Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
File: 9IOBPbTT97DwLDH4W1JDww9F4lI.mft (raw, json)
Hash identifier: RoLmhItzziM1lBQv+dphLpNKG/AjSACQvc7MVxI6RLw=
Subject key identifier: F6:80:C4:6E:DE:B7:B0:CB:1D:E9:66:04:E5:24:C4:FF:63:A6:55:31
Authority key identifier: F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
Certificate issuer: /CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Certificate serial: 01987B9C2940A01A6F624E5CB3CA6CFED10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
Manifest number: 1618
Signing time: Tue 05 Aug 2025 19:01:28 +0000
Manifest this update: Tue 05 Aug 2025 19:01:28 +0000
Manifest next update: Wed 06 Aug 2025 19:01:28 +0000
Files and hashes: 1: 9IOBPbTT97DwLDH4W1JDww9F4lI.crl (hash: 69Y2uDgDBGw+AEHDSxv7Z+5SeKJUmHS39IoR4Qj4BCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:29:40:a0:1a:6f:62:4e:5c:b3:ca:6c:fe:d1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Validity
Not Before: Aug 5 19:01:28 2025 GMT
Not After : Aug 6 19:01:28 2025 GMT
Subject: CN=f680c46edeb7b0cb1de96604e524c4ff63a65531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bc:b8:86:36:87:de:41:55:1d:db:45:bc:e1:
e5:7a:9e:6c:4a:d4:0f:2d:83:6c:ca:a7:e7:48:a8:
6b:60:2e:26:24:f9:2b:2e:e2:d2:b0:f8:33:94:80:
16:42:8f:b9:1a:ef:a4:05:3c:89:0a:0f:6e:f1:0f:
b8:fc:ce:ae:cb:64:fc:95:e0:d1:42:f9:5a:d7:aa:
cd:3d:bb:23:a7:d3:ea:06:cd:1f:52:86:c1:13:39:
b0:54:cf:56:08:40:83:a7:74:f1:0d:b0:ad:49:2a:
33:66:73:67:c0:38:bd:56:6c:bf:bc:dc:99:57:c7:
50:c1:3a:42:42:b3:cd:f3:95:45:61:95:33:4f:d1:
28:82:b7:34:10:ce:29:1a:5c:6a:fd:ea:fc:3e:70:
92:2e:ab:61:d7:23:9e:c5:f8:e1:d2:df:f5:a0:0f:
3c:7c:ad:66:c4:d6:a9:b0:3d:70:6c:97:ca:69:0f:
f6:42:03:04:27:3d:23:41:4e:d2:33:3b:3e:d2:c5:
1f:75:51:d7:93:d6:f9:44:52:71:18:3e:ba:41:80:
31:46:21:f7:6e:8a:ff:18:77:e4:b2:93:a1:3b:78:
cb:c0:fc:03:78:ec:f4:9d:ec:64:90:40:99:2a:95:
c8:ed:d4:e1:24:b7:03:94:98:06:85:40:e7:90:d8:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:80:C4:6E:DE:B7:B0:CB:1D:E9:66:04:E5:24:C4:FF:63:A6:55:31
X509v3 Authority Key Identifier:
keyid:F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ac:0f:b1:63:b6:2d:3d:ae:c7:b7:27:13:f4:c2:6f:11:af:
82:ff:29:e7:11:d9:3c:fd:37:4f:e5:7a:78:29:c4:1c:4e:82:
1d:db:1d:73:40:22:7e:ca:cd:34:a5:34:a4:35:07:0a:ed:e3:
72:f8:5d:31:64:4f:7c:e0:a9:52:b1:18:3c:e1:4c:bb:25:d9:
e6:f5:fb:d8:66:b3:18:a6:2a:8f:9f:65:e5:07:be:f0:63:09:
9f:e8:92:bb:ce:84:6a:b1:5c:ea:04:73:8d:db:4c:a6:bd:60:
89:42:58:58:45:b9:ef:2b:aa:e1:78:d5:5c:b3:25:09:27:e1:
dd:c6:92:4d:dd:63:ad:ef:64:7a:36:20:72:90:e4:25:80:21:
a9:69:ae:5a:a8:03:b8:25:8e:f5:ff:5f:f3:c5:2e:b6:80:b1:
3a:5e:1a:50:cb:58:71:69:50:9d:5b:f5:d4:d0:77:d8:15:8e:
a3:d9:78:52:9f:c1:d3:36:1e:b2:dd:86:cd:f2:e1:fc:c8:ae:
ad:94:5e:ac:13:c6:fd:b9:34:26:ee:2c:84:4e:d0:fc:aa:d3:
14:24:07:cd:44:45:fc:34:7c:a4:fe:53:12:e4:0c:63:b6:b9:
5d:64:dc:34:f7:2a:1f:7c:5e:c0:0c:89:43:bc:ed:93:76:b2:
8e:8e:09:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nClAoBpvYk5cs8ps/tELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODM4MTNkYjRkM2Y3YjBmMDJjMzFmODViNTI0M2MzMGY0
NWUyNTIwHhcNMjUwODA1MTkwMTI4WhcNMjUwODA2MTkwMTI4WjAzMTEwLwYDVQQD
EyhmNjgwYzQ2ZWRlYjdiMGNiMWRlOTY2MDRlNTI0YzRmZjYzYTY1NTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhby4hjaH3kFVHdtFvOHlep5sStQP
LYNsyqfnSKhrYC4mJPkrLuLSsPgzlIAWQo+5Gu+kBTyJCg9u8Q+4/M6uy2T8leDR
Qvla16rNPbsjp9PqBs0fUobBEzmwVM9WCECDp3TxDbCtSSozZnNnwDi9Vmy/vNyZ
V8dQwTpCQrPN85VFYZUzT9Eogrc0EM4pGlxq/er8PnCSLqth1yOexfjh0t/1oA88
fK1mxNapsD1wbJfKaQ/2QgMEJz0jQU7SMzs+0sUfdVHXk9b5RFJxGD66QYAxRiH3
bor/GHfkspOhO3jLwPwDeOz0nexkkECZKpXI7dThJLcDlJgGhUDnkNhDlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaAxG7et7DLHelmBOUkxP9jplUxMB8GA1UdIwQY
MBaAFPSDgT200/ew8Cwx+FtSQ8MPReJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mZDJhNzMtMjE1Ny00NmNmLTk4MWEt
ZTcxOGM4NDNhMjk0LzEvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mZDJhNzMtMjE1Ny00NmNmLTk4MWEtZTcxOGM4NDNhMjk0
LzEvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6wPsWO2
LT2ux7cnE/TCbxGvgv8p5xHZPP03T+V6eCnEHE6CHdsdc0AifsrNNKU0pDUHCu3j
cvhdMWRPfOCpUrEYPOFMuyXZ5vX72GazGKYqj59l5Qe+8GMJn+iSu86EarFc6gRz
jdtMpr1giUJYWEW57yuq4XjVXLMlCSfh3caSTd1jre9kejYgcpDkJYAhqWmuWqgD
uCWO9f9f88UutoCxOl4aUMtYcWlQnVv11NB32BWOo9l4Up/B0zYest2GzfLh/Miu
rZRerBPG/bk0Ju4shE7Q/KrTFCQHzURF/DR8pP5TEuQMY7a5XWTcNPcqH3xewAyJ
Q7ztk3ayjo4J/Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:04:12 2025 by rpki-client