Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
File: IYLNOsXE22fqcxprcZi31uT_EVw.mft (raw, json)
Hash identifier: Cvk+80lJheiP3HsydtZiS8QknJmJRJnE4IxQhz8Uy0w=
Subject key identifier: AB:C5:08:89:AA:CD:B3:EE:86:49:BF:93:07:91:74:38:66:D1:DF:98
Authority key identifier: 21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
Certificate issuer: /CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Certificate serial: 019923D604F2FD0881B13AA327315A199E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
Manifest number: 10D9
Signing time: Sun 07 Sep 2025 11:00:52 +0000
Manifest this update: Sun 07 Sep 2025 11:00:52 +0000
Manifest next update: Mon 08 Sep 2025 11:00:52 +0000
Files and hashes: 1: IYLNOsXE22fqcxprcZi31uT_EVw.crl (hash: TDHsd17MgZ7AKxSYTRIsHQM47hk4m54PLSiP7N8Zcyg=)
2: g3nTkjVHfCtnRgD2iYnxWWRZOIk.roa (hash: 8O+KUIsUB5NmSou/PBbO/5fJhmgcsiY9mA8eGOd3AB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:04:f2:fd:08:81:b1:3a:a3:27:31:5a:19:9e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Validity
Not Before: Sep 7 11:00:52 2025 GMT
Not After : Sep 8 11:00:52 2025 GMT
Subject: CN=abc50889aacdb3ee8649bf930791743866d1df98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:65:79:88:a2:46:33:ba:38:0a:c7:d8:de:
8e:bf:b9:25:ee:21:1b:14:67:a9:5d:af:c8:b3:31:
d3:07:7e:cd:a0:1c:b2:87:e2:62:0c:e4:71:12:87:
2b:b0:57:10:90:b4:98:4b:af:00:69:bf:1e:f8:0c:
fb:aa:9a:e3:57:bd:70:40:b5:74:51:a0:26:42:a2:
89:7e:a9:33:99:30:6f:2d:7e:a8:43:40:23:e5:65:
48:80:aa:de:5e:7e:9f:15:ae:93:83:06:b2:53:ca:
93:b3:4e:9d:a3:38:0b:97:8a:16:27:bb:21:95:f3:
3a:cd:e1:69:71:1d:92:1c:a1:7e:e2:c7:c8:3d:c6:
c6:27:ee:54:3e:56:f1:43:e7:9b:a5:1c:8d:0f:82:
88:08:c2:d7:a9:21:fd:f2:44:89:3b:a7:c3:e2:95:
ac:cc:6f:e7:08:49:45:70:90:13:53:42:67:70:c8:
10:09:ec:f9:47:b8:c4:b2:8c:23:b7:49:98:f4:0d:
b7:fe:00:07:ce:d9:5e:66:bc:cd:c1:17:70:60:3b:
af:4c:ab:22:8f:12:71:a2:b1:29:9e:d1:c2:3e:db:
46:54:25:11:bd:43:d5:87:07:b7:cc:31:ea:5c:99:
cc:7f:8c:c7:51:1d:17:67:e6:10:0c:92:91:91:f3:
b7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C5:08:89:AA:CD:B3:EE:86:49:BF:93:07:91:74:38:66:D1:DF:98
X509v3 Authority Key Identifier:
keyid:21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:4d:42:6d:1d:33:c2:c8:1e:d5:1d:fd:b2:59:4a:b0:14:8b:
81:a2:cf:61:3c:86:47:fc:2a:f7:4c:f3:af:78:64:1b:f9:57:
