Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
File: iZJ3h0cqfL3Zff209Tt077O7vFs.mft (raw, json)
Hash identifier: /QXw7Pj6z2X9eOuaJU0Sc4q6RHPj+tr71fauzVg1T/k=
Subject key identifier: 18:14:E2:10:74:28:78:98:94:53:E2:7C:BA:04:62:E0:01:9E:E7:91
Authority key identifier: 89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
Certificate issuer: /CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Certificate serial: 01987CE59E83438561C5F66C20B299534D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
Manifest number: 114C
Signing time: Wed 06 Aug 2025 01:01:19 +0000
Manifest this update: Wed 06 Aug 2025 01:01:19 +0000
Manifest next update: Thu 07 Aug 2025 01:01:19 +0000
Files and hashes: 1: iZJ3h0cqfL3Zff209Tt077O7vFs.crl (hash: W5KZJjCCAPfZrM5WG+WX8ogqWodZ4pVl/Kbx+nQhyiI=)
2: k_0z9yImMkkx7Q7hZaLKVoTRO74.roa (hash: bY1XGYbefYoSOVyj59OiTxL9N9Rlyyr/sbaOhEye3EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:9e:83:43:85:61:c5:f6:6c:20:b2:99:53:4d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Validity
Not Before: Aug 6 01:01:19 2025 GMT
Not After : Aug 7 01:01:19 2025 GMT
Subject: CN=1814e210742878989453e27cba0462e0019ee791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:01:ed:24:c3:19:85:a1:a4:50:4a:55:6c:
c8:1e:3a:af:64:6c:23:44:7c:92:2a:8f:14:71:1f:
b8:aa:c5:0c:ac:49:92:a5:c5:dd:c6:94:f9:e6:32:
c5:b1:49:e1:3e:95:05:17:b7:71:90:04:03:ad:63:
2b:f5:6e:6f:db:0c:69:9b:57:98:ed:71:24:cd:39:
59:be:0e:70:a9:73:2c:f3:a7:37:20:45:ad:91:6d:
8c:f2:87:bd:b1:ff:04:1b:63:51:61:3f:56:fc:e8:
64:1b:84:00:45:4f:4a:f6:c8:52:20:d5:6d:aa:c4:
5b:b6:30:c2:0a:dc:f5:51:3f:dd:c4:89:35:d6:29:
01:6d:4f:03:0b:c0:c2:38:e2:b9:a1:00:d4:f5:26:
e1:33:d1:c8:9e:09:4e:48:92:80:86:de:e5:2d:7d:
37:ec:d4:cf:5f:e7:7f:12:e9:10:26:72:86:77:b9:
5c:2a:3a:6f:08:ee:ea:66:b7:24:cb:d8:5f:50:66:
b5:d0:16:12:61:fa:fd:b1:e7:c1:57:f5:2f:25:50:
d0:09:6c:f0:cf:19:4c:3b:ed:f1:45:f2:12:ed:5a:
38:e8:8a:9d:b6:f3:11:99:2a:1a:69:81:2e:36:ff:
83:22:eb:b5:7a:0c:b7:0e:40:a3:e6:62:e6:4a:3a:
4e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:14:E2:10:74:28:78:98:94:53:E2:7C:BA:04:62:E0:01:9E:E7:91
X509v3 Authority Key Identifier:
keyid:89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:be:a2:29:6c:84:af:58:a8:2a:23:d7:54:30:c3:e5:3d:ed:
12:72:cc:7a:f4:2b:c9:1f:dc:00:46:5f:4e:d6:77:ca:2f:96:
