Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
File: Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft (raw, json)
Hash identifier: /FN7bzxK9Kv6SmJcEvP/kjMmVNSD0rWHL8YtkhUn35o=
Subject key identifier: A3:4A:6A:33:9B:88:AE:01:71:98:76:05:F9:EE:F0:B9:B4:83:31:8F
Authority key identifier: 23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
Certificate issuer: /CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Certificate serial: 0199176434133A7197DF8D8019DB52A1BC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
Manifest number: 1319
Signing time: Fri 05 Sep 2025 01:01:06 +0000
Manifest this update: Fri 05 Sep 2025 01:01:06 +0000
Manifest next update: Sat 06 Sep 2025 01:01:06 +0000
Files and hashes: 1: Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl (hash: w+6K4Jc/1G6etJP/r3w/fN+2DmBKUShIMlTGEvakbZA=)
2: NCoehdmUvbF9hjrmMyI6BY_y1Tg.roa (hash: oKUbCP0RxT560oSwid+jhRboIkVkQAnDdP+HNoQNqUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:34:13:3a:71:97:df:8d:80:19:db:52:a1:bc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Validity
Not Before: Sep 5 01:01:06 2025 GMT
Not After : Sep 6 01:01:06 2025 GMT
Subject: CN=a34a6a339b88ae0171987605f9eef0b9b483318f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:47:cf:e4:df:91:a8:7a:6f:df:54:b1:d0:93:
21:2e:03:11:74:eb:39:bc:d1:8a:ed:31:be:64:5e:
0c:7e:fc:98:b0:50:69:05:ea:36:49:83:f5:3d:eb:
10:d6:8f:1a:da:11:7e:29:6e:39:f7:1d:44:c5:8c:
05:d9:b3:a2:cb:44:ba:ff:d9:48:b0:55:65:83:23:
7e:0b:71:96:00:ad:29:28:74:f4:8e:1d:e1:09:ab:
6f:c3:be:8e:93:be:69:13:c0:84:82:2a:c5:dd:b9:
84:14:d8:81:95:b9:eb:3a:ec:95:70:15:03:2a:01:
80:cc:d4:10:35:30:01:dd:3e:c4:c5:6a:d0:09:6c:
b3:c9:62:ce:1c:43:28:f6:d6:f8:fb:fd:6c:e1:b9:
97:84:18:5b:dc:0a:b3:62:59:ec:0d:ab:ee:7c:86:
36:98:92:d3:ca:36:0a:66:47:19:69:a2:47:4b:ca:
af:46:d1:47:2b:28:d3:f3:33:be:94:48:cb:f4:a2:
76:54:d3:c5:09:e8:fb:09:6b:ed:dd:13:5d:25:45:
b0:e0:4f:40:ce:de:c9:54:1f:fe:07:07:17:a4:80:
81:bc:8a:80:3b:e0:ba:0f:34:3a:f0:5a:7f:d9:cb:
52:41:a8:e0:ba:3f:0f:bd:3b:60:be:05:56:bf:70:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4A:6A:33:9B:88:AE:01:71:98:76:05:F9:EE:F0:B9:B4:83:31:8F
X509v3 Authority Key Identifier:
keyid:23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c8:fe:9b:11:15:4c:f6:f2:db:d7:e4:38:63:32:00:36:63:
16:59:49:f9:c4:71:2d:12:8a:1a:62:9f:b9:1a:06:8c:de:34:
9b:b6:fa:08:cc:98:19:ed:42:fb:f1:de:60:a4:56:9f:ba:38:
9e:22:a1:6d:a4:f4:94:b0:3d:7d:d6:5d:6b:53:a3:de:48:2e:
b0:97:e2:2d:0c:04:7c:f9:4b:21:5c:88:27:79:b9:c4:42:0b:
b1:5b:3d:ec:db:2e:67:86:8b:9e:78:9c:bd:34:53:96:12:52:
29:86:2f:cd:dc:f5:af:3d:46:0a:b5:07:67:57:39:54:73:04:
81:83:f9:f8:a4:9b:1b:67:1a:ae:c3:bd:66:29:21:1a:f5:f9:
25:da:80:41:5f:41:11:31:68:f7:3e:a0:b0:71:b6:06:6b:7d:
7d:c5:be:53:38:97:e8:04:cf:4a:f1:75:9d:b8:5a:bd:39:07:
22:0d:2a:40:da:0c:24:8e:95:cf:c5:b5:c2:71:e5:dd:03:4c:
ca:ea:76:2b:24:e7:10:6c:69:25:7c:3c:c6:18:36:80:51:01:
61:34:95:7a:83:08:13:f9:25:d5:d0:7d:a4:f0:c1:ff:e4:c5:
f9:2e:26:ce:c6:9f:3e:d7:af:70:8a:20:75:62:8b:d4:91:72:
84:d2:47:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXZDQTOnGX342AGdtSobxLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzM2UzODI4NDExYmFmYWIwMDZlNzVmZDBkZDVmNWY5ZWY1
NWVjMjUwHhcNMjUwOTA1MDEwMTA2WhcNMjUwOTA2MDEwMTA2WjAzMTEwLwYDVQQD
EyhhMzRhNmEzMzliODhhZTAxNzE5ODc2MDVmOWVlZjBiOWI0ODMzMThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kfP5N+RqHpv31Sx0JMhLgMRdOs5
vNGK7TG+ZF4MfvyYsFBpBeo2SYP1PesQ1o8a2hF+KW459x1ExYwF2bOiy0S6/9lI
sFVlgyN+C3GWAK0pKHT0jh3hCatvw76Ok75pE8CEgirF3bmEFNiBlbnrOuyVcBUD
KgGAzNQQNTAB3T7ExWrQCWyzyWLOHEMo9tb4+/1s4bmXhBhb3AqzYlnsDavufIY2
mJLTyjYKZkcZaaJHS8qvRtFHKyjT8zO+lEjL9KJ2VNPFCej7CWvt3RNdJUWw4E9A
zt7JVB/+BwcXpICBvIqAO+C6DzQ68Fp/2ctSQajguj8PvTtgvgVWv3AeeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNKajObiK4BcZh2Bfnu8Lm0gzGPMB8GA1UdIwQY
MBaAFCM+OChBG6+rAG51/Q3V9fnvVewlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNmNmZmMtYmU2NC00ZDA4LTk0YTYt
YTE1ZjBlNzhhNWE5LzEvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNmNmZmMtYmU2NC00ZDA4LTk0YTYtYTE1ZjBlNzhhNWE5
LzEvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsj+mxEV
TPby29fkOGMyADZjFllJ+cRxLRKKGmKfuRoGjN40m7b6CMyYGe1C+/HeYKRWn7o4
niKhbaT0lLA9fdZda1Oj3kgusJfiLQwEfPlLIVyIJ3m5xEILsVs97NsuZ4aLnnic
vTRTlhJSKYYvzdz1rz1GCrUHZ1c5VHMEgYP5+KSbG2carsO9ZikhGvX5JdqAQV9B
ETFo9z6gsHG2Bmt9fcW+UziX6ATPSvF1nbhavTkHIg0qQNoMJI6Vz8W1wnHl3QNM
yup2KyTnEGxpJXw8xhg2gFEBYTSVeoMIE/kl1dB9pPDB/+TF+S4mzsafPtevcIog
dWKL1JFyhNJHrA==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:26 2025 by rpki-client