Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json)
Hash identifier: UigEBJtfwcYBuFqxnskX38RhdeyKFtfGJR6tRjnGors=
Subject key identifier: 09:F1:09:93:6F:4E:57:91:DC:10:7A:29:C0:DA:06:17:A2:74:FD:3B
Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Certificate serial: 01987374835C61892518CB36442109F476ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
Manifest number: 0161
Signing time: Mon 04 Aug 2025 05:01:12 +0000
Manifest this update: Mon 04 Aug 2025 05:01:12 +0000
Manifest next update: Tue 05 Aug 2025 05:01:12 +0000
Files and hashes: 1: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: y+SgyT2KNx2AwpECPlHul3cobGKNr34t5IHMGfWivno=)
2: b-r28Bu4MGj-UsbsE6JV2xkR_Kg.roa (hash: CYtDxQh2JoY//+IHHkS7DA+4Jm80AdOA6Xho21YVow0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:83:5c:61:89:25:18:cb:36:44:21:09:f4:76:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Validity
Not Before: Aug 4 05:01:12 2025 GMT
Not After : Aug 5 05:01:12 2025 GMT
Subject: CN=09f109936f4e5791dc107a29c0da0617a274fd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:1f:38:3a:f0:2e:82:b2:28:ae:f2:0f:7f:
54:63:77:8b:9e:c4:d6:ba:e0:d7:a6:4e:46:82:f4:
5a:c4:a4:fc:6a:ba:be:a6:5c:f8:4e:e4:6e:fe:5f:
bf:2c:1a:7b:f7:63:15:6f:bb:02:a8:39:9b:34:63:
82:fb:22:0a:0d:19:a8:01:8d:64:f6:cb:25:bd:b6:
22:c4:d5:25:ca:75:28:69:42:98:49:ac:c6:3c:24:
5c:b2:94:c8:94:b1:0d:d9:b4:b3:ae:c9:ab:98:42:
58:33:e7:ff:ab:42:63:05:43:bd:c2:04:bd:72:25:
f7:b4:77:f6:84:d5:7b:d5:3b:47:71:d8:af:0a:fb:
ba:e8:e6:2a:93:c3:13:e5:f1:7f:a6:4f:85:d1:ed:
c8:ea:48:32:2e:4e:30:44:29:0d:9e:bc:73:32:ae:
ef:92:6b:e3:fe:dc:f1:9c:9c:90:80:b6:2c:92:69:
68:57:80:40:24:2f:bc:58:45:f1:44:6a:41:41:8b:
51:4a:70:9c:4c:aa:99:e1:81:6f:b2:94:be:99:80:
b4:76:61:71:a6:40:c7:6e:b1:59:36:58:ad:e3:28:
3f:00:de:59:a2:c0:9c:29:e2:fc:b4:48:70:ba:5d:
94:00:3a:de:e4:7f:4e:c9:36:de:10:86:83:02:ba:
c3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F1:09:93:6F:4E:57:91:DC:10:7A:29:C0:DA:06:17:A2:74:FD:3B
X509v3 Authority Key Identifier:
keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8d:66:7f:1b:4c:86:62:7d:bf:7d:f4:1e:c1:6a:ca:9a:2e:
bd:81:a6:7f:d6:3c:00:58:5b:e2:9e:1b:4f:0b:1d:51:b5:8d:
14:aa:94:5f:92:87:9c:3e:a2:f0:5e:1e:5f:ea:72:c8:e5:ae:
90:ca:e9:89:97:5e:e9:85:31:b3:a6:6e:bd:d3:9d:03:93:6b:
92:09:ce:d9:7d:30:8e:1e:87:60:7e:39:da:3f:2c:b9:50:8e:
cf:29:ee:3c:69:fe:e6:dd:1f:3d:79:46:25:e3:68:de:59:51:
05:2b:f6:29:c1:6e:6c:c9:6d:e2:d5:c8:1e:e0:5f:ae:5d:1c:
7b:29:2f:b1:2f:6b:ed:d2:66:79:66:56:e2:c8:15:2d:77:96:
1e:ac:14:95:f9:f0:61:09:49:bc:61:7c:27:25:71:cf:c5:04:
a8:1e:b9:3c:57:05:35:e1:2a:05:72:7e:47:e1:28:e5:65:94:
fd:d1:6f:3d:2c:7f:2d:cb:ed:a5:02:8c:50:48:a9:cc:be:26:
27:b3:01:0f:8d:53:c1:b0:e3:17:80:32:e8:ee:cb:42:f5:e5:
a7:38:c2:c8:79:14:da:da:14:eb:a9:db:a2:1a:de:be:3f:7c:
62:1f:1b:36:b6:98:4c:68:42:1c:b4:ab:b4:f2:d2:24:79:34:
ca:34:9f:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdINcYYklGMs2RCEJ9HbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzODQ2NzRlYTAwN2ExMjAzMGFjOGQyYmU1NjBkYjIxZjRm
YzBiOTkwHhcNMjUwODA0MDUwMTEyWhcNMjUwODA1MDUwMTEyWjAzMTEwLwYDVQQD
EygwOWYxMDk5MzZmNGU1NzkxZGMxMDdhMjljMGRhMDYxN2EyNzRmZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw0fODrwLoKyKK7yD39UY3eLnsTW
uuDXpk5GgvRaxKT8arq+plz4TuRu/l+/LBp792MVb7sCqDmbNGOC+yIKDRmoAY1k
9sslvbYixNUlynUoaUKYSazGPCRcspTIlLEN2bSzrsmrmEJYM+f/q0JjBUO9wgS9
ciX3tHf2hNV71TtHcdivCvu66OYqk8MT5fF/pk+F0e3I6kgyLk4wRCkNnrxzMq7v
kmvj/tzxnJyQgLYskmloV4BAJC+8WEXxRGpBQYtRSnCcTKqZ4YFvspS+mYC0dmFx
pkDHbrFZNlit4yg/AN5ZosCcKeL8tEhwul2UADre5H9OyTbeEIaDArrDOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnxCZNvTleR3BB6KcDaBheidP07MB8GA1UdIwQY
MBaAFCOEZ06gB6EgMKyNK+Vg2yH0/AuZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YjlhNGMtODAyZC00YjFlLTk0ZmUt
YzhmNTZjMTIyZmVjLzEvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YjlhNGMtODAyZC00YjFlLTk0ZmUtYzhmNTZjMTIyZmVj
LzEvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY41mfxtM
hmJ9v330HsFqypouvYGmf9Y8AFhb4p4bTwsdUbWNFKqUX5KHnD6i8F4eX+pyyOWu
kMrpiZde6YUxs6ZuvdOdA5NrkgnO2X0wjh6HYH452j8suVCOzynuPGn+5t0fPXlG
JeNo3llRBSv2KcFubMlt4tXIHuBfrl0ceykvsS9r7dJmeWZW4sgVLXeWHqwUlfnw
YQlJvGF8JyVxz8UEqB65PFcFNeEqBXJ+R+Eo5WWU/dFvPSx/LcvtpQKMUEipzL4m
J7MBD41TwbDjF4Ay6O7LQvXlpzjCyHkU2toU66nbohrevj98Yh8bNraYTGhCHLSr
tPLSJHk0yjSfQQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:31 2025 by rpki-client