Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
File: I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft (raw, json)
Hash identifier: Rjvb6B545913Mm6qPf5ZyGXG33Iu8A3HTZlDD8Al3bQ=
Subject key identifier: 6F:FB:6F:63:D0:BF:2E:E8:8E:9C:D0:F2:67:49:C1:8C:46:EC:1B:F9
Authority key identifier: 23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
Certificate issuer: /CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Certificate serial: 019923D59530DBF19178F2C78757A2DDE0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 11:00:23 +0000
Manifest this update: Sun 07 Sep 2025 11:00:23 +0000
Manifest next update: Mon 08 Sep 2025 11:00:23 +0000
Files and hashes: 1: I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl (hash: 7XTgGeWfNt78BWSSNuAWvBOZs/yqOvv+bC2s7E7GDkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:95:30:db:f1:91:78:f2:c7:87:57:a2:dd:e0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Validity
Not Before: Sep 7 11:00:23 2025 GMT
Not After : Sep 8 11:00:23 2025 GMT
Subject: CN=6ffb6f63d0bf2ee88e9cd0f26749c18c46ec1bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0d:49:a2:c9:fb:a0:b0:21:6c:38:a6:3b:46:
a7:40:b6:af:7e:2d:01:c1:b2:3b:37:2c:3d:8d:72:
63:0d:05:63:ce:d1:3e:ed:cd:6b:50:04:60:f7:1b:
dc:a6:a3:fa:14:dc:ef:95:6f:fc:55:8a:80:35:c3:
0b:cf:ef:f6:3f:35:4a:e0:0c:48:1a:0f:02:0c:30:
70:d0:00:99:67:6d:4e:32:2d:8d:b9:20:af:ec:58:
1a:47:50:96:14:37:80:55:29:92:49:7c:39:12:a3:
e4:0a:cc:60:1f:53:c5:32:10:52:85:e4:17:11:3d:
20:8c:08:9a:a2:b5:d8:33:29:57:bb:a0:23:f0:e7:
7a:df:93:66:9c:73:20:a6:1e:c9:4a:31:b3:ba:39:
8d:1f:88:02:9b:84:98:17:06:8d:16:75:af:99:06:
41:36:e0:68:31:88:c5:81:d4:54:63:d3:d9:d8:13:
51:c4:27:39:e3:1e:1d:43:41:cb:fe:ef:13:d4:fd:
35:8f:31:71:7a:da:27:7e:8a:93:26:10:5c:e9:41:
28:73:ab:77:10:53:09:6b:24:9a:1f:76:f5:58:38:
15:e8:41:fe:0f:36:fb:8c:12:e8:a5:72:c6:77:7a:
54:b6:8a:6b:88:ca:c0:13:2c:b8:52:f1:54:9a:9f:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FB:6F:63:D0:BF:2E:E8:8E:9C:D0:F2:67:49:C1:8C:46:EC:1B:F9
X509v3 Authority Key Identifier:
keyid:23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8c:48:59:0e:e7:d9:74:73:23:b1:b2:34:e0:54:31:a3:19:
17:c1:a6:a0:52:81:92:53:79:21:b0:10:f3:a1:da:6f:4b:a8:
40:36:34:89:bb:e5:7b:59:58:27:4a:d7:c4:ef:c9:0c:27:c7:
59:0f:15:5e:5a:59:0b:a9:c8:ac:41:aa:0f:5d:b5:e8:a8:36:
a8:43:b6:24:34:85:4a:c1:f6:5d:ba:47:bf:0f:48:06:9f:56:
e5:07:13:13:8a:9a:3b:f2:68:cb:a9:80:1d:d0:fc:c4:f1:0a:
f3:93:60:ce:a7:6b:6b:8c:1d:39:26:6e:b4:5a:e6:c1:f4:39:
e3:bb:d3:15:9b:57:dd:2b:48:1f:05:e7:8c:c4:59:0a:23:d6:
12:9c:43:6f:26:4d:e0:26:0a:95:e3:36:7f:88:92:c7:96:90:
5b:4e:eb:89:32:4b:50:0b:c7:27:7a:17:e5:59:35:ba:0c:25:
c3:fd:40:bb:8c:f7:2e:c4:97:2f:9a:5e:e5:f4:f4:47:ec:59:
eb:8f:59:12:a5:4f:98:ee:7e:be:0b:d2:32:01:d1:2d:cb:59:
bd:f1:cf:48:d4:ec:b7:2c:68:27:bb:92:a2:54:de:5b:db:de:
72:5d:3d:bc:63:53:ca:7a:80:75:7c:ba:b7:98:fa:00:fe:30:
55:e2:86:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1ZUw2/GRePLHh1ei3eDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzY2ZmNjQ2YWRjMTljMDNmNjQxN2E2ZTJhMWM0MTgzYzZi
OGQzZmUwHhcNMjUwOTA3MTEwMDIzWhcNMjUwOTA4MTEwMDIzWjAzMTEwLwYDVQQD
Eyg2ZmZiNmY2M2QwYmYyZWU4OGU5Y2QwZjI2NzQ5YzE4YzQ2ZWMxYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8w1Josn7oLAhbDimO0anQLavfi0B
wbI7Nyw9jXJjDQVjztE+7c1rUARg9xvcpqP6FNzvlW/8VYqANcMLz+/2PzVK4AxI
Gg8CDDBw0ACZZ21OMi2NuSCv7FgaR1CWFDeAVSmSSXw5EqPkCsxgH1PFMhBSheQX
ET0gjAiaorXYMylXu6Aj8Od635NmnHMgph7JSjGzujmNH4gCm4SYFwaNFnWvmQZB
NuBoMYjFgdRUY9PZ2BNRxCc54x4dQ0HL/u8T1P01jzFxetonfoqTJhBc6UEoc6t3
EFMJaySaH3b1WDgV6EH+Dzb7jBLopXLGd3pUtopriMrAEyy4UvFUmp/YIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/7b2PQvy7ojpzQ8mdJwYxG7Bv5MB8GA1UdIwQY
MBaAFCPP9katwZwD9kF6biocQYPGuNP+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jNDEzNzgtZGJkZi00Y2IzLTk2ZWUt
MDIzOGM5MTBhOWJmLzEvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9jNDEzNzgtZGJkZi00Y2IzLTk2ZWUtMDIzOGM5MTBhOWJm
LzEvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIxIWQ7n
2XRzI7GyNOBUMaMZF8GmoFKBklN5IbAQ86Hab0uoQDY0ibvle1lYJ0rXxO/JDCfH
WQ8VXlpZC6nIrEGqD1216Kg2qEO2JDSFSsH2XbpHvw9IBp9W5QcTE4qaO/Joy6mA
HdD8xPEK85Ngzqdra4wdOSZutFrmwfQ547vTFZtX3StIHwXnjMRZCiPWEpxDbyZN
4CYKleM2f4iSx5aQW07riTJLUAvHJ3oX5Vk1ugwlw/1Au4z3LsSXL5pe5fT0R+xZ
649ZEqVPmO5+vgvSMgHRLctZvfHPSNTstyxoJ7uSolTeW9vecl09vGNTynqAdXy6
t5j6AP4wVeKGDQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:11 2025 by rpki-client