Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier: wMo1EJJHvBkRIBS9NfA1m2X3n5Uq+O2NLB7EKwBKa6g=
Subject key identifier: 8C:44:51:1E:C1:89:53:0F:78:7F:9E:C5:4C:CB:CD:29:2F:31:0A:C2
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial: 019938023F22C2E6B589F9EBFECF85652349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number: 167B
Signing time: Thu 11 Sep 2025 09:01:35 +0000
Manifest this update: Thu 11 Sep 2025 09:01:35 +0000
Manifest next update: Fri 12 Sep 2025 09:01:35 +0000
Files and hashes: 1: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: 5SoTOLOTtYktttgD8f3/W1+CtfjCETaHJ+WJRPAX0NQ=)
2: yIUv-9UBFSosZaxk_SAM-oPYWDg.roa (hash: A5HtFiQ3ZfwDO/6Fs5djNbIUq/3hrajgNOS9o/n1CuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:3f:22:c2:e6:b5:89:f9:eb:fe:cf:85:65:23:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Validity
Not Before: Sep 11 09:01:35 2025 GMT
Not After : Sep 12 09:01:35 2025 GMT
Subject: CN=8c44511ec189530f787f9ec54ccbcd292f310ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:ac:0e:23:ed:e0:6d:b8:32:db:2d:ee:00:
91:3f:10:19:60:05:be:55:66:9b:7c:b6:96:83:d0:
7a:90:d4:f1:5a:26:73:4d:07:8b:42:21:b6:55:63:
50:e7:af:e2:ae:e1:94:cf:65:85:6c:64:cd:8d:77:
36:af:51:2f:52:e1:04:8f:59:06:b6:81:b5:c8:87:
79:68:5d:d0:d9:ce:a7:d8:ac:37:e6:96:f1:a7:f8:
8c:0e:4b:0c:a0:6c:3b:5f:16:75:8f:ca:7f:5c:cd:
09:20:d0:92:8c:08:fc:4c:62:f6:31:ea:7b:a8:83:
e9:c4:90:de:81:04:62:92:9f:31:4e:49:9a:6b:7e:
cb:86:2b:b4:36:8e:f8:b2:08:57:fb:d7:b1:b7:2b:
82:65:55:71:74:13:32:7f:73:26:a5:be:8e:97:bd:
8a:41:7e:2a:02:db:e8:fd:04:b0:62:6c:ce:d9:79:
25:1e:46:60:07:b2:86:16:30:96:90:62:79:4f:f3:
02:2f:a7:21:bd:d9:16:55:d3:6a:9e:09:a0:10:61:
e3:ac:c7:7b:56:a6:bd:66:bc:54:22:fb:36:6d:f2:
34:69:3c:ac:5a:c3:77:86:c8:10:25:b3:b6:81:e5:
88:5b:0f:7f:63:72:44:df:19:1b:05:6f:6d:e3:9a:
5e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:44:51:1E:C1:89:53:0F:78:7F:9E:C5:4C:CB:CD:29:2F:31:0A:C2
X509v3 Authority Key Identifier:
keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1b:cf:6c:20:41:a0:17:8f:34:70:9e:21:26:84:e3:5c:c2:
a0:50:eb:53:12:66:45:7f:d8:19:a6:7b:45:5d:b1:3b:d2:af:
c7:d2:82:c7:3b:43:1a:8b:46:b1:ad:1c:d3:be:ac:03:23:a9:
84:03:38:86:26:66:4a:22:a2:8a:bc:a0:ea:bc:ac:63:db:57:
ea:db:1c:30:c5:8c:9b:ba:22:02:f9:15:04:e5:d3:4d:05:ea:
21:24:ec:c4:6e:78:98:d4:48:ad:cb:9e:d2:a7:5b:2a:33:af:
93:0f:0c:75:2c:c1:51:b1:c1:ca:d3:5d:ba:f8:fb:f4:b9:2f:
4a:05:2d:b9:e9:cf:0d:ab:df:f9:c7:3c:12:5b:ad:01:d2:fd:
10:a8:86:22:b9:6c:68:5b:90:69:d0:db:ff:24:1a:93:57:00:
2a:31:9f:66:52:49:4a:30:04:74:ff:85:62:b2:7d:8b:ce:bc:
66:ad:8f:d5:28:d9:fd:d0:e3:3f:3b:2c:ac:a5:d7:af:03:a7:
6a:24:84:75:f4:4e:ed:3e:85:0a:e3:f8:b2:03:e3:56:72:a1:
ff:73:78:2d:ab:d1:d2:0a:97:f6:fa:41:b0:96:bb:65:ce:58:
c5:8f:07:e4:7c:2f:48:e7:e9:75:bf:5a:f0:81:46:62:53:22:
e9:1e:85:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk4Aj8iwua1ifnr/s+FZSNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMTlmM2Q3ZmZlYTk1NzI2MTUwMWU5MTY2NGZmNjgyM2Vk
OTM2YWQwHhcNMjUwOTExMDkwMTM1WhcNMjUwOTEyMDkwMTM1WjAzMTEwLwYDVQQD
Eyg4YzQ0NTExZWMxODk1MzBmNzg3ZjllYzU0Y2NiY2QyOTJmMzEwYWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt12sDiPt4G24Mtst7gCRPxAZYAW+
VWabfLaWg9B6kNTxWiZzTQeLQiG2VWNQ56/iruGUz2WFbGTNjXc2r1EvUuEEj1kG
toG1yId5aF3Q2c6n2Kw35pbxp/iMDksMoGw7XxZ1j8p/XM0JINCSjAj8TGL2Mep7
qIPpxJDegQRikp8xTkmaa37Lhiu0No74sghX+9extyuCZVVxdBMyf3Mmpb6Ol72K
QX4qAtvo/QSwYmzO2XklHkZgB7KGFjCWkGJ5T/MCL6chvdkWVdNqngmgEGHjrMd7
Vqa9ZrxUIvs2bfI0aTysWsN3hsgQJbO2geWIWw9/Y3JE3xkbBW9t45peWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxEUR7BiVMPeH+exUzLzSkvMQrCMB8GA1UdIwQY
MBaAFIsZ89f/6pVyYVAekWZP9oI+2TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEt
YjY1NDJlNjQ0N2EwLzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEtYjY1NDJlNjQ0N2Ew
LzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthvPbCBB
oBePNHCeISaE41zCoFDrUxJmRX/YGaZ7RV2xO9Kvx9KCxztDGotGsa0c076sAyOp
hAM4hiZmSiKiiryg6rysY9tX6tscMMWMm7oiAvkVBOXTTQXqISTsxG54mNRIrcue
0qdbKjOvkw8MdSzBUbHBytNduvj79LkvSgUtuenPDavf+cc8ElutAdL9EKiGIrls
aFuQadDb/yQak1cAKjGfZlJJSjAEdP+FYrJ9i868Zq2P1SjZ/dDjPzssrKXXrwOn
aiSEdfRO7T6FCuP4sgPjVnKh/3N4LavR0gqX9vpBsJa7Zc5YxY8H5HwvSOfpdb9a
8IFGYlMi6R6FCA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 17:29:25 2025 by rpki-client