1b:3c:36:9a:7c:ec:57:8d:27:b5:1d:67:c7:f3:a5:59:59:6d:
45:46:23:7d:32:26:a4:30:b9:1f:27:62:cd:fe:30:3b:e5:eb:
15:89:b8:f4:ac:27:9f:28:a9:6e:f8:c3:df:ca:c0:39:69:d8:
c4:02:92:3d:21:23:c7:46:fe:95:f5:23:85:ac:00:fd:38:94:
03:30:77:fe:5c:0c:91:4d:7b:5f:f3:34:11:39:1f:0d:b0:fe:
f6:d8:aa:5c:c3:a5:9a:df:83:69:5e:10:26:7e:ac:3c:72:e3:
e2:b3:ad:a5:b1:33:5f:24:e7:6c:3f:ad:ed:97:b6:4a:25:05:
34:78:63:47:9e:1a:45:73:fa:49:11:b8:78:51:6c:9a:4f:89:
88:4b:03:e9:2e:70:ef:89:6d:b1:c5:58:dd:ff:8c:87:d6:30:
5a:cf:9d:f4:61:11:8f:49:f9:cc:55:1f:96:8e:bf:7d:f7:9d:
3f:09:03:5d:e1:b1:1d:9a:5d:e6:48:64:62:75:39:d9:b0:98:
1c:03:19:6f:df:ee:e5:7c:ed:b0:01:cd:73:0c:92:c9:b1:2d:
81:5a:bf:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1gTy/QiBsTqjJzFaGZ4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODJjZDNhYzVjNGRiNjdlYTczMWE2YjcxOThiN2Q2ZTRm
ZjExNWMwHhcNMjUwOTA3MTEwMDUyWhcNMjUwOTA4MTEwMDUyWjAzMTEwLwYDVQQD
EyhhYmM1MDg4OWFhY2RiM2VlODY0OWJmOTMwNzkxNzQzODY2ZDFkZjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj5leYiiRjO6OArH2N6Ov7kl7iEb
FGepXa/IszHTB37NoByyh+JiDORxEocrsFcQkLSYS68Aab8e+Az7qprjV71wQLV0
UaAmQqKJfqkzmTBvLX6oQ0Aj5WVIgKreXn6fFa6TgwayU8qTs06dozgLl4oWJ7sh
lfM6zeFpcR2SHKF+4sfIPcbGJ+5UPlbxQ+ebpRyND4KICMLXqSH98kSJO6fD4pWs
zG/nCElFcJATU0JncMgQCez5R7jEsowjt0mY9A23/gAHztleZrzNwRdwYDuvTKsi
jxJxorEpntHCPttGVCURvUPVhwe3zDHqXJnMf4zHUR0XZ+YQDJKRkfO3LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvFCImqzbPuhkm/kweRdDhm0d+YMB8GA1UdIwQY
MBaAFCGCzTrFxNtn6nMaa3GYt9bk/xFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlMTk9zWEUyMmZxY3hwcmNaaTMxdVRfRVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yZmFlYjUtNmExZC00YTEzLWJhMWYt
NDY2M2JjOWRhOTY0LzEvSVlMTk9zWEUyMmZxY3hwcmNaaTMxdVRfRVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yZmFlYjUtNmExZC00YTEzLWJhMWYtNDY2M2JjOWRhOTY0
LzEvSVlMTk9zWEUyMmZxY3hwcmNaaTMxdVRfRVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu01CbR0z
wsge1R39sllKsBSLgaLPYTyGR/wq90zzr3hkG/lXGzw2mnzsV40ntR1nx/OlWVlt
RUYjfTImpDC5Hydizf4wO+XrFYm49KwnnyipbvjD38rAOWnYxAKSPSEjx0b+lfUj
hawA/TiUAzB3/lwMkU17X/M0ETkfDbD+9tiqXMOlmt+DaV4QJn6sPHLj4rOtpbEz
XyTnbD+t7Ze2SiUFNHhjR54aRXP6SRG4eFFsmk+JiEsD6S5w74ltscVY3f+Mh9Yw
Ws+d9GERj0n5zFUflo6/ffedPwkDXeGxHZpd5khkYnU52bCYHAMZb9/u5XztsAHN
cwySybEtgVq/wA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:40 2025 by rpki-client