Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
File: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json)
Hash identifier: Le53I9hx6Jumi8WQ5peF1a4BunQJSSOl3S3NquNNlec=
Subject key identifier: EE:B8:6A:CD:F5:E9:BA:36:37:A1:A6:9B:42:21:6D:4C:B0:FC:6B:93
Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Certificate serial: 01993500E53A4851719DDF48FB7CA7DC13CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
Manifest number: 1681
Signing time: Wed 10 Sep 2025 19:01:14 +0000
Manifest this update: Wed 10 Sep 2025 19:01:14 +0000
Manifest next update: Thu 11 Sep 2025 19:01:14 +0000
Files and hashes: 1: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: y+GjMcd50STOVWuIr2mtol5gMgGeBKQz3AycVoDa7Iw=)
2: JqGjYzJUHlyPRNKT7Gdae1GdJUA.roa (hash: /ZlOeq2y9fIyqYcQI5TRRc+qHPMMjEQDsJbQfMP47Os=)
3: KP1-R8Ozo5sN8i5g7eaE07K0eTQ.roa (hash: mLvAtndHxWdPvRVZIiOq/nwf/VdytfBFv0z3meNar9k=)
4: W08HMn4p6kVqze5MDixmPqgVV3Q.roa (hash: jlOVPZJCuEAwn3iEzzJNLFkpo/PRQpHf+dW9CA2qsug=)
5: ZaM9jNyw62egtMMXYnGxszrNY3k.roa (hash: IjXCT+wQnlaMHMU5neUWgppwJ+IMB7wimw7ZMxVicdg=)
6: cf3WHfeWDYu7TWnELnXzycteCaY.roa (hash: TcxuwVKWwTiShtI0Unrv/gZ/YwHGK8T1H3ocBzBxMZk=)
7: fuo8dYdaswIRyEIz4oPsApWqGJc.roa (hash: TgHuzsK6LNwJZxHjJiXaEYIfR/pJeI5Px7YOwniHSmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:e5:3a:48:51:71:9d:df:48:fb:7c:a7:dc:13:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Validity
Not Before: Sep 10 19:01:14 2025 GMT
Not After : Sep 11 19:01:14 2025 GMT
Subject: CN=eeb86acdf5e9ba3637a1a69b42216d4cb0fc6b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:43:cb:fe:1f:be:6c:12:73:80:d9:87:03:02:
a1:01:5a:43:c3:d6:16:85:24:0b:fb:e7:0f:82:16:
4d:81:33:fc:1c:42:a8:79:17:e7:d4:47:9e:70:6c:
61:d1:dc:29:d9:2d:d9:d4:91:cc:a2:0d:ea:cf:aa:
d0:80:34:84:a8:e0:6d:80:ac:26:b6:a5:a4:1d:13:
12:4d:0b:83:5a:88:22:7a:3f:26:74:6d:a6:29:b1:
a6:d0:3f:70:fb:50:8c:8d:8e:5a:b7:35:e2:7c:74:
1c:e7:9b:2a:52:11:26:3c:e0:59:1b:c1:2a:8d:8f:
f4:84:9b:67:50:1f:9e:30:73:09:98:40:69:16:3b:
04:c4:1b:70:1b:c9:10:1b:20:b4:d7:aa:15:79:9d:
9c:59:13:e8:29:e7:ad:25:c2:6f:f1:87:bc:91:91:
98:27:93:7b:19:12:25:30:84:86:76:e6:f7:e6:55:
3b:66:ff:ca:e6:a5:4d:8e:59:6d:22:ac:55:7b:0e:
fe:83:fd:b7:36:32:3b:a8:77:ea:a9:43:4c:20:cf:
83:00:32:67:89:e9:18:ce:ad:76:b7:60:52:2a:b5:
67:72:30:68:81:b8:b0:9d:e1:11:b9:25:38:0f:c9:
