Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
File: i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json)
Hash identifier: uypM3ZSq3jxwbxKT3HLZC67mq+/OKZtEjqZo1qKBuqo=
Subject key identifier: 86:D0:A0:5E:49:74:96:65:98:E2:20:70:16:55:32:F2:55:77:9D:B5
Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
Certificate issuer: /CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Certificate serial: 019922FA6DB720C7765282200F3A83CC4752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
Manifest number: 0273
Signing time: Sun 07 Sep 2025 07:01:01 +0000
Manifest this update: Sun 07 Sep 2025 07:01:01 +0000
Manifest next update: Mon 08 Sep 2025 07:01:01 +0000
Files and hashes: 1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: 64d7CMCrEgwP4fAMJaQrHIYZwGLCzLHuWiqipxF3vew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:6d:b7:20:c7:76:52:82:20:0f:3a:83:cc:47:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Validity
Not Before: Sep 7 07:01:01 2025 GMT
Not After : Sep 8 07:01:01 2025 GMT
Subject: CN=86d0a05e4974966598e22070165532f255779db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:38:cf:ac:38:3d:6a:96:55:a7:c8:bb:19:
40:69:d8:f8:44:9d:94:96:cf:90:4c:51:b5:fb:a2:
97:f7:a2:96:4a:fe:6b:64:de:98:9c:29:a9:85:8b:
a1:3b:07:9f:1c:81:ed:9a:11:69:2e:c7:cf:7e:b2:
9b:a6:34:73:99:a6:2f:c9:36:13:0a:9a:54:b5:48:
96:db:5e:ed:1e:d7:c4:8f:d6:91:41:5d:d6:5e:a1:
d0:00:3c:ff:9c:0a:f3:d9:65:c7:a7:9a:31:fc:97:
34:51:7f:c7:82:af:95:2b:5a:01:00:57:72:98:1d:
98:b9:66:c5:c1:bc:66:71:79:3f:4b:e8:ee:b3:c9:
81:68:0f:8f:45:a6:9d:25:7b:80:35:fe:b4:f3:8b:
13:5a:b4:71:37:fe:d7:e6:e0:4a:56:ea:16:ee:c2:
f1:53:b2:a7:0e:3f:02:bb:e6:59:b1:10:38:c9:bd:
59:49:7b:50:65:04:26:92:ed:fb:98:da:06:91:c9:
7d:7d:7e:9c:7b:96:5a:dc:ca:db:0d:52:c7:34:eb:
0e:fd:93:7a:60:67:a1:fd:a0:de:32:48:4e:03:78:
59:19:f4:fe:f8:4f:3a:bb:f4:c3:dd:39:98:fe:ac:
bd:31:b1:d9:1f:97:f1:06:60:6d:91:0c:d5:2c:7f:
1b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:A0:5E:49:74:96:65:98:E2:20:70:16:55:32:F2:55:77:9D:B5
X509v3 Authority Key Identifier:
keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5e:35:f3:cb:c1:b7:59:d0:9a:b7:c7:78:67:c7:01:07:4a:
70:29:c2:eb:81:4f:6e:92:21:6c:56:94:3a:60:aa:12:83:fc:
9c:98:3e:19:2e:7e:38:f3:26:05:7d:8c:a4:c5:ec:a3:04:0c:
4b:73:1f:c7:2e:e5:70:16:24:6a:3f:25:7b:75:12:dc:97:d9:
d8:75:2a:9d:1c:23:2e:b4:50:d7:8a:77:eb:0a:0e:1d:5c:bf:
cc:4d:fd:7a:83:65:b6:18:dd:d0:1b:e7:1b:9a:6b:b0:98:4d:
8b:46:01:fc:20:f1:c2:c3:f2:58:3f:9f:fe:1d:46:37:bb:b2:
a3:13:6d:dd:7e:25:47:23:d2:96:4a:15:20:b8:14:73:e3:0a:
7c:6c:57:ef:8f:7b:d7:31:dd:51:9c:dd:4f:87:65:21:51:67:
a8:cc:07:08:e9:c8:a9:ba:65:7d:7a:de:87:1a:d3:69:90:2d:
49:dc:ff:31:c8:24:50:ef:3e:48:1a:da:f6:cd:77:4f:2c:f9:
0f:35:3e:c9:9a:74:04:e8:89:4c:a1:b0:c4:a0:04:12:67:16:
25:b8:bb:5e:85:da:04:99:bd:c0:f5:f0:68:95:85:fa:08:fc:
6a:d9:7b:60:c2:14:d5:17:41:3c:b2:66:96:86:ff:04:81:85:
e7:69:46:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+m23IMd2UoIgDzqDzEdSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjkxNDk4ODE5NzZlZTI3M2M1MTEwNDNlNTgwYjdkMWQx
YmE3YzQwHhcNMjUwOTA3MDcwMTAxWhcNMjUwOTA4MDcwMTAxWjAzMTEwLwYDVQQD
Eyg4NmQwYTA1ZTQ5NzQ5NjY1OThlMjIwNzAxNjU1MzJmMjU1Nzc5ZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmk4z6w4PWqWVafIuxlAadj4RJ2U
ls+QTFG1+6KX96KWSv5rZN6YnCmphYuhOwefHIHtmhFpLsfPfrKbpjRzmaYvyTYT
CppUtUiW217tHtfEj9aRQV3WXqHQADz/nArz2WXHp5ox/Jc0UX/Hgq+VK1oBAFdy
mB2YuWbFwbxmcXk/S+jus8mBaA+PRaadJXuANf6084sTWrRxN/7X5uBKVuoW7sLx
U7KnDj8Cu+ZZsRA4yb1ZSXtQZQQmku37mNoGkcl9fX6ce5Za3MrbDVLHNOsO/ZN6
YGeh/aDeMkhOA3hZGfT++E86u/TD3TmY/qy9MbHZH5fxBmBtkQzVLH8bcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbQoF5JdJZlmOIgcBZVMvJVd521MB8GA1UdIwQY
MBaAFItpFJiBl27ic8URBD5YC30dG6fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYt
OTYyMDMyMmU0ZjE1LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYtOTYyMDMyMmU0ZjE1
LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATF4188vB
t1nQmrfHeGfHAQdKcCnC64FPbpIhbFaUOmCqEoP8nJg+GS5+OPMmBX2MpMXsowQM
S3Mfxy7lcBYkaj8le3US3JfZ2HUqnRwjLrRQ14p36woOHVy/zE39eoNlthjd0Bvn
G5prsJhNi0YB/CDxwsPyWD+f/h1GN7uyoxNt3X4lRyPSlkoVILgUc+MKfGxX7497
1zHdUZzdT4dlIVFnqMwHCOnIqbplfXrehxrTaZAtSdz/McgkUO8+SBra9s13Tyz5
DzU+yZp0BOiJTKGwxKAEEmcWJbi7XoXaBJm9wPXwaJWF+gj8atl7YMIU1RdBPLJm
lob/BIGF52lGMw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:06 2025 by rpki-client