Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier: jGWP1U+wAdTXApKAuEwLg5jcLabJoxG8+CtL+swscq8=
Subject key identifier: 1B:9C:46:84:CB:E9:C8:12:72:E4:63:81:28:69:13:F5:A1:C7:E4:F9
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial: 019938DEA8E9B6247B070B5BE6ADF2C833F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 13:02:20 +0000
Manifest this update: Thu 11 Sep 2025 13:02:20 +0000
Manifest next update: Fri 12 Sep 2025 13:02:20 +0000
Files and hashes: 1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: io/NNig1yo+i3Vr57yATZpSh+mVTdNBIrU4PWmSG1iU=)
2: lsGbzxHmmLCraaV9m6GpjO-iIBA.roa (hash: Z6I8DbUnNuqgSWO6SRPbYw4EfdxPDhEpV2EFYvnSy8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:de:a8:e9:b6:24:7b:07:0b:5b:e6:ad:f2:c8:33:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Validity
Not Before: Sep 11 13:02:20 2025 GMT
Not After : Sep 12 13:02:20 2025 GMT
Subject: CN=1b9c4684cbe9c81272e46381286913f5a1c7e4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:bd:1a:3a:2f:02:b8:3d:8e:b0:cb:65:78:
4a:0c:52:37:fe:5b:50:cb:6f:e6:e0:23:8b:86:fd:
c1:82:76:cd:e8:0c:46:ab:29:de:49:9a:99:1a:58:
52:3f:5c:37:9b:c0:28:ae:e1:5a:75:c3:25:cc:4e:
32:d9:d0:b5:62:dd:58:a9:e0:d6:63:ea:57:4d:6a:
a4:68:e3:85:6e:15:75:b2:8e:96:c4:5f:2f:f7:09:
f6:03:12:3e:49:54:bc:70:d2:69:20:03:fd:e1:63:
d2:56:9f:d6:2a:6b:ec:f2:98:0c:d9:bb:af:d6:e6:
fb:84:ad:d2:0c:0a:4b:7d:2f:49:c1:d3:06:5b:37:
d3:c4:f9:f1:52:02:ca:2d:5d:a7:58:99:5f:67:8f:
74:bb:90:87:99:a7:41:a1:d9:a8:e6:96:27:d8:61:
c1:3c:f6:e1:0d:66:87:20:08:57:1a:60:9a:14:10:
fd:92:a2:8d:73:01:78:cf:b0:81:4c:b2:f0:fe:5c:
15:0e:27:7a:10:db:2f:4f:20:42:c8:44:e7:0a:fe:
09:91:ff:eb:d5:1e:c9:10:df:54:7c:a5:16:84:72:
69:31:c0:98:68:09:3b:a7:28:ab:80:e4:e9:1f:d1:
ee:73:b7:f3:f7:68:09:5d:3c:28:fc:4f:96:33:8f:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9C:46:84:CB:E9:C8:12:72:E4:63:81:28:69:13:F5:A1:C7:E4:F9
X509v3 Authority Key Identifier:
keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1b:5a:0f:8e:a3:4a:7e:82:e9:6a:22:c7:e9:57:5d:fc:17:
6f:31:79:62:36:10:e0:98:1f:60:4a:33:f0:11:5a:cd:80:53:
f7:2d:0e:ba:a1:50:e1:d2:c0:0a:0b:b2:94:6c:82:c0:e4:64:
33:87:39:66:0f:fd:b9:3b:5b:3e:07:02:d1:38:d7:dd:3e:c7:
aa:4b:01:a0:90:59:51:04:5d:f4:e7:82:cf:68:ab:40:c7:5a:
3f:7c:1f:12:4d:bb:89:2d:3d:db:65:9a:21:e6:48:6f:2a:da:
15:ab:28:61:b8:5c:60:87:ba:ee:13:26:35:6b:8d:f6:df:8b:
6f:5c:28:ae:ca:32:77:bb:d7:da:29:fc:00:c8:e2:0d:d7:7d:
c9:87:c0:96:5d:8b:63:23:6a:34:7b:9b:be:2e:14:4a:04:95:
39:52:43:d7:87:e9:93:aa:e5:48:8f:b7:e5:95:30:a4:42:7f:
83:f5:39:51:8a:c2:3c:35:ff:30:5b:dd:69:5c:a9:67:bc:d0:
66:60:f1:08:0e:a1:10:61:4e:ef:d1:51:2c:2d:a0:91:92:b1:
8c:a4:e6:82:dc:80:de:88:46:f4:97:ff:45:f1:52:ad:4c:ab:
5a:b0:f6:5d:b1:3e:af:2d:32:07:db:9f:77:d6:87:37:b0:ed:
75:37:6c:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk43qjptiR7Bwtb5q3yyDPzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMmU5NWM0NTE5ZGU5MjA4ZTNkMjIzMzJhYWJlYzZiMWEy
ZWE3NTYwHhcNMjUwOTExMTMwMjIwWhcNMjUwOTEyMTMwMjIwWjAzMTEwLwYDVQQD
EygxYjljNDY4NGNiZTljODEyNzJlNDYzODEyODY5MTNmNWExYzdlNGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6m9GjovArg9jrDLZXhKDFI3/ltQ
y2/m4COLhv3BgnbN6AxGqyneSZqZGlhSP1w3m8AoruFadcMlzE4y2dC1Yt1YqeDW
Y+pXTWqkaOOFbhV1so6WxF8v9wn2AxI+SVS8cNJpIAP94WPSVp/WKmvs8pgM2buv
1ub7hK3SDApLfS9JwdMGWzfTxPnxUgLKLV2nWJlfZ490u5CHmadBodmo5pYn2GHB
PPbhDWaHIAhXGmCaFBD9kqKNcwF4z7CBTLLw/lwVDid6ENsvTyBCyETnCv4Jkf/r
1R7JEN9UfKUWhHJpMcCYaAk7pyirgOTpH9Huc7fz92gJXTwo/E+WM49PPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBucRoTL6cgScuRjgShpE/Whx+T5MB8GA1UdIwQY
MBaAFNIulcRRnekgjj0iMyqr7GsaLqdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQt
ZjJlNTRkZGVhM2IzLzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQtZjJlNTRkZGVhM2Iz
LzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBtaD46j
Sn6C6Woix+lXXfwXbzF5YjYQ4JgfYEoz8BFazYBT9y0OuqFQ4dLACguylGyCwORk
M4c5Zg/9uTtbPgcC0TjX3T7HqksBoJBZUQRd9OeCz2irQMdaP3wfEk27iS0922Wa
IeZIbyraFasoYbhcYIe67hMmNWuN9t+Lb1worsoyd7vX2in8AMjiDdd9yYfAll2L
YyNqNHubvi4USgSVOVJD14fpk6rlSI+35ZUwpEJ/g/U5UYrCPDX/MFvdaVypZ7zQ
ZmDxCA6hEGFO79FRLC2gkZKxjKTmgtyA3ohG9Jf/RfFSrUyrWrD2XbE+ry0yB9uf
d9aHN7DtdTds2g==
-----END CERTIFICATE-----
Generated at Thu Sep 11 15:06:35 2025 by rpki-client