
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
File: IqyN_06Z0-IomvY7FdVdJFDIQsM.mft (raw, json)
Hash identifier: Wv1UUGb62mG09clED8KPuwyqdb3RYeX3pHtuhpijPR8=
Subject key identifier: 20:21:A4:85:1D:E0:AD:62:30:FD:7D:3D:D4:52:19:5E:DD:D9:A6:48
Authority key identifier: 22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3
Certificate issuer: /CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3
Certificate serial: 01992444209D9D4203AF467AD5DF2EC9850D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
Manifest number: 0593
Signing time: Sun 07 Sep 2025 13:01:08 +0000
Manifest this update: Sun 07 Sep 2025 13:01:08 +0000
Manifest next update: Mon 08 Sep 2025 13:01:08 +0000
Files and hashes: 1: 1YFZUWeFsFFhNH6pH-z6oTf7e1M.roa (hash: N3xo7g5jGJQoS/qFHbtXSlXVpbFrX6/YoQPrJBEqRCc=)
2: IqyN_06Z0-IomvY7FdVdJFDIQsM.crl (hash: lWJhYwib6jKnmi/ozcuWAVSpc6kPqdhi2YxYJOJPFeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:44:20:9d:9d:42:03:af:46:7a:d5:df:2e:c9:85:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3
Validity
Not Before: Sep 7 13:01:08 2025 GMT
Not After : Sep 8 13:01:08 2025 GMT
Subject: CN=2021a4851de0ad6230fd7d3dd452195eddd9a648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3b:1c:df:9c:1f:ae:03:1e:e9:b9:6d:b8:9a:
ec:8b:92:ad:ef:d2:5d:f1:21:6b:67:b7:6c:4a:50:
a5:ba:cf:7a:2d:68:04:cc:05:31:9a:e7:b7:c3:02:
7a:95:eb:42:b3:56:ca:fb:98:78:a1:60:7b:c4:b4:
ea:42:d6:af:c9:60:18:4a:5f:30:79:ed:05:37:dc:
12:03:aa:dc:ee:2a:c1:31:8b:2d:c7:85:23:69:87:
cd:f3:74:81:45:04:5f:4c:0d:00:4b:3d:8e:a3:9b:
ac:c9:8c:12:1e:aa:26:4d:26:65:36:58:20:79:ed:
18:89:de:51:6a:65:42:06:14:08:55:d6:6c:a8:09:
bb:41:8d:8d:b0:73:40:95:91:a5:b2:dd:55:6e:92:
36:ec:41:6b:7b:86:a9:91:87:80:0a:2a:ff:1c:3c:
cd:ca:10:d5:8c:5e:cc:e0:04:a5:b4:33:0c:87:2b:
71:c3:51:17:39:16:a9:30:39:7a:10:c5:93:d3:66:
1b:95:17:4f:83:3c:2c:f7:0f:b9:e1:df:7b:67:8d:
f7:09:3a:a0:25:d8:02:72:5d:0a:bd:d3:d3:0f:e2:
c1:a6:84:ab:df:d9:63:b8:12:7f:62:fb:9d:77:c3:
39:25:43:c0:15:46:2a:73:fa:10:3b:9e:c4:2a:f8:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:21:A4:85:1D:E0:AD:62:30:FD:7D:3D:D4:52:19:5E:DD:D9:A6:48
X509v3 Authority Key Identifier:
keyid:22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:37:41:c5:1d:d8:32:ca:e1:0e:fd:a7:5a:c8:3d:70:2f:56:
9c:1e:da:ef:90:62:86:2f:10:6b:d4:40:2f:cc:d7:5f:58:76:
d7:f9:c1:5a:71:64:85:ae:88:20:fb:77:cb:95:36:df:1b:80:
12:f9:bc:45:87:83:46:1f:82:7c:a0:92:f0:53:cb:ff:cb:01:
e4:64:d0:6a:e9:dc:b6:51:75:94:4c:9c:73:e7:45:59:49:9e:
66:d5:2c:c6:da:2f:66:42:c9:67:82:a4:78:5c:22:73:16:19:
05:b5:46:4d:e1:2f:97:eb:6e:39:3b:04:6f:c9:b5:33:7a:af:
49:a2:58:11:90:f6:96:98:10:a9:d7:74:c6:62:20:ae:b8:90:
80:cd:3f:dc:17:f2:4c:8f:5f:bc:10:21:75:26:13:fe:dc:7c:
bb:4b:65:92:4a:a2:12:19:c1:a7:e0:e3:b1:bd:6d:34:02:c9:
da:c1:61:f9:60:9d:41:9b:38:9d:89:7d:e4:e6:f0:bd:bb:4c:
1e:10:cb:0b:84:81:9e:20:b3:63:93:94:b0:a7:82:a6:2d:ec:
f2:f0:5b:7b:42:10:10:81:c9:25:88:17:2e:a5:9d:2d:40:a3:
49:7a:c8:05:bb:8e:57:74:ba:53:70:0d:eb:61:fd:07:bf:fe:
8a:d5:7f:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkRCCdnUIDr0Z61d8uyYUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYWM4ZGZmNGU5OWQzZTIyODlhZjYzYjE1ZDU1ZDI0NTBj
ODQyYzMwHhcNMjUwOTA3MTMwMTA4WhcNMjUwOTA4MTMwMTA4WjAzMTEwLwYDVQQD
EygyMDIxYTQ4NTFkZTBhZDYyMzBmZDdkM2RkNDUyMTk1ZWRkZDlhNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTsc35wfrgMe6bltuJrsi5Kt79Jd
8SFrZ7dsSlClus96LWgEzAUxmue3wwJ6letCs1bK+5h4oWB7xLTqQtavyWAYSl8w
ee0FN9wSA6rc7irBMYstx4UjaYfN83SBRQRfTA0ASz2Oo5usyYwSHqomTSZlNlgg
ee0Yid5RamVCBhQIVdZsqAm7QY2NsHNAlZGlst1VbpI27EFre4apkYeACir/HDzN
yhDVjF7M4ASltDMMhytxw1EXORapMDl6EMWT02YblRdPgzws9w+54d97Z433CTqg
JdgCcl0KvdPTD+LBpoSr39ljuBJ/Yvudd8M5JUPAFUYqc/oQO57EKviEsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAhpIUd4K1iMP19PdRSGV7d2aZIMB8GA1UdIwQY
MBaAFCKsjf9OmdPiKJr2OxXVXSRQyELDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXF5Tl8wNlowLUlvbXZZN0ZkVmRKRkRJUXNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9hNzVlMWQtNGQ4MS00OWNiLWFjYTUt
ODI5OThhOTI4N2UyLzEvSXF5Tl8wNlowLUlvbXZZN0ZkVmRKRkRJUXNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9hNzVlMWQtNGQ4MS00OWNiLWFjYTUtODI5OThhOTI4N2Uy
LzEvSXF5Tl8wNlowLUlvbXZZN0ZkVmRKRkRJUXNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzdBxR3Y
MsrhDv2nWsg9cC9WnB7a75Bihi8Qa9RAL8zXX1h21/nBWnFkha6IIPt3y5U23xuA
Evm8RYeDRh+CfKCS8FPL/8sB5GTQaunctlF1lEycc+dFWUmeZtUsxtovZkLJZ4Kk
eFwicxYZBbVGTeEvl+tuOTsEb8m1M3qvSaJYEZD2lpgQqdd0xmIgrriQgM0/3Bfy
TI9fvBAhdSYT/tx8u0tlkkqiEhnBp+Djsb1tNALJ2sFh+WCdQZs4nYl95ObwvbtM
HhDLC4SBniCzY5OUsKeCpi3s8vBbe0IQEIHJJYgXLqWdLUCjSXrIBbuOV3S6U3AN
62H9B7/+itV/Mw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 15:02:57 2025 by rpki-client