Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
File: I8cVVBujctWQ1odn14zmmEABMFk.mft (raw, json)
Hash identifier: tPH6DqK9buw2M1ShxCWA3Hh/r7K69u/+Whh1AtdEziY=
Subject key identifier: 88:C9:D4:0E:CB:C5:D4:95:C8:F7:36:7D:6D:88:03:B5:A5:DE:12:68
Authority key identifier: 23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
Certificate issuer: /CN=23c715541ba372d590d68767d78ce69840013059
Certificate serial: 0198530EE3FADB140975F8259A7AEE2DD522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
Manifest number: 1602
Signing time: Mon 28 Jul 2025 22:02:21 +0000
Manifest this update: Mon 28 Jul 2025 22:02:21 +0000
Manifest next update: Tue 29 Jul 2025 22:02:21 +0000
Files and hashes: 1: I8cVVBujctWQ1odn14zmmEABMFk.crl (hash: H2u9yLMzhaWmvQf9g1p/Uq6VOL4mAAiHuJewX2dNf+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:e3:fa:db:14:09:75:f8:25:9a:7a:ee:2d:d5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c715541ba372d590d68767d78ce69840013059
Validity
Not Before: Jul 28 22:02:21 2025 GMT
Not After : Jul 29 22:02:21 2025 GMT
Subject: CN=88c9d40ecbc5d495c8f7367d6d8803b5a5de1268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:f7:e8:72:1c:b7:01:90:2b:06:dd:05:75:
1d:c0:ea:8e:78:1d:81:52:3f:b8:43:e1:e2:3c:79:
8b:5c:11:fc:da:8b:71:90:df:e9:e1:86:01:11:6b:
7f:42:52:82:f0:93:c0:6b:b7:9e:34:50:d8:b9:51:
8d:c0:62:56:5f:a8:21:c8:06:1d:65:62:54:e9:a7:
0f:32:56:19:f9:fe:f7:d9:78:62:ef:93:3d:22:ca:
12:61:8e:5e:b5:58:d6:c2:2d:a1:7f:98:f0:78:cb:
87:a7:f7:02:4f:92:c3:36:99:93:ee:74:11:d4:67:
3e:23:3b:91:e5:64:ee:43:4f:56:af:c6:42:eb:33:
1a:bd:9b:dd:ed:5d:5d:d3:a9:e9:55:84:0b:25:31:
eb:d4:54:cf:d2:fd:60:17:14:28:e5:8d:32:9a:9e:
fc:ed:54:5e:9d:4d:52:3a:7e:61:2c:9f:26:47:4d:
83:5d:57:3c:16:57:3a:99:5f:a9:ad:fa:40:97:f2:
c8:b6:7b:52:16:17:46:57:42:7e:b0:d6:07:86:c6:
fe:5b:2f:89:4e:68:8e:45:86:7a:10:01:f3:03:7f:
ec:1b:d7:30:87:90:39:8b:bf:eb:44:03:6c:4c:51:
34:88:2d:3f:0e:13:a2:f1:1c:5e:ff:c1:a0:60:2d:
34:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C9:D4:0E:CB:C5:D4:95:C8:F7:36:7D:6D:88:03:B5:A5:DE:12:68
X509v3 Authority Key Identifier:
keyid:23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ee:4c:f4:18:ed:48:be:2d:df:b3:e9:ee:0e:3d:bb:3c:a9:
75:a8:28:e7:93:18:61:bf:31:dc:5c:f0:8f:52:92:42:6f:76:
86:86:e7:f5:48:6f:a4:f3:47:71:7b:f7:54:11:fa:1b:fd:de:
33:2e:01:f8:13:50:3e:b4:01:9f:45:a7:21:8c:bd:b4:ee:9f:
29:b7:b0:cc:ed:36:34:cc:69:f4:a1:fa:b2:07:db:a4:ab:db:
57:dd:e2:00:39:b1:9a:31:67:04:d4:7d:b6:a9:6e:e6:87:ef:
7a:1e:46:c6:97:10:ae:f8:28:58:0a:4f:54:d3:41:17:c0:26:
50:e3:8e:f0:0c:67:e9:1f:a5:9c:b9:bd:7d:b0:5a:d0:3f:f8:
90:07:bb:97:43:35:72:a6:d6:f5:84:77:94:c7:db:a8:b3:82:
ef:16:f6:91:45:32:77:76:5c:92:ad:08:b7:f8:98:ef:20:50:
9c:de:98:39:ed:c7:f8:c8:12:b9:2e:79:f3:1a:e1:ba:d1:9f:
dd:05:9f:cc:02:f5:42:8c:a8:8b:c7:4f:7e:80:a1:7a:1a:33:
f0:3a:86:77:4e:ca:da:0a:91:8c:4f:6f:b8:92:1b:de:cd:b1:
1b:3b:b2:34:0d:76:42:5a:53:e7:2a:10:ee:d7:4d:ed:3b:e3:
11:5b:96:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDuP62xQJdfglmnruLdUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYzcxNTU0MWJhMzcyZDU5MGQ2ODc2N2Q3OGNlNjk4NDAw
MTMwNTkwHhcNMjUwNzI4MjIwMjIxWhcNMjUwNzI5MjIwMjIxWjAzMTEwLwYDVQQD
Eyg4OGM5ZDQwZWNiYzVkNDk1YzhmNzM2N2Q2ZDg4MDNiNWE1ZGUxMjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7D36HIctwGQKwbdBXUdwOqOeB2B
Uj+4Q+HiPHmLXBH82otxkN/p4YYBEWt/QlKC8JPAa7eeNFDYuVGNwGJWX6ghyAYd
ZWJU6acPMlYZ+f732Xhi75M9IsoSYY5etVjWwi2hf5jweMuHp/cCT5LDNpmT7nQR
1Gc+IzuR5WTuQ09Wr8ZC6zMavZvd7V1d06npVYQLJTHr1FTP0v1gFxQo5Y0ymp78
7VRenU1SOn5hLJ8mR02DXVc8Flc6mV+prfpAl/LItntSFhdGV0J+sNYHhsb+Wy+J
TmiORYZ6EAHzA3/sG9cwh5A5i7/rRANsTFE0iC0/DhOi8Rxe/8GgYC00DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjJ1A7LxdSVyPc2fW2IA7Wl3hJoMB8GA1UdIwQY
MBaAFCPHFVQbo3LVkNaHZ9eM5phAATBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSThjVlZCdWpjdFdRMW9kbjE0em1tRUFCTUZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mMTg0YTktYzJmZS00Mjc5LWFjZGMt
N2NlNjk4MGNiMWNjLzEvSThjVlZCdWpjdFdRMW9kbjE0em1tRUFCTUZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mMTg0YTktYzJmZS00Mjc5LWFjZGMtN2NlNjk4MGNiMWNj
LzEvSThjVlZCdWpjdFdRMW9kbjE0em1tRUFCTUZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIe5M9Bjt
SL4t37Pp7g49uzypdago55MYYb8x3Fzwj1KSQm92hobn9UhvpPNHcXv3VBH6G/3e
My4B+BNQPrQBn0WnIYy9tO6fKbewzO02NMxp9KH6sgfbpKvbV93iADmxmjFnBNR9
tqlu5ofveh5GxpcQrvgoWApPVNNBF8AmUOOO8Axn6R+lnLm9fbBa0D/4kAe7l0M1
cqbW9YR3lMfbqLOC7xb2kUUyd3Zckq0It/iY7yBQnN6YOe3H+MgSuS558xrhutGf
3QWfzAL1Qoyoi8dPfoChehoz8DqGd07K2gqRjE9vuJIb3s2xGzuyNA12QlpT5yoQ
7tdN7TvjEVuWwQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 03:59:45 2025 by rpki-client