Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json)
Hash identifier: FgqkCzzOlDLcyWfUNcofIE5pK+umcwjwzbvjw3+j+l0=
Subject key identifier: 68:22:24:7E:A4:3D:29:8B:AF:86:07:8A:1C:F2:6C:BD:C0:09:D4:B2
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial: 0199179AC04A626D2BAC89A5A7A543C38554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
Manifest number: 1249
Signing time: Fri 05 Sep 2025 02:00:41 +0000
Manifest this update: Fri 05 Sep 2025 02:00:41 +0000
Manifest next update: Sat 06 Sep 2025 02:00:41 +0000
Files and hashes: 1: 7ivcRbHUq4tA4Hz9Wb386VjaBS0.roa (hash: CGbH34TXJ114G1ywTRowOQ13NrG2LKX6vQJmgAwZZz4=)
2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: csOhnh8xB8wC1o8xKPIlLvQPlG6BKoaIBF8uISpK3MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:c0:4a:62:6d:2b:ac:89:a5:a7:a5:43:c3:85:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Validity
Not Before: Sep 5 02:00:41 2025 GMT
Not After : Sep 6 02:00:41 2025 GMT
Subject: CN=6822247ea43d298baf86078a1cf26cbdc009d4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:8c:fa:c1:df:9b:19:f1:7b:7c:62:24:fe:
30:e7:1f:81:8e:6a:4d:4a:8d:0d:4f:ec:de:5e:a2:
21:9c:40:97:64:f6:f7:6f:58:8b:8d:6f:40:05:17:
8c:87:23:13:83:d0:a9:c5:68:8d:16:36:24:d7:00:
3d:33:d7:b8:c3:6c:3a:19:3d:0e:0f:a0:a6:b0:46:
47:63:a4:a2:51:72:30:18:87:23:f5:7b:8b:82:50:
1e:de:33:78:d0:74:24:ff:a1:6f:27:33:17:c9:c7:
dc:63:f6:65:a5:74:c9:a1:b3:cc:62:dd:89:19:bf:
2b:1e:9e:55:b6:38:8d:f1:c6:d4:cf:ca:6c:75:9a:
1f:1a:ce:0c:99:07:ad:fb:61:99:72:f6:75:12:26:
30:63:c8:09:36:e0:c3:30:e9:c2:7b:b5:55:27:a8:
6e:73:fa:fa:8a:74:83:94:0c:85:bd:d1:41:49:94:
19:d8:5e:41:df:e2:b2:92:c5:01:65:f2:aa:97:6c:
92:43:95:b4:8e:1b:46:a6:a2:1f:74:b9:ff:82:d2:
5e:41:b0:a0:21:0c:2d:6a:2f:24:7b:67:5c:f4:74:
a5:59:59:09:38:e1:81:2f:48:fe:7b:6b:9f:76:ca:
8c:e4:55:00:da:0f:37:01:b7:b3:68:ea:d3:50:6d:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:22:24:7E:A4:3D:29:8B:AF:86:07:8A:1C:F2:6C:BD:C0:09:D4:B2
X509v3 Authority Key Identifier:
keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a2:4f:d0:3a:a9:20:47:5c:cf:fd:a6:a0:9d:e0:e8:d8:53:
ff:ee:d0:4d:49:c1:7b:f0:65:70:43:f8:17:a9:4b:05:a3:2f:
c4:eb:0e:bf:bf:a1:7d:85:ff:ed:2a:a2:10:1e:c1:a1:21:7f:
0c:cb:0d:f5:51:cf:ce:ad:c6:8a:cd:af:8d:12:fe:5d:1d:b0:
5e:c8:8f:c9:e3:2b:ce:ee:ce:8b:0f:e3:42:72:1c:b3:5e:09:
18:3d:a4:84:81:5e:92:cb:ab:29:bb:13:77:34:be:8c:1b:60:
b1:eb:dd:ed:c2:94:eb:d8:94:bd:58:2e:1e:29:58:45:f5:5d:
8f:09:74:02:67:c5:fd:30:12:ec:8a:96:78:dc:3d:45:d4:b8:
c9:7b:0c:4b:33:76:3d:e5:a5:c7:36:c7:53:b6:f9:41:88:f5:
c5:bb:13:aa:9d:ab:e3:26:bf:0f:52:10:bb:cb:62:9c:42:67:
09:54:4d:ad:5a:7e:e6:63:ed:17:8d:26:bd:8d:fd:68:4a:06:
a8:65:ac:d8:6c:b8:60:cc:83:10:8b:e6:7e:4a:e1:74:64:ea:
53:2a:d9:ee:ad:7b:7e:c1:a9:e3:b7:31:e9:a4:cf:c6:8d:d5:
1c:26:58:51:01:bc:b3:6d:ba:c9:43:d9:87:d3:74:99:29:9f:
82:5a:d4:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXmsBKYm0rrImlp6VDw4VUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMjRmYjI4MTJhZTJmM2Q0ZDliYjQ1ODlkZDczMWU1NDY5
NzkxMDkwHhcNMjUwOTA1MDIwMDQxWhcNMjUwOTA2MDIwMDQxWjAzMTEwLwYDVQQD
Eyg2ODIyMjQ3ZWE0M2QyOThiYWY4NjA3OGExY2YyNmNiZGMwMDlkNGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/iM+sHfmxnxe3xiJP4w5x+BjmpN
So0NT+zeXqIhnECXZPb3b1iLjW9ABReMhyMTg9CpxWiNFjYk1wA9M9e4w2w6GT0O
D6CmsEZHY6SiUXIwGIcj9XuLglAe3jN40HQk/6FvJzMXycfcY/ZlpXTJobPMYt2J
Gb8rHp5VtjiN8cbUz8psdZofGs4MmQet+2GZcvZ1EiYwY8gJNuDDMOnCe7VVJ6hu
c/r6inSDlAyFvdFBSZQZ2F5B3+KyksUBZfKql2ySQ5W0jhtGpqIfdLn/gtJeQbCg
IQwtai8ke2dc9HSlWVkJOOGBL0j+e2ufdsqM5FUA2g83AbezaOrTUG3+aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgiJH6kPSmLr4YHihzybL3ACdSyMB8GA1UdIwQY
MBaAFP4k+ygSri89TZu0WJ3XMeVGl5EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jNjZmZjktMTBlYS00YjQ0LTkxNjkt
YzVmNjcwMjM5NzE4LzEvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jNjZmZjktMTBlYS00YjQ0LTkxNjktYzVmNjcwMjM5NzE4
LzEvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaJP0Dqp
IEdcz/2moJ3g6NhT/+7QTUnBe/BlcEP4F6lLBaMvxOsOv7+hfYX/7SqiEB7BoSF/
DMsN9VHPzq3Gis2vjRL+XR2wXsiPyeMrzu7Oiw/jQnIcs14JGD2khIFeksurKbsT
dzS+jBtgsevd7cKU69iUvVguHilYRfVdjwl0AmfF/TAS7IqWeNw9RdS4yXsMSzN2
PeWlxzbHU7b5QYj1xbsTqp2r4ya/D1IQu8tinEJnCVRNrVp+5mPtF40mvY39aEoG
qGWs2Gy4YMyDEIvmfkrhdGTqUyrZ7q17fsGp47cx6aTPxo3VHCZYUQG8s226yUPZ
h9N0mSmfglrUFQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:14 2025 by rpki-client