Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: 1QPJRjeefPBbd5Go9lslKOvRZmq9XoB/cqGkgWtyROQ=
Subject key identifier: 5D:9C:B3:F3:EC:18:01:CB:E8:7D:A2:67:7E:52:A6:5D:0C:6B:2D:49
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 01996021BF53B773AD6FA4D27EA7E073C291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 0EAE
Signing time: Fri 19 Sep 2025 04:00:48 +0000
Manifest this update: Fri 19 Sep 2025 04:00:48 +0000
Manifest next update: Sat 20 Sep 2025 04:00:48 +0000
Files and hashes: 1: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: CdnXtDp3MOofUhzYWcmBjBdP9Tj1P/z3QtKIJaGHkik=)
2: PeD0qOPxUYxeVA81pP9--xNVIzU.roa (hash: fJvgODfg2m2y6FUhDf+GL6D88mfLwM4rg59sQSq2L84=)
3: qwmmpmJft8mwuiEXYTlzhJQuep0.roa (hash: Q0Z/E8v8Q7W2fm0rXhwdPc4pFVbeDlufQTIsqxx5ZeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:21:bf:53:b7:73:ad:6f:a4:d2:7e:a7:e0:73:c2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Sep 19 04:00:48 2025 GMT
Not After : Sep 20 04:00:48 2025 GMT
Subject: CN=5d9cb3f3ec1801cbe87da2677e52a65d0c6b2d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:b3:1b:8a:99:64:40:ca:6b:d7:05:80:81:
51:fd:ff:ca:d9:60:12:be:6b:94:a0:e9:a9:f2:26:
27:40:95:23:35:01:72:6d:9a:66:44:0b:d6:bc:7e:
d0:3e:14:a0:32:79:a4:98:ad:04:2b:e6:5a:d3:c7:
36:72:b9:17:50:ba:1a:d6:cf:b8:47:c9:aa:bd:f0:
62:8e:66:b3:04:4c:3b:1d:9d:f1:2b:90:bd:6d:a3:
84:5f:ae:fa:e7:34:d3:e7:07:eb:cd:62:5d:aa:b1:
aa:1b:63:22:e1:57:7f:36:42:cd:09:3f:c6:02:42:
14:c6:f5:44:67:42:7e:69:19:b5:46:b6:58:6d:7c:
77:45:0c:7d:be:04:3a:39:1b:5f:f0:2a:fd:92:9d:
1e:9d:d5:86:ae:f2:6b:65:ea:07:3d:64:84:46:fd:
2c:79:0a:18:25:4d:aa:ef:9b:b0:b9:df:ea:0d:e3:
a7:e6:ae:0c:22:a1:11:41:16:f4:f5:61:46:7b:18:
30:4e:5e:7e:05:ec:6e:c4:6d:e3:31:ec:ef:32:b2:
4b:3b:78:81:09:6d:d2:b9:bc:ac:90:f9:ac:ed:78:
35:74:3b:46:21:20:a7:f6:75:3b:67:88:14:e7:d9:
35:16:5a:63:d6:dd:e8:4c:00:4a:e2:42:8b:d4:2c:
1d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9C:B3:F3:EC:18:01:CB:E8:7D:A2:67:7E:52:A6:5D:0C:6B:2D:49
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:71:ca:63:c9:e2:ce:b2:e9:9a:34:69:52:e7:0e:12:7d:3b:
3c:26:d5:59:00:f5:8a:dc:92:26:0f:2f:09:71:03:95:8c:04:
7e:00:52:d3:a6:75:74:ad:9a:55:14:77:7e:03:1f:eb:79:14:
2b:a8:f9:c5:2c:52:9d:de:32:1d:6c:a9:a3:98:44:66:bd:4a:
55:d1:ee:a2:46:95:01:3d:10:74:e7:c5:0b:54:24:ba:51:61:
46:7a:a8:8d:e5:a4:39:2a:da:3c:84:46:5c:58:9e:25:ea:1f:
5b:40:22:fb:f8:e9:8c:6b:cb:92:e3:7c:91:97:8b:d2:62:d6:
a5:b1:dc:4d:5e:a5:74:cd:36:e6:a8:1c:41:9a:12:b2:bd:9e:
3e:b7:40:67:fe:59:4d:c0:61:a6:25:43:0a:1a:e7:60:83:27:
b3:4b:04:dd:73:ed:4c:a1:73:ae:33:b0:d5:ad:4f:c0:d4:23:
6b:68:8a:6c:0d:bc:a0:72:1e:d6:bc:ca:59:4c:e1:16:7b:fb:
94:6d:e4:bc:20:b4:f1:5a:89:cd:05:52:b9:58:60:76:d4:60:
2f:03:da:03:86:07:54:88:39:ca:8b:12:d2:73:50:46:09:b1:
98:13:6d:c2:f4:93:f8:ac:a5:d8:ec:e3:d6:9e:dc:73:3f:c4:
87:73:ba:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlgIb9Tt3Otb6TSfqfgc8KRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYTcxNzM2MTMwOWQyOTM5MzUxYzlkOGJhMjE3M2RiODMx
OWE4OGYwHhcNMjUwOTE5MDQwMDQ4WhcNMjUwOTIwMDQwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZDljYjNmM2VjMTgwMWNiZTg3ZGEyNjc3ZTUyYTY1ZDBjNmIyZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOWzG4qZZEDKa9cFgIFR/f/K2WAS
vmuUoOmp8iYnQJUjNQFybZpmRAvWvH7QPhSgMnmkmK0EK+Za08c2crkXULoa1s+4
R8mqvfBijmazBEw7HZ3xK5C9baOEX6765zTT5wfrzWJdqrGqG2Mi4Vd/NkLNCT/G
AkIUxvVEZ0J+aRm1RrZYbXx3RQx9vgQ6ORtf8Cr9kp0endWGrvJrZeoHPWSERv0s
eQoYJU2q75uwud/qDeOn5q4MIqERQRb09WFGexgwTl5+BexuxG3jMezvMrJLO3iB
CW3SubyskPms7Xg1dDtGISCn9nU7Z4gU59k1Flpj1t3oTABK4kKL1CwdiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2cs/PsGAHL6H2iZ35Spl0May1JMB8GA1UdIwQY
MBaAFCGnFzYTCdKTk1HJ2Lohc9uDGaiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUt
ZjhhNDY5ZDRlMmIyLzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUtZjhhNDY5ZDRlMmIy
LzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3HKY8ni
zrLpmjRpUucOEn07PCbVWQD1itySJg8vCXEDlYwEfgBS06Z1dK2aVRR3fgMf63kU
K6j5xSxSnd4yHWypo5hEZr1KVdHuokaVAT0QdOfFC1QkulFhRnqojeWkOSraPIRG
XFieJeofW0Ai+/jpjGvLkuN8kZeL0mLWpbHcTV6ldM025qgcQZoSsr2ePrdAZ/5Z
TcBhpiVDChrnYIMns0sE3XPtTKFzrjOw1a1PwNQja2iKbA28oHIe1rzKWUzhFnv7
lG3kvCC08VqJzQVSuVhgdtRgLwPaA4YHVIg5yosS0nNQRgmxmBNtwvST+Kyl2Ozj
1p7ccz/Eh3O6CQ==
-----END CERTIFICATE-----
Generated at Fri Sep 19 12:40:24 2025 by rpki-client