Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
File: its62HX3YlxjkjZZ8UKVjbeHijI.mft (raw, json)
Hash identifier: QrIeedAs+9AYZpopHZ6XwcFSyL/mlCjSZPVqIYPfFEI=
Subject key identifier: EF:AA:6D:2B:BA:AD:C7:F4:DE:AD:F7:57:6E:AB:53:AE:9A:56:DF:1C
Authority key identifier: 8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
Certificate issuer: /CN=8adb3ad875f7625c63923659f142958db7878a32
Certificate serial: 0199239F7E68C40E3AF62122C4E87AF6DD7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 10:01:19 +0000
Manifest this update: Sun 07 Sep 2025 10:01:19 +0000
Manifest next update: Mon 08 Sep 2025 10:01:19 +0000
Files and hashes: 1: its62HX3YlxjkjZZ8UKVjbeHijI.crl (hash: Hc10hziP7K8psgqXnhvFEU0DC+/qJynuNqRPaAsbuXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:7e:68:c4:0e:3a:f6:21:22:c4:e8:7a:f6:dd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8adb3ad875f7625c63923659f142958db7878a32
Validity
Not Before: Sep 7 10:01:19 2025 GMT
Not After : Sep 8 10:01:19 2025 GMT
Subject: CN=efaa6d2bbaadc7f4deadf7576eab53ae9a56df1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:ce:f2:22:47:59:8f:5b:7f:4a:04:d4:b5:
f6:e2:49:6f:83:55:a9:60:7d:60:6b:8c:6d:8e:0f:
90:ef:82:f2:64:39:e0:3b:d7:81:46:51:a0:fb:93:
2c:c1:f6:91:82:a6:c9:0e:c0:aa:6c:59:8e:8f:da:
9a:89:03:53:07:b4:bb:d2:2f:fa:68:33:06:c8:c4:
83:aa:19:a4:0e:54:bf:48:5f:7a:38:74:bb:6e:be:
4e:e0:53:e2:5e:d6:10:e7:c2:8f:90:aa:4a:5c:b3:
54:fd:2b:a9:81:0a:f1:87:36:bd:15:6f:fd:f9:8c:
30:06:9e:44:12:ce:d2:d5:25:df:a8:5c:28:87:c8:
f5:ce:50:22:ce:a5:b6:73:8a:2a:7c:27:e4:ab:aa:
c2:ee:19:8d:9b:5e:c7:21:16:3a:79:dd:e4:f0:23:
6e:7e:05:a4:9c:7d:d9:89:05:ed:f2:5e:f7:27:eb:
a7:bf:02:eb:c6:74:8a:bb:e2:79:1e:f3:1d:10:30:
a2:e4:02:34:2e:f9:6f:da:4a:22:23:b2:eb:3d:b9:
6a:2a:78:6f:38:41:bb:c1:db:4e:4e:c8:f3:c3:6c:
13:bf:52:3c:ed:fd:5b:08:06:10:14:de:0a:30:36:
69:2f:df:eb:08:6d:14:0d:5c:ac:95:02:5b:9f:20:
2c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AA:6D:2B:BA:AD:C7:F4:DE:AD:F7:57:6E:AB:53:AE:9A:56:DF:1C
X509v3 Authority Key Identifier:
keyid:8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:82:42:83:44:9c:20:76:07:9b:1b:e3:5e:12:f4:6f:25:c0:
8b:87:d1:54:70:d9:71:d1:68:bf:07:82:d3:79:88:82:43:14:
94:e8:ac:ea:6f:aa:7f:76:16:86:fa:e3:86:e7:f3:ee:2c:36:
