Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier: 8ps6esVj20jNS71XVtpLtYgjS3cEbg9qfnJP87nk9vo=
Subject key identifier: 3F:D9:EE:44:04:25:97:8C:57:FD:CC:53:0A:6A:DB:62:EE:F8:0F:01
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 01987D8ABB931248184BE104D5D8E419CE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 04:01:40 +0000
Manifest this update: Wed 06 Aug 2025 04:01:40 +0000
Manifest next update: Thu 07 Aug 2025 04:01:40 +0000
Files and hashes: 1: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: qtU1yXtHLRPzG6MxtdDibR4ENIaYxBZVpbSvgv48Wlg=)
2: IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa (hash: nrrSBtVL1+LxQy+ccPed0KobnXytQAq3RiSJBLbBVIg=)
3: NfNd6pjqYOF2P-1csZDDcYiiQ28.roa (hash: iQWQfc6lD74rDEabgsCAVeBcixywrixRVP1KpMFN48o=)
4: PJBAejzPvEvF3ZoupzGWVEj1Og0.roa (hash: BFJtqcfNldj6Jrfn0Y0+mOBk6xT0n483gTjn5ogYiu8=)
5: aCUjIUK5OOSaycrn7_ksP5SjmPw.roa (hash: O1lgV6htb/Z9+mSwOsrU/V0sb4jZo6xRqeghVOqs13I=)
6: dSYYIsgqOPsPCWRb8n6bjaKooRw.roa (hash: Pvqr/OOkaqypvOSknbbOn2J0oHNnn5WhmVz2GaH3aXU=)
7: quZyu716dxS9mdBeGNCJZ1sGIZM.roa (hash: MPvLxa0c+riXjzyelLJV18hBBvFNCarL2WtEM/bk6Os=)
8: sx8Ag2ZkbPORNb5IpKGaIu2_Dqo.roa (hash: ZFFpoBJ2SvC/bg4XtAEwmcSclBY/i+xRWcdnLVCOAss=)
9: wUsJ3Y8bKRlwOlXMA6Qttd1Brps.roa (hash: zuU1UQuoYfDo2IQVUCO8dMMln85NIWVqpAhKwg/ayj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:bb:93:12:48:18:4b:e1:04:d5:d8:e4:19:ce:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Aug 6 04:01:40 2025 GMT
Not After : Aug 7 04:01:40 2025 GMT
Subject: CN=3fd9ee440425978c57fdcc530a6adb62eef80f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f7:7a:56:89:11:c7:b3:0b:70:da:7b:50:dc:
ea:32:19:25:a5:77:dc:5e:de:0b:6e:4a:2f:a1:eb:
7a:1f:e4:60:49:a5:12:23:d8:96:8b:2a:0b:5a:4f:
01:18:b2:ab:79:22:e5:d2:c9:85:3f:f6:cd:99:4b:
b9:de:f0:3e:4a:f3:b2:62:cf:97:9b:55:f2:b2:71:
11:dc:45:94:4d:99:88:9b:b6:5d:35:80:1e:66:3e:
bb:4e:33:54:91:92:75:aa:c0:82:15:88:1e:be:21:
00:33:47:07:3b:87:a0:06:86:26:2c:a3:45:b7:17:
05:df:ca:a1:a5:98:98:72:dc:19:bb:55:c8:59:e2:
d7:b9:23:6e:78:c7:88:48:5d:22:51:c9:12:cc:86:
50:9a:2e:9c:ca:03:7b:05:b7:3e:2f:af:c8:7e:87:
47:df:22:dd:de:a4:b0:e2:44:94:bd:c8:2b:81:4d:
ac:e4:7d:2b:39:fe:ec:0f:9f:75:15:a7:1e:49:2b:
9b:a4:c9:32:1c:d8:1d:9a:bd:0a:8a:9d:d4:a8:32:
3b:72:3d:ae:4f:78:c1:9d:e3:04:6f:e9:77:95:44:
7c:1e:fb:bd:9a:55:04:d4:a5:1c:e6:b4:d0:49:6e:
5f:19:0a:98:f7:c8:90:b8:7e:7a:66:da:84:20:71:
