Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
File: I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json)
Hash identifier: /QOL1R3ccmWVs2Kec1cnV/L2E+G18WWCqYGMz2dw5i0=
Subject key identifier: C8:31:53:E7:FF:C5:DF:18:25:80:08:DB:D9:DA:00:3A:13:CA:A1:4B
Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Certificate serial: 01989712F442E666DD53513A5DFBC5495876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
Manifest number: 0322
Signing time: Mon 11 Aug 2025 03:00:58 +0000
Manifest this update: Mon 11 Aug 2025 03:00:58 +0000
Manifest next update: Tue 12 Aug 2025 03:00:58 +0000
Files and hashes: 1: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: VFEGGjJQhlHghUJ/XfEtNEp1qvYJQAtzXgyqBT+ZHss=)
2: j4EIa7tKAt7zUJqXstTzU7rzvAM.roa (hash: KBhYqMx9SY3f4s8BMjZo/0KJeCGNnKyC4D8ert+K2y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:f4:42:e6:66:dd:53:51:3a:5d:fb:c5:49:58:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Validity
Not Before: Aug 11 03:00:58 2025 GMT
Not After : Aug 12 03:00:58 2025 GMT
Subject: CN=c83153e7ffc5df18258008dbd9da003a13caa14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:0b:32:5c:43:61:c8:25:9e:8c:af:e9:6f:
31:0d:b2:68:2d:96:4d:e3:15:a7:62:db:e1:1f:23:
62:e4:ce:38:f6:ac:24:b0:c0:96:d3:9c:2e:ec:a8:
02:d0:4b:2b:69:bf:70:9c:6d:49:af:f2:27:1f:4c:
5a:76:60:3d:70:7c:be:f2:91:c0:83:49:59:db:bf:
57:5b:22:8e:3d:d1:79:57:ce:54:1f:66:ce:90:53:
65:18:d3:f6:92:2d:f7:95:f5:2b:4c:df:65:42:3a:
bb:f6:2e:22:58:08:00:be:76:6f:e6:2d:39:98:50:
08:3d:4b:3e:10:c0:85:aa:ad:ac:66:83:ba:b0:34:
bc:73:54:5f:e8:6a:fc:c1:80:5a:3e:5c:69:fa:50:
ae:f7:e1:31:ce:92:d6:e5:f4:52:89:cc:dd:d7:8e:
30:54:3b:5c:e0:b3:3b:52:60:02:4e:4d:a4:fa:c9:
ff:e1:ec:cf:61:5e:92:e5:d0:55:4c:5c:4b:e8:24:
1a:61:46:a6:58:aa:c3:b2:e8:c2:72:93:d1:d8:ed:
96:94:9d:4a:41:93:0f:36:ac:92:10:74:18:bd:07:
82:7a:60:42:4f:cf:dd:27:9c:f2:9f:5a:4f:e3:71:
cc:dc:98:91:52:8e:02:de:05:96:1a:69:0d:d3:79:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:31:53:E7:FF:C5:DF:18:25:80:08:DB:D9:DA:00:3A:13:CA:A1:4B
X509v3 Authority Key Identifier:
keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:06:05:82:6a:fd:59:5c:10:8a:e0:58:bd:b0:10:3f:04:9d:
98:b4:4e:38:a0:83:3f:8b:24:57:10:69:02:e6:bf:25:d3:7e:
0d:7a:0a:b4:db:bc:f6:d5:8b:42:e7:68:ef:f3:d5:36:d2:a1:
fb:b3:92:a7:2e:fc:82:fd:b4:fd:ee:4a:22:d9:bf:24:ff:12:
76:5e:04:90:09:d9:87:f4:71:df:9d:70:9a:3c:6d:ec:7e:31:
40:24:8d:30:4b:8d:46:f4:5f:34:0d:0e:63:c9:24:64:4d:61:
ee:df:54:31:33:e5:51:ef:f4:51:f9:c9:84:55:cf:bb:d9:93:
dc:1e:e6:91:c6:d1:1c:69:bd:e2:82:95:4b:24:ee:2b:20:c8:
d8:3e:cf:8c:a8:71:1d:49:c8:53:1b:54:b4:04:ee:8f:6d:78:
e2:76:a9:cf:0a:15:68:a0:22:98:f9:e8:e0:ba:1e:29:ee:d6:
d9:26:ab:01:9d:aa:f2:2b:b4:a0:4a:44:89:82:4a:08:cb:22:
c5:eb:46:03:6c:ea:68:85:6a:dc:ef:c1:bf:a1:6e:55:5e:0f:
e7:3f:e8:28:3c:90:c5:ff:a6:1f:0b:98:11:c6:d7:c5:ec:21:
69:51:88:e1:d9:96:7f:a7:ca:f2:8c:5f:95:18:99:ca:3b:a7:
87:19:37:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXEvRC5mbdU1E6XfvFSVh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTk4NjdlYTYwM2ZjOGNmOTJiYjViYWM2ZjI1NTcxMGUz
YmYzNmEwHhcNMjUwODExMDMwMDU4WhcNMjUwODEyMDMwMDU4WjAzMTEwLwYDVQQD
EyhjODMxNTNlN2ZmYzVkZjE4MjU4MDA4ZGJkOWRhMDAzYTEzY2FhMTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5kLMlxDYcglnoyv6W8xDbJoLZZN
4xWnYtvhHyNi5M449qwksMCW05wu7KgC0Esrab9wnG1Jr/InH0xadmA9cHy+8pHA
g0lZ279XWyKOPdF5V85UH2bOkFNlGNP2ki33lfUrTN9lQjq79i4iWAgAvnZv5i05
mFAIPUs+EMCFqq2sZoO6sDS8c1Rf6Gr8wYBaPlxp+lCu9+ExzpLW5fRSiczd144w
VDtc4LM7UmACTk2k+sn/4ezPYV6S5dBVTFxL6CQaYUamWKrDsujCcpPR2O2WlJ1K
QZMPNqySEHQYvQeCemBCT8/dJ5zyn1pP43HM3JiRUo4C3gWWGmkN03llRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgxU+f/xd8YJYAI29naADoTyqFLMB8GA1UdIwQY
MBaAFCOphn6mA/yM+Su1usbyVXEOO/NqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEt
NTk0YTI3ZGIxNDZiLzEvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEtNTk0YTI3ZGIxNDZi
LzEvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgYFgmr9
WVwQiuBYvbAQPwSdmLROOKCDP4skVxBpAua/JdN+DXoKtNu89tWLQudo7/PVNtKh
+7OSpy78gv20/e5KItm/JP8Sdl4EkAnZh/Rx351wmjxt7H4xQCSNMEuNRvRfNA0O
Y8kkZE1h7t9UMTPlUe/0UfnJhFXPu9mT3B7mkcbRHGm94oKVSyTuKyDI2D7PjKhx
HUnIUxtUtATuj2144napzwoVaKAimPno4LoeKe7W2SarAZ2q8iu0oEpEiYJKCMsi
xetGA2zqaIVq3O/Bv6FuVV4P5z/oKDyQxf+mHwuYEcbXxewhaVGI4dmWf6fK8oxf
lRiZyjunhxk3CA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 06:07:08 2025 by rpki-client