Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: Qprmex9847/6NW72RgO9HTfk2dscDvP/5/t/MFH4zoQ=
Subject key identifier: A2:05:9C:F9:E9:56:BF:FC:EF:FD:DF:BE:1C:D2:87:B4:70:4B:57:D1
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 019922FA307196FC27642A224D2E841B7ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 07:00:45 +0000
Manifest this update: Sun 07 Sep 2025 07:00:45 +0000
Manifest next update: Mon 08 Sep 2025 07:00:45 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: Yz4KqfEhXaBBHPNgT9Ba3jFo1egkXst/eHZ1wouW69A=)
2: 8WExy4twgMjUhhd6ZwwuMmQy8hc.roa (hash: DEuWlnE+ezZMUM7awLwZ5+QzOvWVXlr73rgH56B1SXs=)
3: UPhAaB84R0Xe1XTexqfwP-ciVHM.roa (hash: p28psRkGWXa6krQq8ETJGtszXl3PhjiqO+T48rxu9sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:30:71:96:fc:27:64:2a:22:4d:2e:84:1b:7e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Sep 7 07:00:45 2025 GMT
Not After : Sep 8 07:00:45 2025 GMT
Subject: CN=a2059cf9e956bffceffddfbe1cd287b4704b57d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:d4:ce:ea:b5:e5:b8:44:d0:51:e1:e6:50:
77:3d:49:93:f1:da:d7:ce:21:f5:22:66:dc:6d:e3:
97:e1:4e:7d:64:f3:89:96:3a:9a:15:20:41:59:26:
f0:cd:5f:46:3d:26:33:6f:80:e8:b4:3f:c7:59:d2:
ea:39:f1:ee:9d:ff:81:7c:f9:1d:da:bf:be:b1:94:
a2:38:8d:81:1f:6f:93:8a:da:34:23:b9:59:6f:ea:
55:e7:5d:2f:db:53:6e:09:8e:9c:41:13:45:1d:a2:
d7:cc:75:7f:7c:e2:61:07:b7:e3:1a:e2:56:38:2f:
c1:e3:54:fe:1b:02:a5:f7:3b:e6:fa:80:5f:c1:23:
c5:67:6e:fe:da:96:a2:f9:ba:92:d2:24:76:b5:24:
4b:af:35:d9:cd:6b:fb:e0:42:98:84:8f:8d:19:f1:
08:c6:31:c7:0b:13:58:91:54:f9:ee:a8:0b:2c:0a:
4b:42:e3:8b:20:12:14:73:57:06:5b:24:c3:d0:a8:
c0:cd:10:08:76:ec:e8:84:ab:d7:ab:68:8a:bc:63:
2c:46:ec:8f:92:e6:e6:8b:f3:bc:45:26:42:31:d8:
4f:36:6f:8f:a1:0f:d5:85:b7:86:cd:44:82:83:c7:
35:48:68:cd:06:fe:68:7c:a9:5a:da:6a:fc:63:d8:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:05:9C:F9:E9:56:BF:FC:EF:FD:DF:BE:1C:D2:87:B4:70:4B:57:D1
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9d:4b:86:8f:93:9c:36:74:ab:1b:7a:be:f9:fe:a2:b7:3b:
86:f8:ec:2a:99:dd:44:9f:65:1a:a4:1d:92:87:5f:b9:be:2f:
63:ce:00:dd:a0:d5:d4:95:59:c3:e9:8b:a0:1b:2f:d2:d6:f4:
6d:4c:e3:d5:86:d4:fa:50:07:7c:45:bb:84:8e:b6:fd:46:5b:
67:e2:90:ed:b5:63:b3:f4:f8:14:32:6c:a1:94:d7:96:27:c4:
0e:55:e9:9d:c7:d9:5c:97:11:98:d9:21:ce:2a:4e:08:e5:62:
5f:b8:7b:87:02:52:4d:06:84:88:11:83:13:35:ff:0a:0a:fe:
26:10:c9:97:d2:42:f5:d3:93:b0:5e:4c:55:b0:6f:9d:c9:60:
bf:ce:15:3b:75:e1:47:f7:6c:d3:d6:88:a1:24:71:28:8c:24:
de:33:f4:7c:60:21:ee:48:db:52:88:20:75:74:7c:68:ee:ea:
e8:c5:f8:3a:6f:a2:61:2e:c8:6e:1d:0a:e2:c7:d1:b7:9a:1d:
0d:9e:70:e3:9d:da:b9:f5:4c:df:6c:ea:0b:ff:d4:a1:09:62:
29:6d:d4:0b:ee:f2:74:16:87:99:9f:b8:05:0f:18:3f:52:11:
0a:f3:7e:5c:96:d2:7d:ae:5a:cd:2f:d5:89:97:02:6d:51:eb:
c3:0b:97:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+jBxlvwnZCoiTS6EG37UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MjMyOWQ4ZDdlNTQxOTUzZTEyMGZkMDVmNjZjYzZlYmFi
MDY4NGQwHhcNMjUwOTA3MDcwMDQ1WhcNMjUwOTA4MDcwMDQ1WjAzMTEwLwYDVQQD
EyhhMjA1OWNmOWU5NTZiZmZjZWZmZGRmYmUxY2QyODdiNDcwNGI1N2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uPUzuq15bhE0FHh5lB3PUmT8drX
ziH1ImbcbeOX4U59ZPOJljqaFSBBWSbwzV9GPSYzb4DotD/HWdLqOfHunf+BfPkd
2r++sZSiOI2BH2+Tito0I7lZb+pV510v21NuCY6cQRNFHaLXzHV/fOJhB7fjGuJW
OC/B41T+GwKl9zvm+oBfwSPFZ27+2pai+bqS0iR2tSRLrzXZzWv74EKYhI+NGfEI
xjHHCxNYkVT57qgLLApLQuOLIBIUc1cGWyTD0KjAzRAIduzohKvXq2iKvGMsRuyP
kubmi/O8RSZCMdhPNm+PoQ/VhbeGzUSCg8c1SGjNBv5ofKla2mr8Y9gg7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIFnPnpVr/87/3fvhzSh7RwS1fRMB8GA1UdIwQY
MBaAFNYjKdjX5UGVPhIP0F9mzG66sGhNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUt
NzMyMDJmMGUxZDAzLzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUtNzMyMDJmMGUxZDAz
LzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWp1Lho+T
nDZ0qxt6vvn+orc7hvjsKpndRJ9lGqQdkodfub4vY84A3aDV1JVZw+mLoBsv0tb0
bUzj1YbU+lAHfEW7hI62/UZbZ+KQ7bVjs/T4FDJsoZTXlifEDlXpncfZXJcRmNkh
zipOCOViX7h7hwJSTQaEiBGDEzX/Cgr+JhDJl9JC9dOTsF5MVbBvnclgv84VO3Xh
R/ds09aIoSRxKIwk3jP0fGAh7kjbUoggdXR8aO7q6MX4Om+iYS7Ibh0K4sfRt5od
DZ5w453aufVM32zqC//UoQliKW3UC+7ydBaHmZ+4BQ8YP1IRCvN+XJbSfa5azS/V
iZcCbVHrwwuXOA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:34:00 2025 by rpki-client