05:fa:a6:0d:56:03:c0:1a:cf:88:7b:00:91:1c:16:b9:ed:e2:
1f:16:1a:fe:00:24:f1:ac:59:9f:cb:09:eb:b6:ac:7d:3c:aa:
c9:13:48:17:af:7f:4e:1b:1c:a1:d1:9c:f9:5b:42:65:5e:6c:
05:6d:95:4e:68:7a:4e:c0:fc:b3:d2:ac:47:37:47:81:39:83:
e4:ee:3e:4a:11:ee:a5:87:b1:f3:57:2b:65:bb:95:4b:b0:51:
a5:58:8e:f2:17:7b:91:ce:da:40:5f:56:83:31:ec:ca:bb:1c:
ce:8a:d9:a4:9c:4a:32:08:ca:e1:ff:62:e0:22:a3:2f:0b:64:
5f:ec:5c:be:cc:d0:74:e9:19:ad:16:de:27:96:c9:ca:b7:9d:
1b:fd:54:22:8e:7d:de:5d:69:68:07:01:a2:fa:5e:dd:1a:7a:
b1:17:db:18:e0:93:e4:d5:a6:4e:e1:81:ef:ab:a9:a8:22:55:
ab:fa:6b:57:42:5c:23:f8:6c:d3:da:3b:a7:b5:3d:58:05:bc:
2e:6d:6e:60:a2:89:ce:9d:3b:f9:07:eb:56:c7:75:25:fc:b0:
74:71:d1:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh85Z6DQ4VhxfZsILKZU00wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5OTI3Nzg3NDcyYTdjYmRkOTdkZmRiNGY1M2I3NGVmYjNi
YmJjNWIwHhcNMjUwODA2MDEwMTE5WhcNMjUwODA3MDEwMTE5WjAzMTEwLwYDVQQD
EygxODE0ZTIxMDc0Mjg3ODk4OTQ1M2UyN2NiYTA0NjJlMDAxOWVlNzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse8B7STDGYWhpFBKVWzIHjqvZGwj
RHySKo8UcR+4qsUMrEmSpcXdxpT55jLFsUnhPpUFF7dxkAQDrWMr9W5v2wxpm1eY
7XEkzTlZvg5wqXMs86c3IEWtkW2M8oe9sf8EG2NRYT9W/OhkG4QARU9K9shSINVt
qsRbtjDCCtz1UT/dxIk11ikBbU8DC8DCOOK5oQDU9SbhM9HInglOSJKAht7lLX03
7NTPX+d/EukQJnKGd7lcKjpvCO7qZrcky9hfUGa10BYSYfr9sefBV/UvJVDQCWzw
zxlMO+3xRfIS7Vo46IqdtvMRmSoaaYEuNv+DIuu1egy3DkCj5mLmSjpO9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgU4hB0KHiYlFPifLoEYuABnueRMB8GA1UdIwQY
MBaAFImSd4dHKny92X39tPU7dO+zu7xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVpKM2gwY3FmTDNaZmYyMDlUdDA3N083dkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kMjBiOGMtOWZhYy00MWY3LTllNzkt
YzQxMDA2MmQ0ZDUyLzEvaVpKM2gwY3FmTDNaZmYyMDlUdDA3N083dkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kMjBiOGMtOWZhYy00MWY3LTllNzktYzQxMDA2MmQ0ZDUy
LzEvaVpKM2gwY3FmTDNaZmYyMDlUdDA3N083dkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWr6iKWyE
r1ioKiPXVDDD5T3tEnLMevQryR/cAEZfTtZ3yi+WBfqmDVYDwBrPiHsAkRwWue3i
HxYa/gAk8axZn8sJ67asfTyqyRNIF69/ThscodGc+VtCZV5sBW2VTmh6TsD8s9Ks
RzdHgTmD5O4+ShHupYex81crZbuVS7BRpViO8hd7kc7aQF9WgzHsyrsczorZpJxK
MgjK4f9i4CKjLwtkX+xcvszQdOkZrRbeJ5bJyredG/1UIo593l1paAcBovpe3Rp6
sRfbGOCT5NWmTuGB76upqCJVq/prV0JcI/hs09o7p7U9WAW8Lm1uYKKJzp07+Qfr
Vsd1JfywdHHRew==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:01:47 2025 by rpki-client