Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: 4NvcUDwbEKRAvn0/tsKSoWDdXqr/1UiLTKPfHTtyWds=
Subject key identifier: D3:E1:C2:64:AA:76:61:62:08:1E:DB:2F:77:B7:27:92:CA:C6:73:AC
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 01995CEA206B85AC09CABC5972F07B425B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 111A
Signing time: Thu 18 Sep 2025 13:01:11 +0000
Manifest this update: Thu 18 Sep 2025 13:01:11 +0000
Manifest next update: Fri 19 Sep 2025 13:01:11 +0000
Files and hashes: 1: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: fnb5v1rgYgg3P0bBdL5TM7fmeYrXIajrafG8dp2PV44=)
2: ff-qexzHEUD1WgOGjo1dcXlM5zw.roa (hash: okd5E/DUi3wr0dkKGYnxuoMgYENizBl6tX2uR1KatU4=)
3: o-JKFkGOw7b9iS81cGqL_sPqhTE.roa (hash: LeiOclwc6FMh1dAwDJxgRxawRJ1HHtp5FtwQRdIanPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:ea:20:6b:85:ac:09:ca:bc:59:72:f0:7b:42:5b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Sep 18 13:01:11 2025 GMT
Not After : Sep 19 13:01:11 2025 GMT
Subject: CN=d3e1c264aa766162081edb2f77b72792cac673ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d9:d0:f8:86:7e:cf:6b:65:98:c5:f9:ad:8b:
99:4c:6c:50:02:92:48:8f:aa:c2:a5:05:ab:df:88:
e3:70:3d:b8:f8:d1:6d:90:22:43:23:64:56:21:61:
50:8b:c6:cb:3b:ee:9d:67:87:47:82:a4:30:3b:1f:
dd:f3:ce:fc:9c:56:50:2b:c5:bd:a7:81:cc:58:d8:
27:40:8f:a6:d6:98:8b:bd:88:73:a3:af:a4:f8:90:
c2:aa:3c:50:20:90:a9:70:fb:8c:6f:f4:72:15:eb:
ba:e2:be:2a:36:b6:80:a5:2f:01:ca:89:bc:65:e9:
41:01:ef:55:a9:40:d8:63:db:ba:3b:ab:86:68:84:
d6:0d:cd:cb:d0:df:a3:d4:81:91:05:c4:9a:be:67:
3b:7a:42:ec:90:51:ff:3a:fb:76:08:db:90:c6:54:
56:40:5e:a2:39:d4:94:88:40:18:08:d4:63:2e:68:
0f:1b:7e:61:38:69:9c:25:3d:2f:6d:be:89:d4:42:
ff:77:74:ce:a6:fb:00:77:db:4f:fe:2a:83:7c:78:
b7:6b:95:67:28:45:ed:94:99:7f:fa:fc:13:8a:fd:
ce:5f:09:4d:7e:8f:4c:ac:ed:0b:aa:16:49:7a:5e:
5b:ee:da:1d:58:80:60:db:ae:79:76:5a:f2:65:4e:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E1:C2:64:AA:76:61:62:08:1E:DB:2F:77:B7:27:92:CA:C6:73:AC
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3d:81:e1:0e:34:d3:91:fd:d8:35:67:b2:ce:3b:1d:a8:e2:
63:c9:ab:c1:bb:95:76:b7:b8:79:a8:b8:16:3b:18:a6:9b:d9:
08:62:1c:ff:8c:10:94:f6:55:6f:2c:65:d8:0c:49:d3:69:d6:
ff:5d:a1:b5:44:69:8b:49:47:ae:d1:e1:9e:8b:ab:76:c1:a4:
e1:80:c8:0b:92:7a:af:dc:b8:4a:f6:08:d6:63:f8:ae:96:b4:
0f:18:07:54:5b:90:da:e2:8c:30:8c:d5:f5:88:87:53:e9:d6:
d1:3b:a9:17:fd:dc:a2:04:fd:27:ec:17:4e:a6:54:a3:aa:e4:
cb:1e:3b:f6:70:13:b9:88:eb:e1:28:c4:af:08:da:b9:71:27:
10:78:08:27:b2:aa:3f:8f:45:6b:ce:35:2a:56:3e:0d:f2:06:
dc:f9:23:ad:05:3d:47:58:3c:5f:a9:48:f9:61:5a:67:04:fc:
f0:ed:35:95:2a:2e:02:7e:a4:29:ff:2d:6c:d3:84:e8:7b:34:
e9:d4:21:86:db:a8:90:69:47:46:c1:54:dd:5a:68:5f:0a:57:
4a:56:6c:eb:5a:a8:d9:b7:58:07:d1:b1:eb:40:53:9a:7d:cb:
c7:66:67:a9:93:01:a3:88:02:0f:bb:6e:9b:18:0a:ea:49:d9:
ce:fa:c4:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlc6iBrhawJyrxZcvB7QlskMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZWViMjQyZmIwYWZhYTAzN2Q5Y2FmNTYwNGM2NTg3ZTQw
ZGUzYjUwHhcNMjUwOTE4MTMwMTExWhcNMjUwOTE5MTMwMTExWjAzMTEwLwYDVQQD
EyhkM2UxYzI2NGFhNzY2MTYyMDgxZWRiMmY3N2I3Mjc5MmNhYzY3M2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdnQ+IZ+z2tlmMX5rYuZTGxQApJI
j6rCpQWr34jjcD24+NFtkCJDI2RWIWFQi8bLO+6dZ4dHgqQwOx/d8878nFZQK8W9
p4HMWNgnQI+m1piLvYhzo6+k+JDCqjxQIJCpcPuMb/RyFeu64r4qNraApS8Byom8
ZelBAe9VqUDYY9u6O6uGaITWDc3L0N+j1IGRBcSavmc7ekLskFH/Ovt2CNuQxlRW
QF6iOdSUiEAYCNRjLmgPG35hOGmcJT0vbb6J1EL/d3TOpvsAd9tP/iqDfHi3a5Vn
KEXtlJl/+vwTiv3OXwlNfo9MrO0LqhZJel5b7todWIBg2655dlryZU559wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPhwmSqdmFiCB7bL3e3J5LKxnOsMB8GA1UdIwQY
MBaAFCLuskL7CvqgN9nK9WBMZYfkDeO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYt
MjUxNTYyZjAwZmM1LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYtMjUxNTYyZjAwZmM1
LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYj2B4Q40
05H92DVnss47HajiY8mrwbuVdre4eai4FjsYppvZCGIc/4wQlPZVbyxl2AxJ02nW
/12htURpi0lHrtHhnourdsGk4YDIC5J6r9y4SvYI1mP4rpa0DxgHVFuQ2uKMMIzV
9YiHU+nW0TupF/3cogT9J+wXTqZUo6rkyx479nATuYjr4SjErwjauXEnEHgIJ7Kq
P49Fa841KlY+DfIG3PkjrQU9R1g8X6lI+WFaZwT88O01lSouAn6kKf8tbNOE6Hs0
6dQhhtuokGlHRsFU3VpoXwpXSlZs61qo2bdYB9Gx60BTmn3Lx2ZnqZMBo4gCD7tu
mxgK6knZzvrEsg==
-----END CERTIFICATE-----
Generated at Thu Sep 18 22:08:19 2025 by rpki-client