Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
File: I6NILh1m2H9bml7rnIr9a17CMiQ.mft (raw, json)
Hash identifier: f4yrVoc6qNX8ncleg3ngG1Z1yk4noXLCZu3mWNJf05g=
Subject key identifier: 2F:01:6C:60:B1:9E:C2:82:B7:0A:6E:6C:B3:10:7C:92:FE:50:7C:FE
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
Certificate issuer: /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Certificate serial: 019923D64E0E5F88E3B872C2926D6F9EC7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 11:01:11 +0000
Manifest this update: Sun 07 Sep 2025 11:01:11 +0000
Manifest next update: Mon 08 Sep 2025 11:01:11 +0000
Files and hashes: 1: I6NILh1m2H9bml7rnIr9a17CMiQ.crl (hash: b36LwA3w7RYrAZjAXIpmLzfOB/lMEuKppf8KkxGgVXg=)
2: IQwej1LnyY7ETYPMzr0MBaKMJYU.roa (hash: m2Od1UXry84TfojxLTlOoi+R13MMd4A7opflyOM6uR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:4e:0e:5f:88:e3:b8:72:c2:92:6d:6f:9e:c7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Validity
Not Before: Sep 7 11:01:11 2025 GMT
Not After : Sep 8 11:01:11 2025 GMT
Subject: CN=2f016c60b19ec282b70a6e6cb3107c92fe507cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c5:fe:43:99:97:ba:17:5c:28:3f:e3:5e:c5:
c9:7c:14:01:06:f0:d0:02:be:3a:45:42:1d:78:c7:
86:d3:2a:bc:7a:4f:5f:30:d3:c0:2a:48:b1:14:32:
b8:4a:4a:16:a8:b1:40:66:b4:d3:f5:da:b7:c9:e4:
39:bb:2f:6c:55:c7:24:00:f1:b2:75:8b:a2:67:31:
81:eb:05:b2:d6:ee:58:0a:10:cb:4e:49:f3:26:86:
19:6e:f9:1e:78:e1:59:03:6f:7c:14:80:71:cd:ec:
c7:5f:37:c5:87:25:af:1a:3b:5e:c2:a6:73:95:0c:
b6:9c:ba:7f:9a:3c:dc:fb:b0:58:6a:3b:5c:f0:46:
29:44:73:d2:19:ab:6c:a6:2f:5a:fc:db:b7:8e:ed:
7c:62:83:f8:3a:d6:6d:d8:1b:96:4d:31:2d:7f:01:
7d:bb:14:b7:8a:12:c4:12:76:e2:e4:be:7e:c5:f7:
1d:7f:18:88:bf:1d:88:4d:bd:07:94:8c:fe:6d:d5:
4d:e4:f0:98:40:12:5a:d7:f9:e7:f3:8c:3e:ec:6a:
16:8d:8f:d5:6d:6f:aa:54:e5:f1:51:25:65:14:ca:
b3:88:01:9e:1a:b2:83:77:ed:71:f2:bf:94:27:fb:
e6:70:ff:1b:76:8e:aa:64:c6:ee:b2:54:2a:12:06:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:01:6C:60:B1:9E:C2:82:B7:0A:6E:6C:B3:10:7C:92:FE:50:7C:FE
X509v3 Authority Key Identifier:
keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b9:5e:4d:5d:c4:bd:bf:80:a1:2b:ae:58:1b:cf:bc:51:81:
ea:74:f1:aa:fc:8d:d1:35:89:32:9d:e6:04:09:96:88:60:a3:
80:23:a5:9f:23:76:ea:8a:64:84:30:20:55:d0:95:fb:7a:2b:
50:e8:c4:ef:73:96:96:90:d4:64:37:f6:e0:71:eb:b0:da:e0:
fb:8d:d8:7e:48:3e:e8:93:7b:15:d8:e3:1d:df:b7:9e:7e:e5:
85:67:45:df:a9:04:fc:29:f4:06:12:0b:67:f9:33:82:34:e8:
f6:e4:29:a7:48:f6:99:a9:b4:13:d7:77:d6:65:62:39:13:cc:
f9:7e:6c:70:53:99:70:e2:32:2c:75:8f:37:59:03:b7:30:51:
2c:8c:71:12:36:51:c7:b2:05:23:6b:f8:90:61:7d:d0:a5:b9:
b6:b1:f7:5b:78:81:c8:15:20:84:8d:dc:c1:52:08:28:cb:22:
a4:45:75:50:93:a0:c3:bd:68:ad:eb:df:07:8d:54:f0:83:c8:
4a:b5:36:47:d7:60:af:c8:4f:52:c2:5a:eb:14:5d:53:e7:4c:
2a:a8:a1:c5:c5:49:98:31:31:9f:bc:5c:e9:85:fb:1c:20:e6:
1c:03:c8:5a:f7:2d:fa:81:00:4a:a7:e2:f3:bc:6d:c6:c9:38:
a9:f3:3d:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1k4OX4jjuHLCkm1vnsewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTM0ODJlMWQ2NmQ4N2Y1YjlhNWVlYjljOGFmZDZiNWVj
MjMyMjQwHhcNMjUwOTA3MTEwMTExWhcNMjUwOTA4MTEwMTExWjAzMTEwLwYDVQQD
EygyZjAxNmM2MGIxOWVjMjgyYjcwYTZlNmNiMzEwN2M5MmZlNTA3Y2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MX+Q5mXuhdcKD/jXsXJfBQBBvDQ
Ar46RUIdeMeG0yq8ek9fMNPAKkixFDK4SkoWqLFAZrTT9dq3yeQ5uy9sVcckAPGy
dYuiZzGB6wWy1u5YChDLTknzJoYZbvkeeOFZA298FIBxzezHXzfFhyWvGjtewqZz
lQy2nLp/mjzc+7BYajtc8EYpRHPSGatspi9a/Nu3ju18YoP4OtZt2BuWTTEtfwF9
uxS3ihLEEnbi5L5+xfcdfxiIvx2ITb0HlIz+bdVN5PCYQBJa1/nn84w+7GoWjY/V
bW+qVOXxUSVlFMqziAGeGrKDd+1x8r+UJ/vmcP8bdo6qZMbuslQqEgbPRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8BbGCxnsKCtwpubLMQfJL+UHz+MB8GA1UdIwQY
MBaAFCOjSC4dZth/W5pe65yK/WtewjIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81MDJlY2QtZTZmZS00Mjk4LTgwNTQt
MTM4NTg3MWE5MDlkLzEvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC81MDJlY2QtZTZmZS00Mjk4LTgwNTQtMTM4NTg3MWE5MDlk
LzEvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLleTV3E
vb+AoSuuWBvPvFGB6nTxqvyN0TWJMp3mBAmWiGCjgCOlnyN26opkhDAgVdCV+3or
UOjE73OWlpDUZDf24HHrsNrg+43Yfkg+6JN7FdjjHd+3nn7lhWdF36kE/Cn0BhIL
Z/kzgjTo9uQpp0j2mam0E9d31mViORPM+X5scFOZcOIyLHWPN1kDtzBRLIxxEjZR
x7IFI2v4kGF90KW5trH3W3iByBUghI3cwVIIKMsipEV1UJOgw71orevfB41U8IPI
SrU2R9dgr8hPUsJa6xRdU+dMKqihxcVJmDExn7xc6YX7HCDmHAPIWvct+oEASqfi
87xtxsk4qfM9Vw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:00 2025 by rpki-client