41:ef:77:c8:d8:7b:02:d5:a6:87:7e:e5:06:42:94:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B8:6A:CD:F5:E9:BA:36:37:A1:A6:9B:42:21:6D:4C:B0:FC:6B:93
X509v3 Authority Key Identifier:
keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ab:70:c5:e0:da:aa:53:27:d5:79:9d:e5:ce:fd:c6:13:08:
28:6c:61:e7:27:4b:fb:76:16:15:e8:af:12:fe:01:2a:ed:49:
d8:0f:b2:44:c4:d4:a8:f3:a3:5e:b0:3f:d3:5f:e3:cb:e6:1a:
b3:77:dd:c8:a6:31:84:9c:5d:c3:4b:10:84:fe:fe:82:76:67:
77:fc:b2:2c:af:b1:be:db:d4:20:39:36:13:4d:c6:b2:16:f0:
25:f2:5e:37:9e:e4:6d:d9:c6:26:b0:0e:bc:dc:fd:58:fc:e1:
e2:da:42:cd:0c:9a:e6:6c:47:b0:68:db:bc:50:72:e8:5d:c2:
ff:1e:35:8a:85:a7:48:cf:20:f2:d5:22:fd:fd:6f:d5:c3:45:
33:6d:04:2e:ac:66:97:d5:ab:8b:36:c8:e4:1f:94:69:97:64:
9e:a8:80:9c:7a:d0:e7:52:c2:ef:1a:48:7f:be:30:e9:68:87:
5a:b2:e4:fc:3d:55:c1:7e:eb:f8:49:df:ae:2f:9b:4f:e1:11:
1a:ea:64:af:98:63:3f:44:e1:46:de:56:c1:72:33:2e:eb:d4:
aa:fe:19:dc:86:e9:c2:09:25:92:26:b4:14:5c:b7:a1:a7:9f:
4b:b2:12:92:e0:21:1e:00:a8:0b:9d:65:64:4e:23:40:2e:bb:
ec:28:39:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1AOU6SFFxnd9I+3yn3BPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj
ZmQwNjIwHhcNMjUwOTEwMTkwMTE0WhcNMjUwOTExMTkwMTE0WjAzMTEwLwYDVQQD
EyhlZWI4NmFjZGY1ZTliYTM2MzdhMWE2OWI0MjIxNmQ0Y2IwZmM2YjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEPL/h++bBJzgNmHAwKhAVpDw9YW
hSQL++cPghZNgTP8HEKoeRfn1EeecGxh0dwp2S3Z1JHMog3qz6rQgDSEqOBtgKwm
tqWkHRMSTQuDWogiej8mdG2mKbGm0D9w+1CMjY5atzXifHQc55sqUhEmPOBZG8Eq
jY/0hJtnUB+eMHMJmEBpFjsExBtwG8kQGyC016oVeZ2cWRPoKeetJcJv8Ye8kZGY
J5N7GRIlMISGdub35lU7Zv/K5qVNjlltIqxVew7+g/23NjI7qHfqqUNMIM+DADJn
iekYzq12t2BSKrVncjBogbiwneERuSU4D8lB73fI2HsC1aaHfuUGQpRvoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO64as316bo2N6Gmm0IhbUyw/GuTMB8GA1UdIwQY
MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt
NjU0ZGQ2NDQyY2U0LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0
LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANatwxeDa
qlMn1Xmd5c79xhMIKGxh5ydL+3YWFeivEv4BKu1J2A+yRMTUqPOjXrA/01/jy+Ya
s3fdyKYxhJxdw0sQhP7+gnZnd/yyLK+xvtvUIDk2E03GshbwJfJeN57kbdnGJrAO
vNz9WPzh4tpCzQya5mxHsGjbvFBy6F3C/x41ioWnSM8g8tUi/f1v1cNFM20ELqxm
l9WrizbI5B+UaZdknqiAnHrQ51LC7xpIf74w6WiHWrLk/D1VwX7r+Enfri+bT+ER
Gupkr5hjP0ThRt5WwXIzLuvUqv4Z3Ibpwgklkia0FFy3oaefS7ISkuAhHgCoC51l
ZE4jQC677Cg5cA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 21:41:08 2025 by rpki-client