Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
File: IY2n_1dueNwjTrdMvwcwdsH368k.mft (raw, json)
Hash identifier: Uli6BAhjHW8J1OTtztkrEXEhVemSKJPKDlvgMvacf/Q=
Subject key identifier: F3:B2:7A:91:C0:F5:F7:34:F6:7C:6B:50:DF:7E:E9:FB:56:A6:30:A4
Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
Certificate issuer: /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Certificate serial: 019847AD9E0F468FD7EACA382A5426FC0F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
Manifest number: 1223
Signing time: Sat 26 Jul 2025 17:00:17 +0000
Manifest this update: Sat 26 Jul 2025 17:00:17 +0000
Manifest next update: Sun 27 Jul 2025 17:00:17 +0000
Files and hashes: 1: IY2n_1dueNwjTrdMvwcwdsH368k.crl (hash: J8/EdcUBmEF2MxRVJowEavMXXcDy+LuAptqmLuIOwEQ=)
2: vHFL3NqT62c-dvNoqZM6UY1Qkso.roa (hash: a6jTEveih8CJwQfmE458rXUCSvGrU0Bb9osIwlUUdEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:9e:0f:46:8f:d7:ea:ca:38:2a:54:26:fc:0f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Validity
Not Before: Jul 26 17:00:17 2025 GMT
Not After : Jul 27 17:00:17 2025 GMT
Subject: CN=f3b27a91c0f5f734f67c6b50df7ee9fb56a630a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:e4:a7:f6:f3:41:54:99:85:9c:8e:9c:87:
61:d3:ae:82:61:16:df:fb:94:45:d0:18:d5:82:a8:
2d:92:ce:b4:d4:98:12:ff:83:35:25:e4:75:44:d5:
31:a5:7f:1e:94:62:d1:16:51:29:76:57:f4:52:a8:
8b:36:35:b3:91:d4:b1:9f:59:c2:a9:e7:76:2e:cb:
84:f8:ae:9a:3b:ad:a4:06:79:8e:f6:36:8f:36:12:
32:b2:74:fd:78:43:ec:5d:27:a0:ff:5a:18:25:d6:
c7:88:aa:92:90:60:f6:08:3b:7e:1a:44:d5:76:40:
62:05:bc:10:33:81:19:fa:25:2a:4a:e3:3b:59:bc:
1e:b6:08:2c:8d:6b:47:b7:3f:6e:71:ea:e6:80:7a:
58:c7:54:53:4f:cb:64:da:15:5b:97:82:73:9c:c7:
d9:28:e4:21:63:03:e8:36:4d:f9:9a:4d:70:c3:b7:
5b:6d:82:63:ec:76:07:69:72:a0:5f:c4:b6:22:b0:
b2:83:7c:4c:89:6b:7e:90:ec:93:36:6c:39:ad:f5:
22:45:47:0d:54:ec:dd:96:be:5d:ba:45:61:b3:1a:
0a:49:b0:8b:86:3c:63:64:75:ba:7a:76:c0:c0:a7:
ba:f0:18:48:b2:1d:80:59:59:a8:bd:0d:c7:8e:b3:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B2:7A:91:C0:F5:F7:34:F6:7C:6B:50:DF:7E:E9:FB:56:A6:30:A4
X509v3 Authority Key Identifier:
keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:78:b3:12:5a:2d:fe:77:fb:00:03:d7:f9:e0:b5:90:aa:77:
62:98:9a:8e:b7:dd:84:ee:16:1f:4e:b3:ff:33:3b:c0:b9:ea:
3d:71:fd:c1:70:5f:33:56:01:d3:b2:8b:4f:4b:c7:6a:9a:a5:
42:39:58:ca:c7:89:81:c1:cc:a7:b2:92:48:64:25:4e:73:fa:
88:51:db:22:2a:53:d4:e7:e5:64:cf:8a:44:30:c8:d6:d0:b3:
51:1a:b6:ed:69:ce:1f:1f:f9:4a:be:f5:fe:4e:d4:f5:b3:19:
23:9b:d3:ce:2d:49:a9:0f:51:7b:ca:4b:be:bc:a3:2a:b4:59:
e9:66:60:30:7f:62:05:69:f1:a5:bb:11:8d:e9:9e:45:a5:31:
e0:32:ef:2d:d3:c3:f4:06:8b:4c:7d:93:ec:ba:fa:30:41:18:
61:cf:3a:3f:ff:56:06:76:3a:dd:f6:72:ea:a0:27:2d:bb:83:
81:35:39:68:3a:f5:8c:2b:45:46:d6:95:db:1d:cf:b5:2d:92:
84:6a:3f:29:a0:10:43:7c:49:89:c0:9c:a7:39:cf:0d:1e:c0:
7b:5a:88:c7:c8:2a:72:fc:0f:bd:9e:72:4d:fa:c2:da:4d:7d:
f6:31:50:03:42:5e:d7:03:a4:a7:36:6f:a3:63:dc:d7:5b:e0:
06:69:ec:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrZ4PRo/X6so4KlQm/A8NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOGRhN2ZmNTc2ZTc4ZGMyMzRlYjc0Y2JmMDczMDc2YzFm
N2ViYzkwHhcNMjUwNzI2MTcwMDE3WhcNMjUwNzI3MTcwMDE3WjAzMTEwLwYDVQQD
EyhmM2IyN2E5MWMwZjVmNzM0ZjY3YzZiNTBkZjdlZTlmYjU2YTYzMGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Hkp/bzQVSZhZyOnIdh066CYRbf
+5RF0BjVgqgtks601JgS/4M1JeR1RNUxpX8elGLRFlEpdlf0UqiLNjWzkdSxn1nC
qed2LsuE+K6aO62kBnmO9jaPNhIysnT9eEPsXSeg/1oYJdbHiKqSkGD2CDt+GkTV
dkBiBbwQM4EZ+iUqSuM7WbwetggsjWtHtz9ucermgHpYx1RTT8tk2hVbl4JznMfZ
KOQhYwPoNk35mk1ww7dbbYJj7HYHaXKgX8S2IrCyg3xMiWt+kOyTNmw5rfUiRUcN
VOzdlr5dukVhsxoKSbCLhjxjZHW6enbAwKe68BhIsh2AWVmovQ3HjrNhfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOyepHA9fc09nxrUN9+6ftWpjCkMB8GA1UdIwQY
MBaAFCGNp/9XbnjcI063TL8HMHbB9+vJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVkybl8xZHVlTndqVHJkTXZ3Y3dkc0gzNjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85MmIzODEtZTUxNC00MzhjLWI4Zjkt
ZjhhZWQzMGQ1NGMzLzEvSVkybl8xZHVlTndqVHJkTXZ3Y3dkc0gzNjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS85MmIzODEtZTUxNC00MzhjLWI4ZjktZjhhZWQzMGQ1NGMz
LzEvSVkybl8xZHVlTndqVHJkTXZ3Y3dkc0gzNjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx3izElot
/nf7AAPX+eC1kKp3YpiajrfdhO4WH06z/zM7wLnqPXH9wXBfM1YB07KLT0vHapql
QjlYyseJgcHMp7KSSGQlTnP6iFHbIipT1OflZM+KRDDI1tCzURq27WnOHx/5Sr71
/k7U9bMZI5vTzi1JqQ9Re8pLvryjKrRZ6WZgMH9iBWnxpbsRjemeRaUx4DLvLdPD
9AaLTH2T7Lr6MEEYYc86P/9WBnY63fZy6qAnLbuDgTU5aDr1jCtFRtaV2x3PtS2S
hGo/KaAQQ3xJicCcpznPDR7Ae1qIx8gqcvwPvZ5yTfrC2k199jFQA0Je1wOkpzZv
o2Pc11vgBmnsmA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:56:32 2025 by rpki-client