9c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D9:EE:44:04:25:97:8C:57:FD:CC:53:0A:6A:DB:62:EE:F8:0F:01
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c7:a6:6b:35:2e:01:bb:25:5d:eb:56:d8:89:89:82:4b:f9:
16:d4:89:3e:9c:44:c4:45:a4:34:fd:9b:9d:00:d4:e8:1c:03:
b7:69:50:98:a8:ae:3d:e0:4f:c9:57:fe:08:fb:9a:ed:cc:83:
11:26:0e:87:54:b4:25:81:29:ab:97:52:f4:03:c4:d6:be:c5:
0a:52:95:8d:eb:eb:e7:ca:06:ed:0a:69:10:58:51:25:65:d1:
74:b8:36:a0:13:f8:d3:17:b9:69:54:31:9d:7e:af:51:07:46:
7a:3f:77:fa:8a:b9:1c:16:f5:43:65:b1:fa:f1:bb:2f:ed:32:
c8:dd:a3:7c:6b:a3:ea:62:ef:72:6c:02:88:f3:64:7c:c8:71:
70:be:1f:34:9e:58:bf:be:fd:7b:a6:52:60:11:e9:40:c5:b6:
21:7f:94:44:25:a1:1e:57:79:46:2e:2e:42:c1:eb:3a:f9:50:
f5:51:c8:bb:f6:18:a5:6d:04:26:5d:8e:05:2a:41:0c:0e:7a:
a0:c4:ad:44:30:86:d9:df:5f:e2:f1:33:89:39:8e:d6:75:96:
e9:0a:77:29:f7:3c:ff:af:be:57:2c:b5:06:22:c9:5d:8f:9f:
08:1d:0c:c0:be:9d:b1:d4:18:3a:f1:ab:f0:00:c4:d3:f1:f0:
17:0d:d9:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9iruTEkgYS+EE1djkGc43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMmY0YzFhMzdlOTMxM2NkZDJlZWE3NzUwYWUwMjhkMThj
ZDVhYWUwHhcNMjUwODA2MDQwMTQwWhcNMjUwODA3MDQwMTQwWjAzMTEwLwYDVQQD
EygzZmQ5ZWU0NDA0MjU5NzhjNTdmZGNjNTMwYTZhZGI2MmVlZjgwZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fd6VokRx7MLcNp7UNzqMhklpXfc
Xt4Lbkovoet6H+RgSaUSI9iWiyoLWk8BGLKreSLl0smFP/bNmUu53vA+SvOyYs+X
m1XysnER3EWUTZmIm7ZdNYAeZj67TjNUkZJ1qsCCFYgeviEAM0cHO4egBoYmLKNF
txcF38qhpZiYctwZu1XIWeLXuSNueMeISF0iUckSzIZQmi6cygN7Bbc+L6/IfodH
3yLd3qSw4kSUvcgrgU2s5H0rOf7sD591FaceSSubpMkyHNgdmr0Kip3UqDI7cj2u
T3jBneMEb+l3lUR8Hvu9mlUE1KUc5rTQSW5fGQqY98iQuH56ZtqEIHGcywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/Z7kQEJZeMV/3MUwpq22Lu+A8BMB8GA1UdIwQY
MBaAFCAvTBo36TE83S7qd1CuAo0YzVquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEt
ZjZiNzhlMmIxN2ExLzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEtZjZiNzhlMmIxN2Ex
LzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8emazUu
AbslXetW2ImJgkv5FtSJPpxExEWkNP2bnQDU6BwDt2lQmKiuPeBPyVf+CPua7cyD
ESYOh1S0JYEpq5dS9APE1r7FClKVjevr58oG7QppEFhRJWXRdLg2oBP40xe5aVQx
nX6vUQdGej93+oq5HBb1Q2Wx+vG7L+0yyN2jfGuj6mLvcmwCiPNkfMhxcL4fNJ5Y
v779e6ZSYBHpQMW2IX+URCWhHld5Ri4uQsHrOvlQ9VHIu/YYpW0EJl2OBSpBDA56
oMStRDCG2d9f4vEziTmO1nWW6Qp3Kfc8/6++Vyy1BiLJXY+fCB0MwL6dsdQYOvGr
8ADE0/HwFw3ZLw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:16:36 2025 by rpki-client