Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
File: I-RRZMVy7d5d8lORfMEqLf05i5c.mft (raw, json)
Hash identifier: vz8qzQuVInBAsByWTFdDqGVJU3TZQhssajgjhU07cCg=
Subject key identifier: 98:7E:CF:14:FD:C8:CF:BD:B4:9F:38:F8:3F:BC:24:90:5A:C6:E6:2C
Authority key identifier: 23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
Certificate issuer: /CN=23e45164c572edde5df253917cc12a2dfd398b97
Certificate serial: 01987D8B349805ECE6816E36A68EF5363DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
Manifest number: 06EC
Signing time: Wed 06 Aug 2025 04:02:11 +0000
Manifest this update: Wed 06 Aug 2025 04:02:11 +0000
Manifest next update: Thu 07 Aug 2025 04:02:11 +0000
Files and hashes: 1: I-RRZMVy7d5d8lORfMEqLf05i5c.crl (hash: 4PaMpQZSlbIi09dngroMyMr97wF6fFu4rKH++EvmWp0=)
2: Qf0cAOk73br7c02Yp4LiYn6tSvI.roa (hash: Uq615z1vQ76UBbAOWh8ANumqrOuVi1i2JY2ord8ybMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:34:98:05:ec:e6:81:6e:36:a6:8e:f5:36:3d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e45164c572edde5df253917cc12a2dfd398b97
Validity
Not Before: Aug 6 04:02:11 2025 GMT
Not After : Aug 7 04:02:11 2025 GMT
Subject: CN=987ecf14fdc8cfbdb49f38f83fbc24905ac6e62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:73:3e:89:33:09:72:c5:f6:22:b2:84:a1:
69:ac:7e:23:fe:a6:66:00:3f:a0:16:0b:d9:98:2b:
61:4f:4a:ab:99:3e:0c:e6:8d:79:b5:6a:5d:53:a1:
41:af:c9:6c:66:dc:0e:89:6e:eb:32:07:6d:53:9f:
c2:17:df:38:72:92:a8:ce:59:83:73:b9:f2:f5:f2:
89:e6:df:fc:a1:18:2f:34:46:94:64:e8:bb:d7:7f:
f8:2d:fc:04:6c:32:a1:87:48:72:5e:e7:5f:f9:f6:
fd:59:20:ab:34:93:25:4d:ef:b9:4f:de:6b:15:bd:
8a:dc:56:f5:2c:6d:a9:54:16:24:98:12:64:e9:54:
b3:c0:b0:38:62:ef:6d:ef:e3:d6:dd:90:ca:de:56:
ad:4f:e6:e6:aa:62:4a:79:68:24:24:dd:32:f3:da:
b8:d1:60:ec:21:46:e4:12:3b:fe:c9:ac:b2:7e:66:
55:51:0b:66:ec:a0:a5:07:d1:d4:c1:46:43:1d:b8:
34:44:e9:05:81:1e:ac:8e:00:d2:3f:4d:32:87:81:
4b:45:9c:56:27:96:db:4e:e1:ad:cc:b9:32:88:ef:
06:81:d3:b9:d3:55:78:7e:95:79:1d:f8:69:1f:e0:
4d:81:78:c4:45:c0:b8:d4:d9:eb:ca:60:82:4d:e4:
aa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7E:CF:14:FD:C8:CF:BD:B4:9F:38:F8:3F:BC:24:90:5A:C6:E6:2C
X509v3 Authority Key Identifier:
keyid:23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a7:39:a6:c9:e5:5d:da:84:6a:1b:a7:a0:e7:ae:01:a2:9a:
ec:dd:36:0f:bb:19:5f:f7:4d:1e:e9:43:d8:44:4a:22:6d:dd:
37:75:24:8f:c0:c3:4f:9e:86:60:8c:6f:19:db:f4:13:87:2d:
ef:6a:94:99:95:0c:bd:42:1c:27:22:d2:91:a1:ae:38:6c:12:
12:86:0d:07:da:23:06:45:ac:2c:da:fb:1f:65:42:19:77:91:
64:77:26:fe:61:d3:31:2d:2b:e9:0b:53:3b:f8:44:80:c0:8a:
48:f3:ba:7c:4c:47:ca:5f:77:99:d4:0c:8d:5c:49:20:51:75:
b0:da:f8:b8:11:a0:b7:2e:f8:48:38:f4:d5:ef:a8:f2:a0:66:
53:e8:c1:6a:0b:b8:fc:6a:b2:13:c5:13:9d:ae:b6:e3:ed:6b:
35:5d:6f:8b:0c:b2:82:95:60:29:92:8d:80:29:d7:48:bd:e9:
70:52:55:88:e9:ac:d1:56:0a:13:bf:4b:b4:6c:0c:9f:f6:48:
12:f0:f9:21:14:70:1a:e4:2a:30:fa:1d:e9:76:de:68:a6:75:
99:bb:f3:00:c5:16:ed:b8:2c:ed:6d:47:62:de:95:fb:b5:d2:
6f:ac:87:c1:b6:af:a8:ee:2b:50:9a:9a:e4:52:69:33:76:c5:
f9:e6:3b:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9izSYBezmgW42po71Nj3OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZTQ1MTY0YzU3MmVkZGU1ZGYyNTM5MTdjYzEyYTJkZmQz
OThiOTcwHhcNMjUwODA2MDQwMjExWhcNMjUwODA3MDQwMjExWjAzMTEwLwYDVQQD
Eyg5ODdlY2YxNGZkYzhjZmJkYjQ5ZjM4ZjgzZmJjMjQ5MDVhYzZlNjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yBzPokzCXLF9iKyhKFprH4j/qZm
AD+gFgvZmCthT0qrmT4M5o15tWpdU6FBr8lsZtwOiW7rMgdtU5/CF984cpKozlmD
c7ny9fKJ5t/8oRgvNEaUZOi713/4LfwEbDKhh0hyXudf+fb9WSCrNJMlTe+5T95r
Fb2K3Fb1LG2pVBYkmBJk6VSzwLA4Yu9t7+PW3ZDK3latT+bmqmJKeWgkJN0y89q4
0WDsIUbkEjv+yayyfmZVUQtm7KClB9HUwUZDHbg0ROkFgR6sjgDSP00yh4FLRZxW
J5bbTuGtzLkyiO8GgdO501V4fpV5HfhpH+BNgXjERcC41NnrymCCTeSqVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJh+zxT9yM+9tJ84+D+8JJBaxuYsMB8GA1UdIwQY
MBaAFCPkUWTFcu3eXfJTkXzBKi39OYuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1SUlpNVnk3ZDVkOGxPUmZNRXFMZjA1aTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82OGE0YjItNTg5NC00N2M1LWJlMDEt
NjZhYTJhMjMyMzllLzEvSS1SUlpNVnk3ZDVkOGxPUmZNRXFMZjA1aTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi82OGE0YjItNTg5NC00N2M1LWJlMDEtNjZhYTJhMjMyMzll
LzEvSS1SUlpNVnk3ZDVkOGxPUmZNRXFMZjA1aTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqc5psnl
XdqEahunoOeuAaKa7N02D7sZX/dNHulD2ERKIm3dN3Ukj8DDT56GYIxvGdv0E4ct
72qUmZUMvUIcJyLSkaGuOGwSEoYNB9ojBkWsLNr7H2VCGXeRZHcm/mHTMS0r6QtT
O/hEgMCKSPO6fExHyl93mdQMjVxJIFF1sNr4uBGgty74SDj01e+o8qBmU+jBagu4
/GqyE8UTna624+1rNV1viwyygpVgKZKNgCnXSL3pcFJViOms0VYKE79LtGwMn/ZI
EvD5IRRwGuQqMPod6XbeaKZ1mbvzAMUW7bgs7W1HYt6V+7XSb6yHwbavqO4rUJqa
5FJpM3bF+eY7Og==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:59:05 2025 by rpki-client