eb:93:8f:b0:ab:b5:c6:55:66:68:6a:81:78:37:9a:25:44:ff:
8e:a8:86:7e:4c:82:9e:51:a8:7c:0a:e7:38:44:f9:b6:fb:88:
1f:c0:35:82:aa:5e:3d:a0:78:26:39:57:e6:bc:09:2d:13:bb:
2c:9b:25:3c:db:ba:7f:b5:94:0f:d1:48:90:7a:4e:f4:7d:b2:
ea:1b:55:0b:1a:44:b7:b6:f1:c0:4e:4c:d9:f5:af:c0:9b:54:
0d:50:2a:ea:db:e7:d2:a5:e7:4e:df:a7:43:ab:78:7f:22:9b:
e1:0e:54:64:a7:69:ce:26:80:a5:4e:3b:5f:e3:6f:4d:9f:e4:
39:d2:be:09:63:23:9e:41:6b:62:4a:3f:20:f6:ec:d5:a1:05:
be:a0:24:b1:df:b3:78:87:73:e5:90:52:de:71:9b:da:01:0c:
78:10:02:d8:c3:b2:53:31:b9:26:e1:1a:09:b0:b5:67:20:ec:
ea:09:07:83:3c:78:e8:22:b4:71:1e:58:f2:7e:36:cf:e3:4b:
89:70:44:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn35oxA469iEixOh69t19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZGIzYWQ4NzVmNzYyNWM2MzkyMzY1OWYxNDI5NThkYjc4
NzhhMzIwHhcNMjUwOTA3MTAwMTE5WhcNMjUwOTA4MTAwMTE5WjAzMTEwLwYDVQQD
EyhlZmFhNmQyYmJhYWRjN2Y0ZGVhZGY3NTc2ZWFiNTNhZTlhNTZkZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6fO8iJHWY9bf0oE1LX24klvg1Wp
YH1ga4xtjg+Q74LyZDngO9eBRlGg+5MswfaRgqbJDsCqbFmOj9qaiQNTB7S70i/6
aDMGyMSDqhmkDlS/SF96OHS7br5O4FPiXtYQ58KPkKpKXLNU/SupgQrxhza9FW/9
+YwwBp5EEs7S1SXfqFwoh8j1zlAizqW2c4oqfCfkq6rC7hmNm17HIRY6ed3k8CNu
fgWknH3ZiQXt8l73J+unvwLrxnSKu+J5HvMdEDCi5AI0Lvlv2koiI7LrPblqKnhv
OEG7wdtOTsjzw2wTv1I87f1bCAYQFN4KMDZpL9/rCG0UDVyslQJbnyAsJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+qbSu6rcf03q33V26rU66aVt8cMB8GA1UdIwQY
MBaAFIrbOth192JcY5I2WfFClY23h4oyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRzNjJIWDNZbHhqa2paWjhVS1ZqYmVIaWpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xODdmMGItNGJlOS00NzRhLWI0MzUt
ODg1YmM1NGRjZTYyLzEvaXRzNjJIWDNZbHhqa2paWjhVS1ZqYmVIaWpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xODdmMGItNGJlOS00NzRhLWI0MzUtODg1YmM1NGRjZTYy
LzEvaXRzNjJIWDNZbHhqa2paWjhVS1ZqYmVIaWpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwIJCg0Sc
IHYHmxvjXhL0byXAi4fRVHDZcdFovweC03mIgkMUlOis6m+qf3YWhvrjhufz7iw2
65OPsKu1xlVmaGqBeDeaJUT/jqiGfkyCnlGofArnOET5tvuIH8A1gqpePaB4JjlX
5rwJLRO7LJslPNu6f7WUD9FIkHpO9H2y6htVCxpEt7bxwE5M2fWvwJtUDVAq6tvn
0qXnTt+nQ6t4fyKb4Q5UZKdpziaApU47X+NvTZ/kOdK+CWMjnkFrYko/IPbs1aEF
vqAksd+zeIdz5ZBS3nGb2gEMeBAC2MOyUzG5JuEaCbC1ZyDs6gkHgzx46CK0cR5Y
8n42z+NLiXBEbw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:19 2025 by rpki-client