Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
File: iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft (raw, json)
Hash identifier: 4DCZXcaPZhQappdNMPs/UNM6yHIfD3BFEs6bQsYqVYY=
Subject key identifier: 66:92:0E:44:6D:D6:24:AF:20:33:50:D9:A5:29:A4:45:15:33:76:EE
Authority key identifier: 89:0F:3F:AB:23:49:C0:1B:1A:C8:FD:0B:92:1C:60:31:8C:E1:84:D6
Certificate issuer: /CN=890f3fab2349c01b1ac8fd0b921c60318ce184d6
Certificate serial: 0198808AE514A0F73192C9FF859272DB3A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
Manifest number: 05F5
Signing time: Wed 06 Aug 2025 18:00:42 +0000
Manifest this update: Wed 06 Aug 2025 18:00:42 +0000
Manifest next update: Thu 07 Aug 2025 18:00:42 +0000
Files and hashes: 1: iQ8_qyNJwBsayP0LkhxgMYzhhNY.crl (hash: 9h2ap1pYb0OLGVaiq/ZblLq2rz+j+xojBCHfLZcwDM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8a:e5:14:a0:f7:31:92:c9:ff:85:92:72:db:3a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890f3fab2349c01b1ac8fd0b921c60318ce184d6
Validity
Not Before: Aug 6 18:00:42 2025 GMT
Not After : Aug 7 18:00:42 2025 GMT
Subject: CN=66920e446dd624af203350d9a529a445153376ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:39:78:25:08:a3:a2:47:05:57:4b:3a:a3:
8b:79:8a:6a:29:e0:60:9a:3a:77:d9:1a:b6:d3:20:
d2:d7:a7:49:50:58:6d:19:6a:0a:1a:ee:bb:d8:a6:
79:d5:7f:39:b1:d0:85:76:32:07:ce:36:8d:f1:e2:
89:33:28:05:03:6d:e8:90:39:7f:e8:a4:65:48:46:
8b:18:6f:db:4c:da:d4:a9:f5:9b:e9:e8:40:3d:4f:
23:0e:fa:82:d0:97:a2:f1:1d:ff:c2:8d:74:79:0b:
b9:6a:00:93:c6:40:3c:38:ea:45:71:86:52:e2:91:
11:a5:bd:ef:46:37:7c:a1:a1:82:62:57:5b:79:10:
bc:4b:9a:2d:f6:ca:a4:b3:d3:bb:03:2a:ca:57:f6:
7c:9d:95:48:93:49:79:d7:b5:ff:92:ea:71:15:bd:
2e:03:72:b1:08:d2:e1:96:2e:c5:06:c5:9d:21:27:
00:9b:3e:4b:a7:04:c6:a2:ec:24:c1:84:bb:86:de:
7c:4d:dc:39:a3:25:02:74:fc:bf:09:33:68:9e:74:
23:aa:ea:d6:10:07:e9:a6:68:e6:df:03:80:39:5c:
16:d0:f5:ae:df:24:9f:57:fe:6e:e6:f5:65:02:3e:
c2:9b:70:03:18:4d:58:6d:5b:7d:0e:70:1c:8e:fc:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:92:0E:44:6D:D6:24:AF:20:33:50:D9:A5:29:A4:45:15:33:76:EE
X509v3 Authority Key Identifier:
keyid:89:0F:3F:AB:23:49:C0:1B:1A:C8:FD:0B:92:1C:60:31:8C:E1:84:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fa:97:18:71:6d:32:1b:bd:ca:e0:fa:35:e0:e9:4b:45:aa:
d2:23:be:f2:e0:e6:38:70:58:12:bd:b5:bb:f0:51:75:ca:99:
34:3a:8f:d5:69:14:9c:ab:d3:f5:07:8e:25:b1:95:0e:08:62:
24:82:26:46:c9:c9:14:e4:88:42:55:0b:ce:d1:f2:21:a3:9c:
b9:e9:c5:bc:14:e8:1d:a8:6a:f3:ce:de:85:05:8e:5d:f0:50:
35:84:75:85:77:81:1d:eb:d2:81:4d:da:8b:07:0d:dd:c4:01:
c3:8e:35:f0:56:7d:21:63:d1:1e:8c:1d:9a:88:86:c2:5b:82:
00:4a:a7:54:24:60:c6:c9:16:e2:71:fb:ff:41:aa:8f:8c:f9:
8c:c6:d4:a8:4a:90:1f:48:9c:91:d7:26:45:ad:53:65:c5:94:
49:6b:fd:e3:ad:c2:5e:ee:ed:f4:3b:b4:4e:12:4b:30:45:f2:
83:53:5d:53:f6:cd:c4:31:c3:95:dc:81:a3:8d:e1:25:6d:ba:
15:0c:40:8d:4d:79:ec:b9:cc:a7:3f:04:c8:68:78:02:2c:79:
76:4b:63:79:7e:6b:2b:3a:11:39:a5:65:e8:4a:11:12:d2:90:
b9:1b:d6:f1:6e:39:57:e5:a9:23:76:90:db:4f:b3:c9:ac:7c:
09:a5:ba:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAiuUUoPcxksn/hZJy2zooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MGYzZmFiMjM0OWMwMWIxYWM4ZmQwYjkyMWM2MDMxOGNl
MTg0ZDYwHhcNMjUwODA2MTgwMDQyWhcNMjUwODA3MTgwMDQyWjAzMTEwLwYDVQQD
Eyg2NjkyMGU0NDZkZDYyNGFmMjAzMzUwZDlhNTI5YTQ0NTE1MzM3NmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfw5eCUIo6JHBVdLOqOLeYpqKeBg
mjp32Rq20yDS16dJUFhtGWoKGu672KZ51X85sdCFdjIHzjaN8eKJMygFA23okDl/
6KRlSEaLGG/bTNrUqfWb6ehAPU8jDvqC0Jei8R3/wo10eQu5agCTxkA8OOpFcYZS
4pERpb3vRjd8oaGCYldbeRC8S5ot9sqks9O7AyrKV/Z8nZVIk0l517X/kupxFb0u
A3KxCNLhli7FBsWdIScAmz5LpwTGouwkwYS7ht58Tdw5oyUCdPy/CTNonnQjqurW
EAfppmjm3wOAOVwW0PWu3ySfV/5u5vVlAj7Cm3ADGE1YbVt9DnAcjvwRJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaSDkRt1iSvIDNQ2aUppEUVM3buMB8GA1UdIwQY
MBaAFIkPP6sjScAbGsj9C5IcYDGM4YTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVE4X3F5Tkp3QnNheVAwTGtoeGdNWXpoaE5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xY2UzZTMtYzg1OS00YjcxLWI2ZDIt
OTM1OWQ4ZGUyOTc1LzEvaVE4X3F5Tkp3QnNheVAwTGtoeGdNWXpoaE5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8xY2UzZTMtYzg1OS00YjcxLWI2ZDItOTM1OWQ4ZGUyOTc1
LzEvaVE4X3F5Tkp3QnNheVAwTGtoeGdNWXpoaE5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/qXGHFt
Mhu9yuD6NeDpS0Wq0iO+8uDmOHBYEr21u/BRdcqZNDqP1WkUnKvT9QeOJbGVDghi
JIImRsnJFOSIQlULztHyIaOcuenFvBToHahq887ehQWOXfBQNYR1hXeBHevSgU3a
iwcN3cQBw4418FZ9IWPRHowdmoiGwluCAEqnVCRgxskW4nH7/0Gqj4z5jMbUqEqQ
H0ickdcmRa1TZcWUSWv9463CXu7t9Du0ThJLMEXyg1NdU/bNxDHDldyBo43hJW26
FQxAjU157LnMpz8EyGh4Aix5dktjeX5rKzoROaVl6EoREtKQuRvW8W45V+WpI3aQ
20+zyax8CaW6Tg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:39:52 2025 by rpki-client