Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
File: I06fdccyb3ZciWbC7cAKmCpep_A.mft (raw, json)
Hash identifier: CTj2q1cd2StySkvzKeeFNw6IUn0HRAStNX/xCUFNMTU=
Subject key identifier: 4A:3C:01:B9:77:F4:0E:5D:72:26:36:E6:FC:D0:69:84:0B:71:42:2A
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial: 01991809167BDFEF7A2566AD36322CFC53D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
Manifest number: 13DA
Signing time: Fri 05 Sep 2025 04:01:12 +0000
Manifest this update: Fri 05 Sep 2025 04:01:12 +0000
Manifest next update: Sat 06 Sep 2025 04:01:12 +0000
Files and hashes: 1: I06fdccyb3ZciWbC7cAKmCpep_A.crl (hash: nHRIiKIyjtYCjAv+jW+v0xI1KgVhl6if/gvRCHZBI70=)
2: _abtUqDmMxDQ2RmQqkGL8N8DjTE.roa (hash: CRHU3YWrzulAziPCk+beyoXQoDHAl8oOT3cyglDGbAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:16:7b:df:ef:7a:25:66:ad:36:32:2c:fc:53:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Validity
Not Before: Sep 5 04:01:12 2025 GMT
Not After : Sep 6 04:01:12 2025 GMT
Subject: CN=4a3c01b977f40e5d722636e6fcd069840b71422a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:db:da:74:b8:38:4a:62:3e:34:87:d6:54:
14:ab:d4:bb:c5:d1:47:49:09:0f:65:cb:eb:09:c6:
f6:32:84:8d:53:d9:56:57:1e:e1:27:0d:fe:f6:eb:
1a:0f:69:3d:d7:2a:e9:84:52:fb:43:78:8f:ca:5d:
e1:b6:00:b8:ea:08:30:78:3a:b2:e0:07:fd:d6:7e:
36:34:c7:f2:46:e1:b3:f3:fb:07:77:79:b2:b8:a7:
61:58:55:66:7a:49:32:6e:d8:fd:53:ef:d0:b1:1f:
c2:3a:57:a5:df:bb:e2:99:6b:fc:19:26:63:ec:69:
e6:ae:99:cc:28:55:c8:5d:48:e7:51:72:20:38:18:
47:c6:9d:e6:91:a5:65:42:68:48:e9:e2:cd:36:0e:
46:f9:3e:01:1a:8e:07:8d:2f:26:67:44:66:5d:db:
5e:44:ea:6e:95:bd:7e:29:45:ee:7e:c3:f4:b7:08:
16:a3:5e:03:f1:5d:36:b1:e6:98:d5:1d:d2:31:b1:
ce:d0:62:0d:85:86:c2:76:46:7d:1d:90:56:a8:ad:
72:86:75:74:6b:1e:6e:a6:25:3d:f8:f1:3c:ab:99:
7e:65:21:3c:47:a8:bf:0f:65:20:8d:29:70:aa:33:
02:1b:59:c9:2a:6b:38:b1:56:f1:a2:32:a3:de:2f:
f2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3C:01:B9:77:F4:0E:5D:72:26:36:E6:FC:D0:69:84:0B:71:42:2A
X509v3 Authority Key Identifier:
keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:37:01:61:74:ef:e7:54:a9:13:b4:87:55:4d:b0:b0:3d:92:
a9:5e:9d:07:3c:bb:0e:18:66:22:76:9a:66:bc:1e:9e:4a:c5:
2c:10:e6:d8:01:b8:f4:c3:8e:08:86:32:8e:63:78:2c:89:e7:
84:29:7f:a3:59:1d:8c:b4:be:d4:0e:71:e9:f8:8e:71:b9:be:
ee:af:bb:af:bd:e7:cc:52:db:ab:9b:a0:ba:f2:86:13:aa:7d:
d2:05:6c:33:fa:e9:e6:64:f6:12:67:73:87:02:00:cf:e3:d5:
b9:34:02:be:f7:c6:73:bd:ac:6b:ce:d6:e2:ce:51:4e:64:28:
2a:f0:89:fa:90:5d:f3:2a:52:ba:37:64:46:fa:13:6d:99:9d:
6b:13:07:1b:aa:d4:ad:09:de:ef:7e:1b:54:f6:9e:c4:b3:a1:
14:fe:61:22:a9:6b:13:fc:73:9e:eb:97:a9:0f:60:04:8e:de:
c7:fa:a6:ae:27:fd:2e:81:c7:d8:86:e1:fc:33:cd:16:8f:e8:
29:90:6f:f8:10:e2:e7:e9:3b:32:33:c0:b1:63:b5:12:d3:ca:
c6:ff:48:8d:a6:0c:bd:19:4b:e2:32:28:8f:14:5e:4f:f9:8c:
34:6d:98:b8:43:7d:c2:21:98:90:e9:75:0d:79:f1:2e:26:14:
3b:41:e4:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCRZ73+96JWatNjIs/FPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGU5Zjc1YzczMjZmNzY1Yzg5NjZjMmVkYzAwYTk4MmE1
ZWE3ZjAwHhcNMjUwOTA1MDQwMTEyWhcNMjUwOTA2MDQwMTEyWjAzMTEwLwYDVQQD
Eyg0YTNjMDFiOTc3ZjQwZTVkNzIyNjM2ZTZmY2QwNjk4NDBiNzE0MjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzjb2nS4OEpiPjSH1lQUq9S7xdFH
SQkPZcvrCcb2MoSNU9lWVx7hJw3+9usaD2k91yrphFL7Q3iPyl3htgC46ggweDqy
4Af91n42NMfyRuGz8/sHd3myuKdhWFVmekkybtj9U+/QsR/COlel37vimWv8GSZj
7GnmrpnMKFXIXUjnUXIgOBhHxp3mkaVlQmhI6eLNNg5G+T4BGo4HjS8mZ0RmXdte
ROpulb1+KUXufsP0twgWo14D8V02seaY1R3SMbHO0GINhYbCdkZ9HZBWqK1yhnV0
ax5upiU9+PE8q5l+ZSE8R6i/D2UgjSlwqjMCG1nJKms4sVbxojKj3i/yJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEo8Abl39A5dciY25vzQaYQLcUIqMB8GA1UdIwQY
MBaAFCNOn3XHMm92XIlmwu3ACpgqXqfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82MzVhMGQtOTIxZi00NzExLWI3ZDQt
NzdkZWUyZDc5YWU0LzEvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82MzVhMGQtOTIxZi00NzExLWI3ZDQtNzdkZWUyZDc5YWU0
LzEvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazcBYXTv
51SpE7SHVU2wsD2SqV6dBzy7DhhmInaaZrwenkrFLBDm2AG49MOOCIYyjmN4LInn
hCl/o1kdjLS+1A5x6fiOcbm+7q+7r73nzFLbq5uguvKGE6p90gVsM/rp5mT2Emdz
hwIAz+PVuTQCvvfGc72sa87W4s5RTmQoKvCJ+pBd8ypSujdkRvoTbZmdaxMHG6rU
rQne734bVPaexLOhFP5hIqlrE/xznuuXqQ9gBI7ex/qmrif9LoHH2Ibh/DPNFo/o
KZBv+BDi5+k7MjPAsWO1EtPKxv9IjaYMvRlL4jIojxReT/mMNG2YuEN9wiGYkOl1
DXnxLiYUO0HkNQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:30:19 2025 by rpki-client