Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
File: RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json)
Hash identifier: CU+LQUh84UatSIdxamEhZpryzlXocO0k131XqeZvPvo=
Subject key identifier: 65:34:2C:C6:7E:4E:C1:BF:CF:87:16:CF:3F:1C:99:6E:7A:15:10:54
Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290
Certificate serial: 0198745061DDE0E575EE005B92A477B9BEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
Manifest number: 1527
Signing time: Mon 04 Aug 2025 09:01:21 +0000
Manifest this update: Mon 04 Aug 2025 09:01:21 +0000
Manifest next update: Tue 05 Aug 2025 09:01:21 +0000
Files and hashes: 1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: Mw3vON2CSmRSjY2MM+W9GZ/hbF/RJLebJDPjUHuMC1g=)
2: xmUpqD4NUMAqisL66k_x6MTYnaQ.roa (hash: dGRcbHkgyhvucFtnmzWvrILS2aHk2c8SQDJ6rOX+JL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:61:dd:e0:e5:75:ee:00:5b:92:a4:77:b9:be:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290
Validity
Not Before: Aug 4 09:01:21 2025 GMT
Not After : Aug 5 09:01:21 2025 GMT
Subject: CN=65342cc67e4ec1bfcf8716cf3f1c996e7a151054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f5:b3:d6:2d:a7:8e:20:fb:4f:d4:0e:ff:a3:
77:47:44:e7:7c:b4:5a:38:57:2e:27:bf:3f:71:a6:
f3:f6:2d:9f:3e:18:73:94:df:96:0f:d4:54:78:38:
17:aa:75:36:aa:fb:e4:9a:89:b4:ba:c5:81:73:f2:
00:21:ac:c0:2b:85:92:04:03:fe:ad:c2:9d:4d:1a:
e2:f3:ed:23:97:c1:57:cd:22:87:91:d1:07:b3:33:
97:95:34:12:bf:3a:47:ca:d6:d2:6b:5c:f8:f1:ab:
9b:24:34:04:91:fb:69:ff:48:b8:45:24:b5:ef:f2:
46:37:e8:9d:63:f1:d3:7b:ba:05:aa:d7:93:2e:c0:
4b:88:40:b0:db:aa:56:69:a1:13:19:3a:a0:ec:77:
4d:b4:f0:a9:7a:ac:78:c6:4c:c8:6a:37:55:fd:7a:
b6:53:fe:85:ef:b4:aa:44:da:db:af:38:9b:18:eb:
c8:a3:9e:b5:22:8d:e9:6c:2c:af:e9:86:f8:99:c3:
b0:92:62:63:8b:ad:65:0d:fb:cf:7b:f3:47:b4:a7:
07:b4:ec:4d:13:b1:25:42:13:e8:bb:11:bd:54:99:
6f:ad:bf:6f:a6:95:7a:80:f5:88:5f:17:23:43:de:
74:ec:85:be:13:78:70:e6:94:63:a3:42:f1:04:e7:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:34:2C:C6:7E:4E:C1:BF:CF:87:16:CF:3F:1C:99:6E:7A:15:10:54
X509v3 Authority Key Identifier:
keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:20:18:4a:65:19:3f:df:27:36:d2:f0:9b:12:0a:33:f7:95:
09:ae:2d:47:89:cb:47:61:d1:ba:0b:e3:f0:e0:f8:1a:12:b3:
17:f6:aa:18:aa:c2:cc:71:c1:4e:1e:8b:81:fe:c3:98:70:45:
36:f5:80:60:9b:98:2b:11:d2:76:1f:1f:df:7f:7f:c8:55:a8:
9d:a5:2e:59:de:9b:93:57:c9:f2:d1:ed:8a:09:ac:20:9c:5c:
71:c7:04:16:95:0e:b2:92:06:81:54:52:42:2b:b1:63:8b:7a:
ef:90:98:30:f8:24:63:07:aa:59:32:7d:8e:c2:65:83:49:b4:
74:3d:0b:79:a2:96:23:47:15:b3:ba:f8:2b:cf:c1:3f:06:de:
db:22:36:09:4d:d8:01:fa:91:09:fe:9c:38:df:5c:b5:5f:7b:
80:63:b0:58:9d:56:63:9d:73:4c:fa:40:eb:ca:63:23:a7:1b:
31:89:26:c6:5c:ff:a9:02:ed:a6:6d:aa:ac:87:61:ab:4d:eb:
7b:d5:d7:e6:c2:93:0f:39:e1:b1:21:d1:85:28:9d:0b:80:71:
5e:75:da:dc:37:4d:fb:7d:de:0b:da:f8:74:50:07:67:3a:43:
ac:c4:16:d2:8d:f1:2a:d4:6e:7c:66:a3:30:16:f0:81:d2:88:
d0:ea:ca:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UGHd4OV17gBbkqR3ub7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MjIzMWU3MTNmMGY4MzRiZDA5YzNmNzZlMTJlMjUwZTc3
M2MyOTAwHhcNMjUwODA0MDkwMTIxWhcNMjUwODA1MDkwMTIxWjAzMTEwLwYDVQQD
Eyg2NTM0MmNjNjdlNGVjMWJmY2Y4NzE2Y2YzZjFjOTk2ZTdhMTUxMDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvWz1i2njiD7T9QO/6N3R0TnfLRa
OFcuJ78/cabz9i2fPhhzlN+WD9RUeDgXqnU2qvvkmom0usWBc/IAIazAK4WSBAP+
rcKdTRri8+0jl8FXzSKHkdEHszOXlTQSvzpHytbSa1z48aubJDQEkftp/0i4RSS1
7/JGN+idY/HTe7oFqteTLsBLiECw26pWaaETGTqg7HdNtPCpeqx4xkzIajdV/Xq2
U/6F77SqRNrbrzibGOvIo561Io3pbCyv6Yb4mcOwkmJji61lDfvPe/NHtKcHtOxN
E7ElQhPouxG9VJlvrb9vppV6gPWIXxcjQ9507IW+E3hw5pRjo0LxBOeLawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGU0LMZ+TsG/z4cWzz8cmW56FRBUMB8GA1UdIwQY
MBaAFEYiMecT8Pg0vQnD924S4lDnc8KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5Mzct
YWQ0YmQ3ZjIzY2U0LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5MzctYWQ0YmQ3ZjIzY2U0
LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSAYSmUZ
P98nNtLwmxIKM/eVCa4tR4nLR2HRugvj8OD4GhKzF/aqGKrCzHHBTh6Lgf7DmHBF
NvWAYJuYKxHSdh8f339/yFWonaUuWd6bk1fJ8tHtigmsIJxccccEFpUOspIGgVRS
QiuxY4t675CYMPgkYweqWTJ9jsJlg0m0dD0LeaKWI0cVs7r4K8/BPwbe2yI2CU3Y
AfqRCf6cON9ctV97gGOwWJ1WY51zTPpA68pjI6cbMYkmxlz/qQLtpm2qrIdhq03r
e9XX5sKTDznhsSHRhSidC4BxXnXa3DdN+33eC9r4dFAHZzpDrMQW0o3xKtRufGaj
MBbwgdKI0OrKZQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:50 2025 by rpki-client