Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
File: i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft (raw, json)
Hash identifier: sX9Y8v3fQGdhMGZNdwBjEmjcS8BbvBVSOwkZGyLnE8E=
Subject key identifier: E0:67:8B:50:AF:FE:93:9C:99:2E:48:6C:01:73:33:1C:80:DF:F5:E8
Authority key identifier: 8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
Certificate issuer: /CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Certificate serial: 0199228C68AD254E63C0806AA1199236C5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 05:00:51 +0000
Manifest this update: Sun 07 Sep 2025 05:00:51 +0000
Manifest next update: Mon 08 Sep 2025 05:00:51 +0000
Files and hashes: 1: i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl (hash: D9z7RC8QiqP6B26JIxO07WLwo49sr4kPxo4zWIxwOMQ=)
2: rZl7il51Qi4Gx_nmvEJg-3TLGKk.roa (hash: IPdBuWhuBJNo3ThX3cWTYn6XuZdtQY1uz610IBEtgfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:68:ad:25:4e:63:c0:80:6a:a1:19:92:36:c5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Validity
Not Before: Sep 7 05:00:51 2025 GMT
Not After : Sep 8 05:00:51 2025 GMT
Subject: CN=e0678b50affe939c992e486c0173331c80dff5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:7d:73:ed:16:b0:89:fa:60:75:39:c5:e9:
a8:e0:60:16:53:c9:5f:c7:dc:88:b0:0f:ca:65:a8:
89:da:60:1d:f5:e9:0d:7e:b0:c7:48:a0:95:bd:fe:
d8:99:12:81:bf:47:39:f7:ab:e1:58:0d:09:ae:4a:
84:34:f8:c3:7e:6b:3c:23:50:d0:30:3e:1d:cf:bf:
a4:c9:bc:52:91:92:00:22:59:9b:2a:14:95:02:ca:
22:74:2b:da:70:ad:8b:82:68:be:b3:8e:7d:e0:66:
83:9a:ad:34:3b:4d:1a:95:25:ab:34:6a:4e:65:8f:
34:e5:96:ab:73:28:6e:7f:bb:e1:f2:d3:32:d6:a4:
b6:38:2c:de:14:90:0b:5c:1a:ac:7f:d0:97:a5:98:
14:92:e1:51:9c:37:d0:fe:a2:94:58:c0:10:b1:5f:
a2:88:88:bf:82:af:c0:05:c4:9c:5e:74:b5:05:65:
69:f1:62:ba:ae:57:4b:a4:d5:73:f1:b3:00:7e:59:
15:c9:4a:d0:83:64:b6:e9:c5:ee:d6:59:0b:1e:1e:
9a:0c:5c:2e:a1:94:70:c8:15:29:5e:0b:fa:93:59:
52:49:51:fe:a6:e4:4f:d1:7f:70:5e:a4:af:6a:a3:
f5:3d:b1:ca:61:60:e7:c2:b6:6c:e1:f1:2d:69:2d:
a7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:67:8B:50:AF:FE:93:9C:99:2E:48:6C:01:73:33:1C:80:DF:F5:E8
X509v3 Authority Key Identifier:
keyid:8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3e:f2:47:97:fc:28:66:b2:c3:f5:99:78:e5:8e:31:f2:0d:
f9:8b:35:bb:2c:8c:b9:8f:e1:2a:b5:a6:56:d8:13:99:74:0d:
54:51:7e:2f:d4:f3:b7:36:2c:7b:dd:f1:a1:46:6e:aa:9f:93:
03:15:d9:52:ec:8d:42:16:5b:c7:5d:2f:9c:53:89:85:11:c4:
62:f5:d3:3b:19:1f:81:e9:a0:d8:4b:5d:d1:46:fe:da:45:e2:
94:be:32:2c:ed:ed:60:c3:4d:c9:6d:e3:70:ee:b9:bf:64:30:
d5:56:e2:02:b8:27:11:29:3d:73:55:36:9f:a9:2f:f9:5a:42:
6c:3a:72:17:75:c9:19:5e:f4:87:13:93:b6:24:e3:4a:25:a2:
42:fb:db:cc:71:26:c6:bd:53:77:8d:30:ac:7f:20:5d:e5:1e:
99:a0:c4:a1:17:28:6d:c4:9e:30:cb:03:cc:b9:ec:0c:4e:6a:
11:4b:f0:2b:3e:6e:45:11:85:4e:d8:eb:9a:74:03:58:8b:f2:
7c:75:b1:4b:c2:28:b6:6b:8c:ef:b5:65:c3:23:39:54:c3:28:
83:b3:17:d0:fc:e6:26:b2:8d:8b:13:6c:02:d4:75:7f:ad:91:
47:30:c7:de:07:c6:77:e5:7a:68:36:cf:e8:34:2c:41:ba:84:
b0:12:61:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijGitJU5jwIBqoRmSNsXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGM1M2NjMjI2M2Y2ZmRlYTE3MGQzMjgyYTIwYjhlNzE2
MDczODYwHhcNMjUwOTA3MDUwMDUxWhcNMjUwOTA4MDUwMDUxWjAzMTEwLwYDVQQD
EyhlMDY3OGI1MGFmZmU5MzljOTkyZTQ4NmMwMTczMzMxYzgwZGZmNWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunh9c+0WsIn6YHU5xemo4GAWU8lf
x9yIsA/KZaiJ2mAd9ekNfrDHSKCVvf7YmRKBv0c596vhWA0JrkqENPjDfms8I1DQ
MD4dz7+kybxSkZIAIlmbKhSVAsoidCvacK2Lgmi+s4594GaDmq00O00alSWrNGpO
ZY805Zarcyhuf7vh8tMy1qS2OCzeFJALXBqsf9CXpZgUkuFRnDfQ/qKUWMAQsV+i
iIi/gq/ABcScXnS1BWVp8WK6rldLpNVz8bMAflkVyUrQg2S26cXu1lkLHh6aDFwu
oZRwyBUpXgv6k1lSSVH+puRP0X9wXqSvaqP1PbHKYWDnwrZs4fEtaS2nvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBni1Cv/pOcmS5IbAFzMxyA3/XoMB8GA1UdIwQY
MBaAFIvcU8wiY/b96hcNMoKiC45xYHOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTl4VHpDSmo5djNxRncweWdxSUxqbkZnYzRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzc0MmYtMWQ3MC00ZjMxLWE5Y2Et
N2FjYjIxYmE3NzNmLzEvaTl4VHpDSmo5djNxRncweWdxSUxqbkZnYzRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yMzc0MmYtMWQ3MC00ZjMxLWE5Y2EtN2FjYjIxYmE3NzNm
LzEvaTl4VHpDSmo5djNxRncweWdxSUxqbkZnYzRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALT7yR5f8
KGayw/WZeOWOMfIN+Ys1uyyMuY/hKrWmVtgTmXQNVFF+L9TztzYse93xoUZuqp+T
AxXZUuyNQhZbx10vnFOJhRHEYvXTOxkfgemg2Etd0Ub+2kXilL4yLO3tYMNNyW3j
cO65v2Qw1VbiArgnESk9c1U2n6kv+VpCbDpyF3XJGV70hxOTtiTjSiWiQvvbzHEm
xr1Td40wrH8gXeUemaDEoRcobcSeMMsDzLnsDE5qEUvwKz5uRRGFTtjrmnQDWIvy
fHWxS8IotmuM77VlwyM5VMMog7MX0PzmJrKNixNsAtR1f62RRzDH3gfGd+V6aDbP
6DQsQbqEsBJh2g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:20 2025 by rpki-client