Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
File: IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft (raw, json)
Hash identifier: 5IihbkecidP7EnRKRBirZyjaeeJhObmR9ONYM4gPRv4=
Subject key identifier: 92:AA:75:57:BE:B5:7C:D9:6F:9A:E5:2B:CD:3E:6D:D9:DF:6F:08:7C
Authority key identifier: 22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
Certificate issuer: /CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Certificate serial: 019922C38C70AC7698C4EF2DE656221A40E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
Manifest number: 1458
Signing time: Sun 07 Sep 2025 06:01:04 +0000
Manifest this update: Sun 07 Sep 2025 06:01:04 +0000
Manifest next update: Mon 08 Sep 2025 06:01:04 +0000
Files and hashes: 1: 6LkNfXDGOHhf8gBsIaO1gA2Q-VM.roa (hash: NThSJkZPm+DD4/mAcNhw9miEjuzZudxLC0TeMXxTy6I=)
2: IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl (hash: 8c04nLUjGiihiTUtk+J23jGn6DAWBrl2YgNowIFVx5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:8c:70:ac:76:98:c4:ef:2d:e6:56:22:1a:40:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Validity
Not Before: Sep 7 06:01:04 2025 GMT
Not After : Sep 8 06:01:04 2025 GMT
Subject: CN=92aa7557beb57cd96f9ae52bcd3e6dd9df6f087c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:15:8c:6e:40:b9:d4:8e:30:2e:e7:a5:90:
61:b7:1d:9d:12:62:c9:fe:1d:a7:6d:75:38:8f:f6:
ea:72:8a:86:3f:ca:18:87:b1:37:08:4d:34:df:56:
9e:7d:b5:0b:e0:f5:de:4c:42:80:9c:e0:37:58:c2:
74:07:97:aa:90:4b:f4:42:ee:80:20:61:80:71:d8:
17:26:d5:e4:3c:8f:3e:8a:07:ae:dd:f5:3c:f4:41:
df:e5:63:c2:8c:7b:e0:a9:71:d3:b3:73:d2:d0:44:
95:41:5d:70:ed:27:75:52:d5:70:6b:81:a5:a5:bb:
bd:15:f5:a9:dc:06:7b:b7:24:f3:89:ad:44:74:dd:
f9:09:b1:87:e3:bf:b4:8d:30:3a:e5:e0:76:01:55:
c4:33:04:8c:f1:b7:c1:1c:64:b1:9e:f2:ec:d6:a7:
16:b7:b6:da:d3:b9:54:eb:54:3a:e8:81:e3:23:3d:
03:ef:8a:fe:b8:1a:3f:77:8d:09:ca:ff:56:22:b1:
98:ce:87:f5:43:86:ac:70:dd:d0:92:6c:10:d5:df:
20:69:aa:b2:0f:92:a3:ca:fa:b8:d3:1a:e2:e2:94:
b0:f9:6b:7c:7b:63:83:34:05:2d:44:fa:57:c6:18:
78:35:33:5e:e9:53:9e:ca:83:ce:7b:5b:9a:85:c8:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AA:75:57:BE:B5:7C:D9:6F:9A:E5:2B:CD:3E:6D:D9:DF:6F:08:7C
X509v3 Authority Key Identifier:
keyid:22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:68:8d:c4:18:3e:7a:e1:d4:e3:a5:a3:01:21:97:b3:36:eb:
f0:37:66:50:e3:04:20:47:c4:ec:48:4c:56:fa:85:6e:17:48:
