Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
File: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft (raw, json)
Hash identifier: VaCLEMxawr9WkYhWieuqFtdh+FW3XFmDNNCFzFC24WQ=
Subject key identifier: 39:23:02:E3:2B:FC:CF:98:48:6B:14:F0:1D:24:D5:F3:E5:C0:A8:24
Authority key identifier: 21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
Certificate issuer: /CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Certificate serial: 0198447599B9312B45284886C6B04F621DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 02:00:14 +0000
Manifest this update: Sat 26 Jul 2025 02:00:14 +0000
Manifest next update: Sun 27 Jul 2025 02:00:14 +0000
Files and hashes: 1: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl (hash: XJ6SJF4IaYFMLYZcZ2L/aPaHUiqehtfWMQmrhpWVTRM=)
2: ZUnY6DcgMFOkn5YPuY63h16XVew.roa (hash: j75VTgwm6ax4o8jG9UYWYEtlaoF5sYfNI7iKEcRNxJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:99:b9:31:2b:45:28:48:86:c6:b0:4f:62:1d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Validity
Not Before: Jul 26 02:00:14 2025 GMT
Not After : Jul 27 02:00:14 2025 GMT
Subject: CN=392302e32bfccf98486b14f01d24d5f3e5c0a824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:e0:d8:8d:f5:be:91:29:68:f5:a2:a6:f3:
1d:88:4f:0d:d5:28:7e:02:c5:d8:c8:7e:35:65:f2:
92:e7:25:ae:bf:45:4a:ca:ce:70:0d:5d:6e:3e:2c:
2c:1f:ef:66:66:fe:4c:dd:ed:ae:e4:10:9e:8f:ff:
66:a7:45:4c:cc:d2:54:1a:7a:3d:01:4e:01:1f:3e:
0b:6b:8b:74:1f:c0:37:eb:f5:ea:f2:3c:f3:6f:80:
7f:8e:4c:a5:ee:82:81:f0:ad:6c:34:2c:9c:97:64:
d9:18:0a:97:0f:86:c8:22:6e:f0:73:42:9c:ea:09:
32:48:c1:cd:95:bb:2f:d0:32:49:d8:5f:0d:4e:93:
61:51:ac:e0:2e:44:4d:f8:79:fe:74:1c:ba:4f:f1:
56:52:a3:33:23:f0:f3:23:e6:e6:f0:ee:d5:44:b0:
69:6b:70:08:cf:24:73:49:8a:6b:1e:04:74:54:48:
ae:26:0c:d5:49:4a:29:20:25:7d:ed:73:c3:4e:5b:
41:df:c1:4d:ef:44:1f:2f:62:03:cc:f2:a3:96:b0:
04:59:a2:00:59:1c:fa:c5:bd:bc:93:74:f0:a4:a9:
e3:80:f4:ec:cc:34:64:c3:22:73:f7:a1:22:e3:69:
72:d1:cc:45:3b:bd:c0:6a:04:db:8c:54:a9:d4:44:
f1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:23:02:E3:2B:FC:CF:98:48:6B:14:F0:1D:24:D5:F3:E5:C0:A8:24
X509v3 Authority Key Identifier:
keyid:21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7e:cc:8f:b7:39:dc:1b:63:01:db:37:c5:b3:57:22:d0:94:
55:10:04:e5:9e:f7:21:7f:c3:31:b8:42:46:59:5f:02:de:2f:
2c:d6:1b:24:b8:5a:31:58:9a:93:bc:02:17:e8:20:18:cd:44:
ce:b4:56:c3:ef:64:80:6f:2e:cb:df:b4:d6:5c:46:c2:ed:e0:
a7:8a:e2:6e:f4:8a:1e:c7:04:6d:f2:49:ae:48:db:63:aa:c0:
83:8b:a1:dc:e5:cf:cd:c9:b4:e0:94:7a:dd:04:23:32:8e:14:
7a:6b:d5:fa:03:36:b8:a0:40:4b:99:88:4b:13:c6:94:96:11:
52:70:8a:09:15:30:84:6c:63:30:04:4b:cf:33:17:49:69:ad:
55:c0:83:28:dc:16:46:bc:5c:7e:ca:de:cf:88:4e:5b:b2:5f:
38:0e:78:20:db:71:51:b6:5c:06:8d:cf:46:84:1a:9d:2c:a8:
ee:1f:d2:f9:89:05:80:34:82:4a:c6:ab:46:81:0d:05:b5:4f:
70:dc:47:3e:5a:85:b0:ef:aa:70:d2:f3:a1:c6:66:8c:e5:d1:
46:a7:8e:34:cf:b3:c3:81:26:5a:5c:b8:5f:91:d2:7a:e7:41:
a7:d0:eb:50:9e:44:e9:7e:8a:8f:0a:51:ff:73:82:d2:a2:e8:
46:b2:e4:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEdZm5MStFKEiGxrBPYh2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYWEyOGRlMjFiYzkxZjM5ZGJmMmQwMTJmZDU1MmQyMmQw
ZjVhYWEwHhcNMjUwNzI2MDIwMDE0WhcNMjUwNzI3MDIwMDE0WjAzMTEwLwYDVQQD
EygzOTIzMDJlMzJiZmNjZjk4NDg2YjE0ZjAxZDI0ZDVmM2U1YzBhODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB/g2I31vpEpaPWipvMdiE8N1Sh+
AsXYyH41ZfKS5yWuv0VKys5wDV1uPiwsH+9mZv5M3e2u5BCej/9mp0VMzNJUGno9
AU4BHz4La4t0H8A36/Xq8jzzb4B/jkyl7oKB8K1sNCycl2TZGAqXD4bIIm7wc0Kc
6gkySMHNlbsv0DJJ2F8NTpNhUazgLkRN+Hn+dBy6T/FWUqMzI/DzI+bm8O7VRLBp
a3AIzyRzSYprHgR0VEiuJgzVSUopICV97XPDTltB38FN70QfL2IDzPKjlrAEWaIA
WRz6xb28k3TwpKnjgPTszDRkwyJz96Ei42ly0cxFO73AagTbjFSp1ETxmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkjAuMr/M+YSGsU8B0k1fPlwKgkMB8GA1UdIwQY
MBaAFCGqKN4hvJHznb8tAS/VUtItD1qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFvbzNpRzhrZk9kdnkwQkw5VlMwaTBQV3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82M2E1YmItMjRkMC00ZGI5LWI1MTAt
Zjk5NzNjNTc2YjAzLzEvSWFvbzNpRzhrZk9kdnkwQkw5VlMwaTBQV3FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS82M2E1YmItMjRkMC00ZGI5LWI1MTAtZjk5NzNjNTc2YjAz
LzEvSWFvbzNpRzhrZk9kdnkwQkw5VlMwaTBQV3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi37Mj7c5
3BtjAds3xbNXItCUVRAE5Z73IX/DMbhCRllfAt4vLNYbJLhaMViak7wCF+ggGM1E
zrRWw+9kgG8uy9+01lxGwu3gp4ribvSKHscEbfJJrkjbY6rAg4uh3OXPzcm04JR6
3QQjMo4UemvV+gM2uKBAS5mISxPGlJYRUnCKCRUwhGxjMARLzzMXSWmtVcCDKNwW
Rrxcfsrez4hOW7JfOA54INtxUbZcBo3PRoQanSyo7h/S+YkFgDSCSsarRoENBbVP
cNxHPlqFsO+qcNLzocZmjOXRRqeONM+zw4EmWly4X5HSeudBp9DrUJ5E6X6KjwpR
/3OC0qLoRrLkAg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:22:59 2025 by rpki-client