2c:62:
f6:85:ea:d4:8c:7d:fb:a0:33:1d:5b:96:f6:3b:df:
26:c6:06:9c:35:9f:98:1e:17:6d:b6:e3:7a:69:7f:
0a:86:45:d7:df:16:b1:b4:b1:d6:65:52:b7:1e:78:
b2:8e:19:54:9a:9b:0e:47:46:73:a7:3d:41:c8:6b:
85:64:02:ed:44:d1:9f:7f:2c:0d:ad:fc:9b:8d:e9:
ba:25:a7:0d:8c:a9:0d:62:86:df:dd:34:55:9a:36:
ac:9e:b6:37:6f:f8:06:db:93:18:77:de:1b:78:d1:
5b:8d:9d:8a:3a:d2:bf:79:cf:f2:f6:a7:fc:61:cb:
82:36:25:75:b3:9f:4d:f7:d7:b7:9d:d9:e4:eb:c5:
1b:1f:b6:f0:52:17:f4:43:68:01:69:83:59:f2:11:
cf:15:ba:85:89:75:a5:7f:b4:af:65:01:9b:76:fa:
b3:f1:f5:7c:f4:e8:a8:91:08:c3:59:b3:60:47:10:
15:03:ae:5c:be:42:21:bf:85:f3:82:71:14:fa:d3:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8A:A6:9C:C3:E0:17:1C:05:A3:A3:AF:8B:BE:54:F8:69:26:BB:B4
X509v3 Authority Key Identifier:
keyid:8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f9:35:df:58:e6:6c:ba:1c:31:e4:94:40:f4:77:1a:39:7c:
38:69:5d:3a:ae:8d:57:75:42:37:a8:e0:bf:37:49:cb:92:e6:
9c:d9:89:3c:7f:6d:49:d0:61:64:3f:41:67:1a:dc:61:b9:0f:
d9:1b:08:94:8a:8e:44:fc:05:2e:97:4d:c8:ab:6e:ce:05:02:
e8:6d:29:e5:ba:bd:6f:55:1a:53:e2:47:2e:1b:4a:dc:a0:3b:
cf:69:b9:d8:33:c5:8d:e9:c1:42:25:f5:65:0b:ee:bb:3d:11:
ce:50:4c:98:cb:20:b6:cd:65:f4:53:15:41:39:df:53:58:c8:
87:ef:c8:dd:2f:0c:9d:b6:92:d8:f5:e3:6a:31:97:db:6e:52:
ff:cd:c9:18:a8:e4:75:b8:9d:17:0c:25:c5:02:87:3a:ef:2f:
14:d3:a4:6d:8b:48:fc:2a:81:be:2a:a3:f6:7d:26:b0:ae:8d:
03:9f:ce:ca:48:3b:92:67:26:73:59:4f:8c:64:46:0a:64:43:
0b:61:0a:b7:37:b7:c2:65:7a:16:df:d7:6d:d7:3c:b5:65:c7:
d6:97:f4:f7:a1:43:0b:45:0c:8d:d7:76:b9:a1:3d:7b:a9:60:
fb:5f:02:b2:ef:46:29:1d:e3:e4:08:aa:4f:df:13:3f:f7:af:
ab:74:19:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAaYZounNtw4IOhHZHPthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYTgyNDk1ZDY4M2IwOGM4ODFhODE4Y2QwMWZhNDJmZmY2
ZmY2ZDEwHhcNMjUxMTExMTMwMTE4WhcNMjUxMTEyMTMwMTE4WjAzMTEwLwYDVQQD
EyhkNThhYTY5Y2MzZTAxNzFjMDVhM2EzYWY4YmJlNTRmODY5MjZiYmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG61mRz3hA5bxkTplHY1qhE3+JBD
SiTeV4wguPg6MlZrEMwr92c9DyOekOVTzG0Si3BPoVq5hRyzLGL2herUjH37oDMd
W5b2O98mxgacNZ+YHhdttuN6aX8KhkXX3xaxtLHWZVK3HniyjhlUmpsOR0Zzpz1B
yGuFZALtRNGffywNrfybjem6JacNjKkNYobf3TRVmjasnrY3b/gG25MYd94beNFb
jZ2KOtK/ec/y9qf8YcuCNiV1s59N99e3ndnk68UbH7bwUhf0Q2gBaYNZ8hHPFbqF
iXWlf7SvZQGbdvqz8fV89OiokQjDWbNgRxAVA65cvkIhv4XzgnEU+tPGSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWKppzD4BccBaOjr4u+VPhpJru0MB8GA1UdIwQY
MBaAFIuoJJXWg7CMiBqBjNAfpC//b/bRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZna2xkYURzSXlJR29HTTBCLWtMXzl2OXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82OGVkOTgtZmUzZi00MDYzLTkxYTkt
YzYyNTBmYjYwOTZlLzEvaTZna2xkYURzSXlJR29HTTBCLWtMXzl2OXRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82OGVkOTgtZmUzZi00MDYzLTkxYTktYzYyNTBmYjYwOTZl
LzEvaTZna2xkYURzSXlJR29HTTBCLWtMXzl2OXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfk131jm
bLocMeSUQPR3Gjl8OGldOq6NV3VCN6jgvzdJy5LmnNmJPH9tSdBhZD9BZxrcYbkP
2RsIlIqORPwFLpdNyKtuzgUC6G0p5bq9b1UaU+JHLhtK3KA7z2m52DPFjenBQiX1
ZQvuuz0RzlBMmMsgts1l9FMVQTnfU1jIh+/I3S8MnbaS2PXjajGX225S/83JGKjk
dbidFwwlxQKHOu8vFNOkbYtI/CqBviqj9n0msK6NA5/Oykg7kmcmc1lPjGRGCmRD
C2EKtze3wmV6Ft/Xbdc8tWXH1pf096FDC0UMjdd2uaE9e6lg+18Csu9GKR3j5Aiq
T98TP/evq3QZhg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:33 2025 by rpki-client