Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier: 0bZ3q66eYXU5iBfE3uz+O79CI+MZPPJaGRO1dOCjZ58=
Subject key identifier: D8:D4:35:E5:C6:7A:3B:B0:81:1B:76:06:D1:3F:73:78:79:59:BD:57
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 01987E65ED2A6126FF25682B94E06D87AFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number: 0CD9
Signing time: Wed 06 Aug 2025 08:01:05 +0000
Manifest this update: Wed 06 Aug 2025 08:01:05 +0000
Manifest next update: Thu 07 Aug 2025 08:01:05 +0000
Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: 4WHeqXFIuHDB6e7aSty72SKLbYXeFQeOZM5c+wkVG7U=)
2: maYu8dN9neYyc8DtbRu2KTpDdQk.roa (hash: H5U+8VR9PAI4QlkVpTR8DC6LqpMXq6tJVvxgrK/vIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:ed:2a:61:26:ff:25:68:2b:94:e0:6d:87:af:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: Aug 6 08:01:05 2025 GMT
Not After : Aug 7 08:01:05 2025 GMT
Subject: CN=d8d435e5c67a3bb0811b7606d13f73787959bd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:46:45:19:09:07:41:e3:30:7c:56:a1:e9:
65:8a:11:4e:0b:21:6b:d8:78:28:32:23:3b:5f:ef:
ae:3c:c4:d7:eb:75:a5:d3:37:dc:a0:bc:55:e1:ee:
9b:b3:a5:24:22:78:c0:5b:6d:a9:43:c4:57:de:c0:
cd:71:72:a5:3d:1f:6c:9d:4f:6f:ef:45:31:1d:4b:
20:ee:14:60:3c:ce:b7:94:0d:87:cd:4e:57:bc:bd:
2b:ea:ab:be:74:10:db:7b:ec:5d:48:ac:79:98:40:
6e:0e:89:9a:5a:46:ce:4c:08:04:86:07:5f:0c:e7:
85:76:e1:25:50:d7:b9:b1:dd:3e:bd:87:fd:7c:55:
57:0d:5c:0a:b6:64:6f:23:82:b7:69:5a:16:e7:42:
07:b0:79:11:df:6a:76:9f:1c:12:57:fe:54:6e:7b:
fa:89:48:87:74:f2:00:c5:cc:04:75:36:1f:ab:82:
7c:3c:a5:06:8a:0a:45:1b:3b:32:71:f1:ac:82:d8:
ac:1e:0b:d1:d2:9e:a4:e1:10:0a:12:18:72:55:e8:
9a:84:83:60:ac:d3:4a:ff:76:dd:b1:f7:c8:88:fd:
65:66:8a:ab:24:f2:8c:9f:67:24:1b:98:63:e3:ae:
35:52:50:c5:a5:62:2b:0f:ab:c1:14:41:50:3b:93:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D4:35:E5:C6:7A:3B:B0:81:1B:76:06:D1:3F:73:78:79:59:BD:57
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:98:a8:37:88:bc:5c:69:2c:9d:3b:2f:b8:cc:d8:af:c8:22:
e1:58:8f:03:8d:9d:71:3c:ed:63:70:71:3e:62:11:da:bb:ca:
09:42:24:40:83:52:72:95:4c:c9:98:c8:25:19:24:4a:96:bc:
37:9b:8e:a1:f4:c4:57:5d:12:a9:d1:3f:7f:1b:d7:1d:9d:17:
18:76:f1:c9:6c:d1:ca:7a:83:b3:88:c0:39:05:93:e1:a0:a0:
87:bf:c7:49:24:69:c4:dd:a1:96:97:9f:80:1d:9d:75:e4:0a:
f6:4b:68:e0:56:bf:a0:7b:98:39:0f:61:fd:79:e4:17:d6:24:
41:83:26:93:a2:59:5d:28:b2:0d:8b:05:b4:95:c3:ce:ad:da:
6c:84:74:72:ae:83:96:e6:7f:07:51:f6:3e:88:c9:78:13:38:
c5:91:89:a3:26:b3:3a:61:2b:36:a1:93:7c:50:3d:9f:97:5b:
55:f3:e6:5f:7b:fa:15:f6:a6:04:c8:3f:26:ca:8d:50:da:0f:
15:c8:33:8e:9c:76:e1:d5:5f:4d:6d:f7:1b:9a:82:01:4e:bd:
f4:6b:b6:1c:de:f0:ce:1c:4f:29:f7:91:0c:5f:c5:c1:9e:0b:
f3:73:9b:8c:b4:00:7d:38:cf:ca:55:dd:20:b1:9f:8a:db:48:
3d:c5:77:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+Ze0qYSb/JWgrlOBth6/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDFmNDM5ZGViYWZmNTg4MDM5NWQ3OGYwYmJmYWQ4Y2E3
NjA4YmYwHhcNMjUwODA2MDgwMTA1WhcNMjUwODA3MDgwMTA1WjAzMTEwLwYDVQQD
EyhkOGQ0MzVlNWM2N2EzYmIwODExYjc2MDZkMTNmNzM3ODc5NTliZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CJGRRkJB0HjMHxWoellihFOCyFr
2HgoMiM7X++uPMTX63Wl0zfcoLxV4e6bs6UkInjAW22pQ8RX3sDNcXKlPR9snU9v
70UxHUsg7hRgPM63lA2HzU5XvL0r6qu+dBDbe+xdSKx5mEBuDomaWkbOTAgEhgdf
DOeFduElUNe5sd0+vYf9fFVXDVwKtmRvI4K3aVoW50IHsHkR32p2nxwSV/5Ubnv6
iUiHdPIAxcwEdTYfq4J8PKUGigpFGzsycfGsgtisHgvR0p6k4RAKEhhyVeiahINg
rNNK/3bdsffIiP1lZoqrJPKMn2ckG5hj4641UlDFpWIrD6vBFEFQO5P8VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjUNeXGejuwgRt2BtE/c3h5Wb1XMB8GA1UdIwQY
MBaAFCEB9Dneuv9YgDldePC7+tjKdgi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83OGM0MTQtOWIwOS00Nzc1LWE1NTgt
ZTNkZWZiN2UyNTE4LzEvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83OGM0MTQtOWIwOS00Nzc1LWE1NTgtZTNkZWZiN2UyNTE4
LzEvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZioN4i8
XGksnTsvuMzYr8gi4ViPA42dcTztY3BxPmIR2rvKCUIkQINScpVMyZjIJRkkSpa8
N5uOofTEV10SqdE/fxvXHZ0XGHbxyWzRynqDs4jAOQWT4aCgh7/HSSRpxN2hlpef
gB2ddeQK9kto4Fa/oHuYOQ9h/XnkF9YkQYMmk6JZXSiyDYsFtJXDzq3abIR0cq6D
luZ/B1H2PojJeBM4xZGJoyazOmErNqGTfFA9n5dbVfPmX3v6FfamBMg/JsqNUNoP
Fcgzjpx24dVfTW33G5qCAU699Gu2HN7wzhxPKfeRDF/FwZ4L83ObjLQAfTjPylXd
ILGfittIPcV3DQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:22:39 2025 by rpki-client