Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
File: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft (raw, json)
Hash identifier: HRnhMfD0PK+Kz7hb8p1NNSM/YuJ54VPWc+GFpgWf2LQ=
Subject key identifier: E1:CA:A5:E1:50:D5:9D:4B:0A:2D:89:5B:7A:DE:62:79:79:66:43:0C
Authority key identifier: 21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
Certificate issuer: /CN=21d85d231ad54b8439c2aaed91a577586ac46000
Certificate serial: 01989FA853E0B808C7FC292B5EA85AC10FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
Manifest number: 112F
Signing time: Tue 12 Aug 2025 19:01:05 +0000
Manifest this update: Tue 12 Aug 2025 19:01:05 +0000
Manifest next update: Wed 13 Aug 2025 19:01:05 +0000
Files and hashes: 1: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl (hash: J/4EUDROQk1azZDZz8POA0obIUGJeEm8OV7gFYMt56A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a8:53:e0:b8:08:c7:fc:29:2b:5e:a8:5a:c1:0f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21d85d231ad54b8439c2aaed91a577586ac46000
Validity
Not Before: Aug 12 19:01:05 2025 GMT
Not After : Aug 13 19:01:05 2025 GMT
Subject: CN=e1caa5e150d59d4b0a2d895b7ade62797966430c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:81:97:4a:c7:19:7d:0f:4b:77:91:ac:b1:
cd:92:84:da:08:06:18:69:92:84:24:92:a5:cd:eb:
12:b7:1a:69:7b:6e:b3:c2:b6:5f:22:ea:33:5d:52:
51:72:96:67:2e:fd:d8:59:d6:8b:72:1e:37:2e:47:
ef:dc:4b:40:9b:11:98:8d:bb:90:40:b8:68:79:89:
17:b5:3d:61:55:48:1c:e8:e3:6a:4a:44:2e:98:c1:
5f:21:d2:f9:c7:58:13:f9:37:eb:a1:fc:9d:15:70:
9e:fb:21:f0:86:ef:6d:87:0d:ee:f5:ce:70:63:44:
9d:78:37:c0:7f:54:f9:44:bd:ca:6e:35:82:2e:ba:
1f:7b:29:1a:61:b6:54:84:8e:32:32:f4:2b:b0:43:
1a:6a:a2:be:85:f9:56:82:c8:62:d5:fc:52:0e:84:
4e:80:b3:78:b1:96:ff:a3:f7:22:6d:7f:bc:db:99:
c5:2d:70:70:3c:58:08:25:e6:bf:45:d0:16:5f:74:
92:ec:45:c8:e1:e9:d0:39:e3:58:19:e8:ce:7b:67:
74:54:70:03:a9:3f:98:53:77:b1:1d:b0:cb:87:9a:
7e:40:ec:21:dc:bd:26:97:ca:42:6e:a3:4d:f7:7e:
a5:1f:5c:7c:1f:f1:05:75:8a:4f:2d:30:69:46:d1:
f1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CA:A5:E1:50:D5:9D:4B:0A:2D:89:5B:7A:DE:62:79:79:66:43:0C
X509v3 Authority Key Identifier:
keyid:21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:fb:89:af:5b:ce:1a:39:12:fe:61:f7:36:5d:cc:d9:7d:61:
20:3f:8c:c6:b4:62:3a:40:57:3c:f6:f7:eb:4f:0a:ad:1e:a8:
a5:9f:2d:1e:e0:43:8a:3e:88:44:4c:09:52:17:3f:bb:1e:85:
fb:a5:bf:67:99:a1:56:70:56:2f:b7:84:47:43:36:b0:0a:30:
c6:4f:28:2e:0e:cb:1c:30:24:67:1a:f4:87:ea:8c:52:f1:2b:
7a:b4:67:99:38:71:b2:b3:7c:96:97:cc:59:d9:9d:26:80:fe:
af:f7:20:db:e6:92:5a:b9:c7:66:8b:73:34:4a:73:d5:d8:2d:
ec:e8:7d:bf:ea:d5:d6:34:11:a9:95:f9:60:a9:1d:0c:cd:f3:
46:62:99:2b:11:e4:43:b9:17:3c:45:af:6b:de:ad:f0:62:b9:
c3:e8:47:c1:53:04:fd:97:be:4c:6d:da:2e:a5:9a:25:f3:20:
33:d6:33:42:19:9d:3c:25:7e:a5:9f:77:e1:75:7a:8c:9c:6c:
f2:ce:2a:46:cd:90:06:1e:c1:26:80:c3:7a:34:2f:c8:96:67:
a2:80:4b:8d:77:dd:f2:ea:d3:a9:ff:fc:a5:c7:b1:ca:bf:d9:
54:ee:20:fd:61:4e:1f:80:fa:12:9e:be:4e:9b:35:f9:e7:06:
1a:f7:83:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifqFPguAjH/CkrXqhawQ/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZDg1ZDIzMWFkNTRiODQzOWMyYWFlZDkxYTU3NzU4NmFj
NDYwMDAwHhcNMjUwODEyMTkwMTA1WhcNMjUwODEzMTkwMTA1WjAzMTEwLwYDVQQD
EyhlMWNhYTVlMTUwZDU5ZDRiMGEyZDg5NWI3YWRlNjI3OTc5NjY0MzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe+Bl0rHGX0PS3eRrLHNkoTaCAYY
aZKEJJKlzesStxppe26zwrZfIuozXVJRcpZnLv3YWdaLch43Lkfv3EtAmxGYjbuQ
QLhoeYkXtT1hVUgc6ONqSkQumMFfIdL5x1gT+TfrofydFXCe+yHwhu9thw3u9c5w
Y0SdeDfAf1T5RL3KbjWCLrofeykaYbZUhI4yMvQrsEMaaqK+hflWgshi1fxSDoRO
gLN4sZb/o/cibX+825nFLXBwPFgIJea/RdAWX3SS7EXI4enQOeNYGejOe2d0VHAD
qT+YU3exHbDLh5p+QOwh3L0ml8pCbqNN936lH1x8H/EFdYpPLTBpRtHx9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHKpeFQ1Z1LCi2JW3reYnl5ZkMMMB8GA1UdIwQY
MBaAFCHYXSMa1UuEOcKq7ZGld1hqxGAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWRoZEl4clZTNFE1d3FydGthVjNXR3JFWUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82YTZiNTUtY2EwMi00NThkLThiNWQt
NzRkNzczMDJiMTg0LzEvSWRoZEl4clZTNFE1d3FydGthVjNXR3JFWUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS82YTZiNTUtY2EwMi00NThkLThiNWQtNzRkNzczMDJiMTg0
LzEvSWRoZEl4clZTNFE1d3FydGthVjNXR3JFWUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfuJr1vO
GjkS/mH3Nl3M2X1hID+MxrRiOkBXPPb3608KrR6opZ8tHuBDij6IREwJUhc/ux6F
+6W/Z5mhVnBWL7eER0M2sAowxk8oLg7LHDAkZxr0h+qMUvErerRnmThxsrN8lpfM
WdmdJoD+r/cg2+aSWrnHZotzNEpz1dgt7Oh9v+rV1jQRqZX5YKkdDM3zRmKZKxHk
Q7kXPEWva96t8GK5w+hHwVME/Ze+TG3aLqWaJfMgM9YzQhmdPCV+pZ934XV6jJxs
8s4qRs2QBh7BJoDDejQvyJZnooBLjXfd8urTqf/8pcexyr/ZVO4g/WFOH4D6Ep6+
Tps1+ecGGveDCQ==
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:07 2025 by rpki-client