Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: 7Gi+DN4jjCFezdKwQDwPCevt8jrYyP9lGT5RMQDLtVI=
Subject key identifier: A6:DB:77:2D:A2:E2:DF:CE:92:9F:35:8F:4D:38:EE:1F:E2:85:3A:5F
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 01992330F15DEB3AF62E3834B0944D803718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: 0177
Signing time: Sun 07 Sep 2025 08:00:34 +0000
Manifest this update: Sun 07 Sep 2025 08:00:34 +0000
Manifest next update: Mon 08 Sep 2025 08:00:34 +0000
Files and hashes: 1: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: rlwjcj0+8WUs8NuBQDvQrqTX96+MWRmX5YAgMcgxPBk=)
2: w8pMwx-vyyole256lyQ0C_5-WOI.roa (hash: K+srURRGs/DsNg/JW4KWXf2QN5EAfkcbY2aU8MAMJS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:f1:5d:eb:3a:f6:2e:38:34:b0:94:4d:80:37:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Sep 7 08:00:34 2025 GMT
Not After : Sep 8 08:00:34 2025 GMT
Subject: CN=a6db772da2e2dfce929f358f4d38ee1fe2853a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:be:c2:fd:0e:ea:65:5a:f7:6a:12:a3:ea:
b3:f1:1b:98:d1:01:c1:bd:7c:9b:0d:9f:aa:d0:c1:
3a:ca:e1:79:50:3a:cd:fb:fa:17:81:81:d2:fc:60:
d5:35:7f:fd:e9:5f:76:98:ca:5f:92:43:8f:8d:43:
83:4a:b5:40:e7:0d:64:34:5c:5e:09:58:b8:3f:cb:
ab:59:00:c6:d3:d8:1c:c2:de:ac:5c:08:79:3f:b7:
78:ff:83:57:78:3a:c4:44:a1:2b:00:92:d6:2e:22:
7a:8c:9d:86:d7:26:34:6f:b3:b4:20:d6:e8:82:c0:
66:2b:31:3f:f0:ff:53:fd:cd:2f:e4:60:17:7e:19:
4e:3b:d4:63:4d:9d:e1:b5:5a:95:fa:30:6e:c5:41:
3a:14:ad:67:67:bc:db:78:d0:09:7a:c5:af:1c:aa:
03:21:43:f2:1c:90:7a:69:38:c2:6b:82:36:c3:9b:
5e:8c:3e:14:56:1c:b4:cc:a8:b9:18:fe:5a:ee:96:
59:cf:a7:27:ad:6e:eb:93:5b:eb:60:54:79:f2:fb:
e5:ad:13:8d:42:c7:cd:7c:e8:30:22:5b:bb:5c:5e:
da:24:42:86:b1:bc:f7:1a:3e:04:02:ff:29:10:1c:
bf:b8:59:7b:dc:a6:a9:3f:f1:8f:92:e5:1f:98:64:
df:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DB:77:2D:A2:E2:DF:CE:92:9F:35:8F:4D:38:EE:1F:E2:85:3A:5F
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:57:47:60:93:eb:60:1d:a8:34:89:19:dc:62:64:62:a0:4c:
97:9f:cd:fd:23:cd:47:d8:8b:b1:89:0e:04:0f:df:71:9a:40:
15:b2:65:d0:57:2a:eb:67:8b:8b:43:44:e7:f8:36:9d:ee:5c:
c1:f8:31:97:e6:bb:8e:d3:0e:39:39:c8:f5:a8:bb:2c:f1:48:
8f:f8:ce:cb:a1:94:41:bd:d5:0f:1b:4f:c0:b8:1b:8e:7d:7e:
1d:8c:c4:5f:df:e7:aa:ee:61:36:37:07:c7:c4:43:4d:64:10:
9f:c8:4d:5a:78:1b:9a:dd:59:00:a2:d6:e4:cc:0e:77:ac:d3:
97:e2:6c:00:b3:c8:58:7a:02:58:56:74:20:0c:ba:e0:f5:c4:
cc:0b:41:f5:52:6c:29:30:cf:fd:4c:fe:f6:dc:7d:05:04:3c:
19:1e:6e:a5:ac:2f:ea:aa:5c:b9:91:3e:a3:80:9b:12:fb:da:
b2:7f:a1:d3:b4:23:7a:8d:05:96:13:01:4d:c0:7a:6a:a5:40:
c3:f7:24:72:f7:7f:8c:88:b1:bf:77:0a:6a:07:25:13:4d:19:
13:36:f7:bc:cb:8f:e9:76:6d:18:25:14:ea:6c:51:e2:7b:cc:
11:62:b9:77:25:a2:84:14:2c:ca:48:c8:c0:96:38:fb:74:5b:
c7:dc:be:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMPFd6zr2Ljg0sJRNgDcYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZjhhMjk4MTQxZmMyZjQ1YzA3MmQyN2EwYmYyNjI2NTVj
YjZmNWEwHhcNMjUwOTA3MDgwMDM0WhcNMjUwOTA4MDgwMDM0WjAzMTEwLwYDVQQD
EyhhNmRiNzcyZGEyZTJkZmNlOTI5ZjM1OGY0ZDM4ZWUxZmUyODUzYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCK+wv0O6mVa92oSo+qz8RuY0QHB
vXybDZ+q0ME6yuF5UDrN+/oXgYHS/GDVNX/96V92mMpfkkOPjUODSrVA5w1kNFxe
CVi4P8urWQDG09gcwt6sXAh5P7d4/4NXeDrERKErAJLWLiJ6jJ2G1yY0b7O0INbo
gsBmKzE/8P9T/c0v5GAXfhlOO9RjTZ3htVqV+jBuxUE6FK1nZ7zbeNAJesWvHKoD
IUPyHJB6aTjCa4I2w5tejD4UVhy0zKi5GP5a7pZZz6cnrW7rk1vrYFR58vvlrRON
QsfNfOgwIlu7XF7aJEKGsbz3Gj4EAv8pEBy/uFl73KapP/GPkuUfmGTfiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbbdy2i4t/Okp81j0047h/ihTpfMB8GA1UdIwQY
MBaAFIv4opgUH8L0XActJ6C/JiZVy29aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80OTY0NDItYWFiNy00MDljLTllZmYt
ZDQ2ZWQ1NjhmODcxLzEvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My80OTY0NDItYWFiNy00MDljLTllZmYtZDQ2ZWQ1NjhmODcx
LzEvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFdHYJPr
YB2oNIkZ3GJkYqBMl5/N/SPNR9iLsYkOBA/fcZpAFbJl0Fcq62eLi0NE5/g2ne5c
wfgxl+a7jtMOOTnI9ai7LPFIj/jOy6GUQb3VDxtPwLgbjn1+HYzEX9/nqu5hNjcH
x8RDTWQQn8hNWngbmt1ZAKLW5MwOd6zTl+JsALPIWHoCWFZ0IAy64PXEzAtB9VJs
KTDP/Uz+9tx9BQQ8GR5upawv6qpcuZE+o4CbEvvasn+h07Qjeo0FlhMBTcB6aqVA
w/ckcvd/jIixv3cKagclE00ZEzb3vMuP6XZtGCUU6mxR4nvMEWK5dyWihBQsykjI
wJY4+3Rbx9y+0g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:02 2025 by rpki-client