Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
File: I67pTQ__bGx1KmlC_6lirjfH5rY.mft (raw, json)
Hash identifier: E1k8RQj83sVYDcEC321S7V95w9Maow3cadlW8tw0XvY=
Subject key identifier: 4E:29:E1:D1:5A:D4:6D:19:09:DE:C9:E9:CD:DF:90:D3:D0:85:14:E4
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial: 01988B0EB9A755B44CFC48CFB499EA6B96C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 19:00:54 +0000
Manifest this update: Fri 08 Aug 2025 19:00:54 +0000
Manifest next update: Sat 09 Aug 2025 19:00:54 +0000
Files and hashes: 1: I67pTQ__bGx1KmlC_6lirjfH5rY.crl (hash: aVvMoWXbwIwuXRiOkn5QfG1xkgRX/nl7KWv1/PYEP4I=)
2: gR0LYM6QGI-qsid_nSKtkxsGl7k.roa (hash: ZNyhf/gNov+ZA8ZlWmnXcmM+r4ht/hEtiegrCZhA7GA=)
3: s_AzbY_4r2Y_-4vfgCGonUFbZoY.roa (hash: HgaSiRleH54HgG93gpFtFR8yZx0H4YCH5wCdvkPpECU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:b9:a7:55:b4:4c:fc:48:cf:b4:99:ea:6b:96:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Validity
Not Before: Aug 8 19:00:54 2025 GMT
Not After : Aug 9 19:00:54 2025 GMT
Subject: CN=4e29e1d15ad46d1909dec9e9cddf90d3d08514e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:14:43:ae:65:7d:f1:bd:34:2f:d4:b6:2c:
de:77:9e:4d:4d:c2:50:71:28:ec:82:e6:5a:e9:5e:
21:ee:2a:a1:71:ce:19:91:e9:b2:0b:5b:1a:1a:71:
20:42:1c:1b:22:7b:b9:d2:9d:94:83:b3:80:32:3b:
e5:9f:4c:36:07:b7:2e:ec:cf:e6:c1:78:fc:c1:1f:
e5:c0:2e:54:19:ba:56:f2:ee:84:43:85:f6:6d:37:
f0:74:37:ab:0f:cc:4d:94:6e:24:c5:a5:34:ea:36:
45:73:12:3f:bf:2e:17:41:90:76:29:c6:1f:a2:91:
73:ff:77:1e:c0:a7:6c:1a:1f:54:49:50:99:8b:79:
57:d0:62:e1:b9:51:5f:36:2b:7c:55:f8:7b:dd:ea:
60:b3:67:3d:cc:d1:96:3c:86:61:65:85:58:64:9c:
df:2c:73:34:31:3e:8f:cb:c1:b7:c1:06:73:0b:57:
9a:cc:6d:69:a6:ee:86:0a:4d:ec:91:f9:8d:93:33:
7f:9c:fc:84:74:f8:04:21:cd:c2:7b:a2:09:b5:cd:
2d:19:5a:fc:ed:5d:70:7c:40:28:62:7c:bc:d9:29:
87:4d:4d:c1:2d:03:14:b0:69:a7:d2:5c:ab:5c:b8:
1f:35:73:3e:8d:f2:fa:cc:c1:80:4c:dd:6b:cd:7a:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:29:E1:D1:5A:D4:6D:19:09:DE:C9:E9:CD:DF:90:D3:D0:85:14:E4
X509v3 Authority Key Identifier:
keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:32:98:25:be:69:5d:db:31:52:40:26:1a:d5:86:d4:66:52:
9b:d6:ac:1c:78:b2:8b:11:e8:c3:ec:12:d4:b8:bc:75:d2:2a:
9d:8e:9c:6b:58:cb:9d:4d:ff:48:e4:11:0f:71:63:8a:bd:1f:
89:13:b7:fa:95:b1:27:c4:19:10:0d:29:f7:d9:47:a9:9d:58:
72:9a:9a:bc:a5:4b:bd:7a:a7:92:fa:3f:7d:f7:b0:1e:86:67:
58:6a:bb:5d:11:37:09:d9:6c:41:49:a1:63:7b:5c:58:5b:1a:
af:c7:b4:64:bc:b7:2a:70:66:20:06:9d:82:03:02:df:d4:9b:
b0:98:16:94:78:51:eb:d3:4b:f7:72:f9:1d:73:b0:b7:55:f2:
d9:ab:61:a9:7f:a7:68:09:1d:cb:55:88:cd:be:9e:30:09:a1:
bd:90:64:36:00:1e:9a:87:44:89:47:3f:1f:80:ba:00:ce:9b:
be:ef:64:04:fb:8e:4a:b9:77:3e:44:dc:66:10:ab:c2:1f:70:
ea:80:9b:0e:e2:7e:57:78:82:9c:c1:83:0a:f7:53:7f:30:60:
44:56:63:57:f1:f0:08:7b:83:80:50:c1:73:87:b1:81:0c:50:
53:53:37:a1:81:cd:46:08:9a:3c:41:82:39:bb:0f:96:5b:47:
01:03:5a:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLDrmnVbRM/EjPtJnqa5bIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYWVlOTRkMGZmZjZjNmM3NTJhNjk0MmZmYTk2MmFlMzdj
N2U2YjYwHhcNMjUwODA4MTkwMDU0WhcNMjUwODA5MTkwMDU0WjAzMTEwLwYDVQQD
Eyg0ZTI5ZTFkMTVhZDQ2ZDE5MDlkZWM5ZTljZGRmOTBkM2QwODUxNGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthkUQ65lffG9NC/Utized55NTcJQ
cSjsguZa6V4h7iqhcc4ZkemyC1saGnEgQhwbInu50p2Ug7OAMjvln0w2B7cu7M/m
wXj8wR/lwC5UGbpW8u6EQ4X2bTfwdDerD8xNlG4kxaU06jZFcxI/vy4XQZB2KcYf
opFz/3cewKdsGh9USVCZi3lX0GLhuVFfNit8Vfh73epgs2c9zNGWPIZhZYVYZJzf
LHM0MT6Py8G3wQZzC1eazG1ppu6GCk3skfmNkzN/nPyEdPgEIc3Ce6IJtc0tGVr8
7V1wfEAoYny82SmHTU3BLQMUsGmn0lyrXLgfNXM+jfL6zMGATN1rzXoLuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4p4dFa1G0ZCd7J6c3fkNPQhRTkMB8GA1UdIwQY
MBaAFCOu6U0P/2xsdSppQv+pYq43x+a2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNzAyNjItZjg3Yy00MTI2LWFmODUt
YTMxODUzZTY5OTdhLzEvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kNzAyNjItZjg3Yy00MTI2LWFmODUtYTMxODUzZTY5OTdh
LzEvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTKYJb5p
XdsxUkAmGtWG1GZSm9asHHiyixHow+wS1Li8ddIqnY6ca1jLnU3/SOQRD3Fjir0f
iRO3+pWxJ8QZEA0p99lHqZ1YcpqavKVLvXqnkvo/ffewHoZnWGq7XRE3CdlsQUmh
Y3tcWFsar8e0ZLy3KnBmIAadggMC39SbsJgWlHhR69NL93L5HXOwt1Xy2athqX+n
aAkdy1WIzb6eMAmhvZBkNgAemodEiUc/H4C6AM6bvu9kBPuOSrl3PkTcZhCrwh9w
6oCbDuJ+V3iCnMGDCvdTfzBgRFZjV/HwCHuDgFDBc4exgQxQU1M3oYHNRgiaPEGC
ObsPlltHAQNapw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:08:35 2025 by rpki-client