Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
File: izHINiDus1ExJXtb-vqrOTRSyJE.mft (raw, json)
Hash identifier: KdldkDD+l5kZNkaL4rQnkRP8VEJPCnHJczSlqJ7hUx4=
Subject key identifier: 6F:D2:4B:A4:D6:DD:AA:3B:43:64:6E:56:EF:92:AD:F4:22:15:91:50
Authority key identifier: 8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
Certificate issuer: /CN=8b31c83620eeb35131257b5bfafaab393452c891
Certificate serial: 019846D21E12DAC9B63DC8296CD8E4E0E632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
Manifest number: 15FB
Signing time: Sat 26 Jul 2025 13:00:32 +0000
Manifest this update: Sat 26 Jul 2025 13:00:32 +0000
Manifest next update: Sun 27 Jul 2025 13:00:32 +0000
Files and hashes: 1: izHINiDus1ExJXtb-vqrOTRSyJE.crl (hash: 0f//LTNZEJF7OT6/RIJkcD0aDpAAE3AslGhBHkuFzGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:1e:12:da:c9:b6:3d:c8:29:6c:d8:e4:e0:e6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31c83620eeb35131257b5bfafaab393452c891
Validity
Not Before: Jul 26 13:00:32 2025 GMT
Not After : Jul 27 13:00:32 2025 GMT
Subject: CN=6fd24ba4d6ddaa3b43646e56ef92adf422159150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:68:69:00:2d:1e:4f:21:b9:4a:74:7b:d9:
41:d5:f9:80:18:00:dd:4f:b9:7e:f6:45:73:4f:a0:
7b:60:94:66:23:12:bf:68:35:20:da:dc:2e:23:6f:
80:3e:5a:81:07:e6:3d:4d:4c:d1:09:1e:ef:62:ec:
91:e0:c5:1a:60:63:c8:0b:44:c3:f0:26:a9:63:7c:
2c:ce:fc:5d:be:1b:fe:43:3a:d9:0a:f0:68:ae:b7:
a6:13:26:6b:ef:52:f7:69:60:88:4c:90:e3:03:20:
52:fd:c2:65:09:ad:16:8d:3d:7d:f3:cf:e7:d1:b2:
37:b6:97:34:5a:08:9b:bd:01:c6:fe:45:b1:f3:5c:
56:47:f3:10:dd:f5:98:63:e9:b5:12:62:67:8e:79:
08:b7:85:b0:64:41:1e:85:c1:21:7d:b0:8b:c7:7a:
cc:be:1a:00:a0:ab:20:b0:ba:67:58:27:b3:ea:f8:
5e:74:37:e6:50:1d:e7:78:bc:16:a3:0a:d3:fb:8e:
c8:d0:be:4a:22:d3:ce:b3:d6:71:29:61:12:f2:3c:
6a:71:6a:23:59:52:fa:13:e2:98:d4:24:91:ac:49:
70:77:39:8a:1c:5e:06:d8:dd:df:90:b8:3c:28:21:
4e:8f:f2:52:95:bb:05:fc:2e:fb:68:06:16:d4:93:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D2:4B:A4:D6:DD:AA:3B:43:64:6E:56:EF:92:AD:F4:22:15:91:50
X509v3 Authority Key Identifier:
keyid:8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:61:ed:3f:d9:6d:9e:83:a6:00:2c:86:15:b9:0a:d4:40:61:
6d:5f:6d:29:97:fc:89:d0:f8:90:10:84:14:91:b7:37:c4:a9:
89:16:1b:05:79:bd:5c:60:56:e8:53:bc:0a:f3:ae:80:ab:d5:
5e:09:be:d6:10:4e:0f:27:4d:86:25:a4:cc:33:8a:b2:a9:17:
33:d4:d8:e9:ef:f9:12:69:50:93:f7:2a:13:49:3b:87:66:fd:
bc:6b:cc:81:ec:a3:6b:60:8f:7d:54:3e:fe:cc:95:03:28:c2:
4b:5a:5b:86:05:76:0a:dd:9a:ea:29:48:46:4b:f7:b0:ff:c7:
be:1b:a8:12:8c:76:f7:a6:82:be:63:f2:f9:e7:97:d8:cc:96:
af:6d:c8:60:69:30:fc:97:87:82:f9:1b:ea:43:a4:7e:e4:aa:
c7:90:5c:d8:e6:01:75:98:c2:68:af:6e:2e:0f:b3:71:7b:96:
ae:c8:76:a5:9d:7d:f1:38:e3:5e:43:29:36:30:b5:58:dd:db:
ed:26:6e:73:01:f3:0d:9e:26:b1:30:36:0a:30:e9:49:78:ed:
6c:4c:52:4f:b0:dd:21:40:5c:03:40:76:52:28:0f:82:a2:aa:
b7:43:d6:27:75:fb:eb:c3:82:d9:63:99:60:75:42:33:d8:5f:
63:c6:1d:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhG0h4S2sm2PcgpbNjk4OYyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMzFjODM2MjBlZWIzNTEzMTI1N2I1YmZhZmFhYjM5MzQ1
MmM4OTEwHhcNMjUwNzI2MTMwMDMyWhcNMjUwNzI3MTMwMDMyWjAzMTEwLwYDVQQD
Eyg2ZmQyNGJhNGQ2ZGRhYTNiNDM2NDZlNTZlZjkyYWRmNDIyMTU5MTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApppoaQAtHk8huUp0e9lB1fmAGADd
T7l+9kVzT6B7YJRmIxK/aDUg2twuI2+APlqBB+Y9TUzRCR7vYuyR4MUaYGPIC0TD
8CapY3wszvxdvhv+QzrZCvBorremEyZr71L3aWCITJDjAyBS/cJlCa0WjT1988/n
0bI3tpc0WgibvQHG/kWx81xWR/MQ3fWYY+m1EmJnjnkIt4WwZEEehcEhfbCLx3rM
vhoAoKsgsLpnWCez6vhedDfmUB3neLwWowrT+47I0L5KItPOs9ZxKWES8jxqcWoj
WVL6E+KY1CSRrElwdzmKHF4G2N3fkLg8KCFOj/JSlbsF/C77aAYW1JPe8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/SS6TW3ao7Q2RuVu+SrfQiFZFQMB8GA1UdIwQY
MBaAFIsxyDYg7rNRMSV7W/r6qzk0UsiRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXpISU5pRHVzMUV4Slh0Yi12cXJPVFJTeUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9mNzRkMzgtOTY1ZC00YTI5LWFkOGEt
Zjg0Njc0ZDQ2MzAzLzEvaXpISU5pRHVzMUV4Slh0Yi12cXJPVFJTeUpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9mNzRkMzgtOTY1ZC00YTI5LWFkOGEtZjg0Njc0ZDQ2MzAz
LzEvaXpISU5pRHVzMUV4Slh0Yi12cXJPVFJTeUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWHtP9lt
noOmACyGFbkK1EBhbV9tKZf8idD4kBCEFJG3N8SpiRYbBXm9XGBW6FO8CvOugKvV
Xgm+1hBODydNhiWkzDOKsqkXM9TY6e/5EmlQk/cqE0k7h2b9vGvMgeyja2CPfVQ+
/syVAyjCS1pbhgV2Ct2a6ilIRkv3sP/HvhuoEox296aCvmPy+eeX2MyWr23IYGkw
/JeHgvkb6kOkfuSqx5Bc2OYBdZjCaK9uLg+zcXuWrsh2pZ198TjjXkMpNjC1WN3b
7SZucwHzDZ4msTA2CjDpSXjtbExST7DdIUBcA0B2UigPgqKqt0PWJ3X768OC2WOZ
YHVCM9hfY8Ydcw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:11:58 2025 by rpki-client