17:5f:2d:35:01:ef:f6:9b:9e:32:84:9f:23:dd:0d:bf:fa:c4:
28:1a:b3:e0:b5:09:7d:46:4d:5d:7b:4c:03:3e:b7:c6:4b:fb:
34:39:c5:ae:48:3b:1f:2b:22:a7:3f:18:3c:05:bf:11:93:3a:
0c:7e:25:4d:32:10:37:22:41:59:65:87:7c:22:e6:03:36:d6:
c9:6f:85:e2:ac:78:f7:e3:02:d1:c1:dc:f4:e4:b4:f5:45:8e:
76:64:bf:8e:74:47:3f:da:df:7e:eb:c6:e3:fa:14:99:b7:d8:
fa:25:3a:02:a7:14:c9:09:41:55:7b:97:08:8e:9b:d5:2b:af:
86:ad:39:00:41:a5:21:7e:5a:3d:84:aa:61:b7:f8:d7:a3:56:
8a:f1:7a:db:bf:e7:be:91:b0:35:03:76:49:19:ee:3e:87:3e:
e3:80:cb:ef:2f:d5:72:e1:db:81:27:31:17:00:c0:d5:ea:73:
73:51:af:a0:f0:c3:8b:7d:b1:3c:06:8f:dd:25:98:a6:50:de:
a9:2f:d3:82:8e:b6:5e:7e:e8:92:1e:87:45:a1:ba:93:40:cd:
90:37:58:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw4xwrHaYxO8t5lYiGkDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTcyZjNlZDIzZTIyOTRmOWJiNmJhNjYwMjQ2MTY2YzEz
ZjgzMjQwHhcNMjUwOTA3MDYwMTA0WhcNMjUwOTA4MDYwMTA0WjAzMTEwLwYDVQQD
Eyg5MmFhNzU1N2JlYjU3Y2Q5NmY5YWU1MmJjZDNlNmRkOWRmNmYwODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY8VjG5AudSOMC7npZBhtx2dEmLJ
/h2nbXU4j/bqcoqGP8oYh7E3CE0031aefbUL4PXeTEKAnOA3WMJ0B5eqkEv0Qu6A
IGGAcdgXJtXkPI8+igeu3fU89EHf5WPCjHvgqXHTs3PS0ESVQV1w7Sd1UtVwa4Gl
pbu9FfWp3AZ7tyTzia1EdN35CbGH47+0jTA65eB2AVXEMwSM8bfBHGSxnvLs1qcW
t7ba07lU61Q66IHjIz0D74r+uBo/d40Jyv9WIrGYzof1Q4ascN3QkmwQ1d8gaaqy
D5Kjyvq40xri4pSw+Wt8e2ODNAUtRPpXxhh4NTNe6VOeyoPOe1uahch3ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKqdVe+tXzZb5rlK80+bdnfbwh8MB8GA1UdIwQY
MBaAFCKnLz7SPiKU+btrpmAkYWbBP4MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFjdlB0SS1JcFQ1dTJ1bVlDUmhac0VfZ3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80Nzk2NzMtOTY2Ny00ZWRhLWJiYmQt
YjBiMmVhYWVlZDYxLzEvSXFjdlB0SS1JcFQ1dTJ1bVlDUmhac0VfZ3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80Nzk2NzMtOTY2Ny00ZWRhLWJiYmQtYjBiMmVhYWVlZDYx
LzEvSXFjdlB0SS1JcFQ1dTJ1bVlDUmhac0VfZ3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWiNxBg+
euHU46WjASGXszbr8DdmUOMEIEfE7EhMVvqFbhdIF18tNQHv9pueMoSfI90Nv/rE
KBqz4LUJfUZNXXtMAz63xkv7NDnFrkg7Hysipz8YPAW/EZM6DH4lTTIQNyJBWWWH
fCLmAzbWyW+F4qx49+MC0cHc9OS09UWOdmS/jnRHP9rffuvG4/oUmbfY+iU6AqcU
yQlBVXuXCI6b1Suvhq05AEGlIX5aPYSqYbf416NWivF627/nvpGwNQN2SRnuPoc+
44DL7y/VcuHbgScxFwDA1epzc1GvoPDDi32xPAaP3SWYplDeqS/Tgo62Xn7okh6H
RaG6k0DNkDdYpA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:51 2025 by rpki-client