Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: fp2jOaGr5ZXSXmCTWzS4XJKlrlxVyMjKiT5cFn7plJQ=
Subject key identifier: A2:67:4D:9C:36:12:9F:2E:DA:5A:A9:9C:DD:CE:60:B0:3B:EB:28:B0
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 019921B2213F4E580A317FFB2D5D4BE64B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 166C
Signing time: Sun 07 Sep 2025 01:02:25 +0000
Manifest this update: Sun 07 Sep 2025 01:02:25 +0000
Manifest next update: Mon 08 Sep 2025 01:02:25 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: xFxSrcnlAs35lt1deEDLD2AH5n+Wu8P7rdBHYZRgjAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:21:3f:4e:58:0a:31:7f:fb:2d:5d:4b:e6:4b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Sep 7 01:02:25 2025 GMT
Not After : Sep 8 01:02:25 2025 GMT
Subject: CN=a2674d9c36129f2eda5aa99cddce60b03beb28b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:39:ae:62:55:2c:bd:67:33:06:33:83:e0:
fa:7d:c9:7b:e9:fc:61:be:fe:e7:a3:c8:9d:fb:cc:
95:21:3e:bc:cd:71:77:49:9a:d7:f4:9c:17:5b:67:
fe:bf:a7:e1:ad:23:65:17:b9:31:a0:96:05:09:70:
4a:07:ce:a8:49:6a:32:10:2e:04:1f:74:12:f9:55:
87:8d:d3:c2:ce:17:c7:69:75:58:4d:9d:a0:24:ce:
e0:c6:82:02:f9:9d:fe:ed:be:06:0c:67:3b:ed:7b:
de:89:79:50:54:5f:61:76:70:e5:30:dd:96:63:8b:
7b:bd:79:ae:2c:34:c6:b6:76:12:67:9e:6f:21:05:
c5:56:ae:ba:d4:f1:dc:73:34:2e:14:f3:92:81:b7:
74:a8:2f:c1:21:b2:4a:65:e3:bf:cd:8d:6b:bf:4b:
08:10:c2:90:27:dc:1a:75:fd:f0:90:c0:24:4a:fd:
e0:26:15:b2:46:95:44:21:e6:ad:2c:1e:a8:91:e4:
a7:1e:bd:ca:f3:4e:05:da:09:5d:11:5e:e5:a8:fc:
0c:5d:b3:f0:ec:fa:e6:a3:7a:b9:3c:2c:23:ff:01:
23:0f:dd:b8:d0:88:18:45:ad:79:56:0a:64:55:e1:
f0:f8:8f:92:3d:1d:f2:3d:c0:75:86:79:44:50:41:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:67:4D:9C:36:12:9F:2E:DA:5A:A9:9C:DD:CE:60:B0:3B:EB:28:B0
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7c:85:34:48:6f:23:55:36:c2:65:8f:3a:4f:87:ea:8e:d7:
84:07:11:56:64:7b:b6:33:14:56:8d:73:97:4f:5c:fa:05:73:
47:6e:54:0f:ef:aa:f6:bd:63:a2:7c:4e:41:de:3d:69:d0:58:
7d:91:e1:4b:04:eb:4e:a5:be:dd:6b:1c:e0:c7:3d:a4:25:29:
a2:e5:58:91:ac:1a:6b:2f:c3:e3:f4:7b:c7:f3:a6:22:c0:1b:
ec:74:d8:11:a8:86:71:25:4f:e8:b0:63:1f:49:c0:b5:18:bd:
43:a8:40:df:fa:6f:97:56:1f:f5:59:c9:6c:68:43:66:b3:96:
90:a3:cb:0c:9e:11:a6:87:ac:71:f1:86:d7:6e:f0:43:f1:e7:
fa:e9:2c:59:06:77:cf:8e:51:c2:a0:69:e5:b1:0a:ac:1c:f2:
a0:1c:e0:6d:95:a7:34:17:8d:f1:b1:d5:53:a0:93:1f:74:b9:
c2:aa:ff:87:cd:aa:77:17:56:d1:ff:ab:82:d4:ed:59:60:f0:
65:c6:84:ea:e5:ed:31:2a:a0:a5:b7:4e:79:9a:c1:8d:be:72:
eb:3a:8b:10:b4:75:99:f0:97:7e:f0:77:c4:1e:25:36:00:b7:
b2:99:95:a4:73:36:d9:e9:de:74:85:e6:ef:2f:58:94:80:36:
dd:d2:58:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsiE/TlgKMX/7LV1L5ks3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZGM5MWU2NjY0OTRkMGRjNTZhMmI4MWQyMjlhYmQ2ZWUz
NWY4NGMwHhcNMjUwOTA3MDEwMjI1WhcNMjUwOTA4MDEwMjI1WjAzMTEwLwYDVQQD
EyhhMjY3NGQ5YzM2MTI5ZjJlZGE1YWE5OWNkZGNlNjBiMDNiZWIyOGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKI5rmJVLL1nMwYzg+D6fcl76fxh
vv7no8id+8yVIT68zXF3SZrX9JwXW2f+v6fhrSNlF7kxoJYFCXBKB86oSWoyEC4E
H3QS+VWHjdPCzhfHaXVYTZ2gJM7gxoIC+Z3+7b4GDGc77XveiXlQVF9hdnDlMN2W
Y4t7vXmuLDTGtnYSZ55vIQXFVq661PHcczQuFPOSgbd0qC/BIbJKZeO/zY1rv0sI
EMKQJ9wadf3wkMAkSv3gJhWyRpVEIeatLB6okeSnHr3K804F2gldEV7lqPwMXbPw
7Prmo3q5PCwj/wEjD9240IgYRa15VgpkVeHw+I+SPR3yPcB1hnlEUEEBnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJnTZw2Ep8u2lqpnN3OYLA76yiwMB8GA1UdIwQY
MBaAFCDckeZmSU0NxWorgdIpq9buNfhMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU55UjVtWkpUUTNGYWl1QjBpbXIxdTQxLUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy81ZmY3MDgtY2I3YS00MWU5LTkwOTMt
MWQwMGVhODQxZDNlLzEvSU55UjVtWkpUUTNGYWl1QjBpbXIxdTQxLUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy81ZmY3MDgtY2I3YS00MWU5LTkwOTMtMWQwMGVhODQxZDNl
LzEvSU55UjVtWkpUUTNGYWl1QjBpbXIxdTQxLUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXyFNEhv
I1U2wmWPOk+H6o7XhAcRVmR7tjMUVo1zl09c+gVzR25UD++q9r1jonxOQd49adBY
fZHhSwTrTqW+3Wsc4Mc9pCUpouVYkawaay/D4/R7x/OmIsAb7HTYEaiGcSVP6LBj
H0nAtRi9Q6hA3/pvl1Yf9VnJbGhDZrOWkKPLDJ4RpoescfGG127wQ/Hn+uksWQZ3
z45RwqBp5bEKrBzyoBzgbZWnNBeN8bHVU6CTH3S5wqr/h82qdxdW0f+rgtTtWWDw
ZcaE6uXtMSqgpbdOeZrBjb5y6zqLELR1mfCXfvB3xB4lNgC3spmVpHM22enedIXm
7y9YlIA23dJYRg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:44 2025 by rpki-client