Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: vAbVvmuQlIIDJLf8ZMHHn7ZHb+/jRBNuU/a8sk1CyBo=
Subject key identifier: F8:E2:D4:BC:E5:31:43:66:31:0A:52:C2:95:30:08:D0:9D:E3:5E:3F
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 01987D1C73AAD8B0383D14FE22D6435BB844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 02:01:13 +0000
Manifest this update: Wed 06 Aug 2025 02:01:13 +0000
Manifest next update: Thu 07 Aug 2025 02:01:13 +0000
Files and hashes: 1: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: kUNrDTWFAtTW4bDMlJf5xlWOC4tzm3WmTM8qNzGWoxQ=)
2: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (hash: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:73:aa:d8:b0:38:3d:14:fe:22:d6:43:5b:b8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Aug 6 02:01:13 2025 GMT
Not After : Aug 7 02:01:13 2025 GMT
Subject: CN=f8e2d4bce5314366310a52c2953008d09de35e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2c:12:26:ee:6d:26:5a:d1:26:e7:42:d5:ce:
45:48:ee:53:8f:34:e8:20:ab:cd:47:4f:eb:c8:b8:
46:46:02:ce:dc:fa:ec:1d:31:ef:3a:31:bd:23:79:
11:c2:19:33:47:c3:d0:b7:71:bb:49:26:17:55:98:
66:7c:bf:ec:e5:dc:95:0e:c8:a3:aa:2c:e0:c2:8f:
5d:21:cc:b4:66:db:fd:4d:21:c5:f0:d4:8c:db:fc:
4c:09:0b:20:04:c9:a2:57:18:a8:f7:d7:51:8b:a6:
b8:e7:4e:44:e8:60:db:1a:2a:d9:5d:73:d2:de:bc:
6d:3c:22:d4:97:1d:93:4a:9d:9a:11:af:d0:6b:d9:
fb:70:88:dd:a3:25:c3:99:bd:69:f2:8d:28:aa:c5:
65:7c:66:7e:71:a0:29:2a:a2:c6:83:d9:72:25:31:
ab:2b:64:fd:89:52:36:97:f4:73:6f:1a:e2:91:f8:
4c:a9:15:92:61:7f:37:0c:a7:b0:9f:f5:1a:83:d2:
94:e4:85:7b:01:0d:60:c5:a1:18:0a:54:6e:24:75:
18:ed:02:f1:d3:1e:83:06:74:20:87:12:40:f9:97:
36:e2:52:37:b7:de:c7:8c:21:38:0f:78:3a:ec:d4:
c7:d9:5c:69:b3:60:fb:c6:63:d6:78:3e:75:60:b6:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E2:D4:BC:E5:31:43:66:31:0A:52:C2:95:30:08:D0:9D:E3:5E:3F
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:22:ba:70:44:66:ab:0f:69:84:4d:36:64:60:20:a8:d9:e5:
63:fa:71:26:6f:58:5f:ed:13:b5:bc:cd:21:5e:ac:93:16:58:
bb:62:eb:c0:34:89:83:94:03:6c:23:a9:35:eb:39:86:52:54:
6e:67:ec:b7:8d:76:dc:fa:15:c6:7d:af:88:98:20:d6:cd:62:
3e:22:59:1b:c3:8e:a3:c2:02:a3:57:23:ba:e4:52:2f:9b:d1:
e5:e4:9d:ad:19:5f:42:00:22:53:d9:f4:34:d5:a2:8a:00:36:
7a:33:be:3a:ef:82:4d:bc:85:46:bd:c0:45:a5:bf:f7:71:cd:
c4:92:4b:62:21:ad:ba:0a:0b:6e:5a:45:ca:44:95:04:92:4d:
e0:89:b0:52:fb:9a:d4:6b:f6:f8:af:e1:48:2a:4b:f6:60:c0:
a3:57:a5:3a:01:45:1c:14:16:ca:dd:21:e5:ef:d3:3e:51:68:
fb:b5:1c:28:22:63:03:cb:10:0c:43:fd:40:1f:7e:aa:c3:b4:
40:1e:23:bc:12:83:32:50:46:cb:e7:92:21:01:82:80:07:c1:
5a:45:a0:af:4a:75:ce:f3:c7:fd:e1:09:3d:ae:4d:5b:f1:7e:
d9:80:ef:64:5d:3f:50:f9:8d:28:75:57:f2:f9:0d:39:4d:8f:
3c:75:79:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9HHOq2LA4PRT+ItZDW7hEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNDQ0NzJkMTY5NzM2OWQ4MzJiYTEyNmU1ZTE3MjMyYWNk
NWY1ZjMwHhcNMjUwODA2MDIwMTEzWhcNMjUwODA3MDIwMTEzWjAzMTEwLwYDVQQD
EyhmOGUyZDRiY2U1MzE0MzY2MzEwYTUyYzI5NTMwMDhkMDlkZTM1ZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxywSJu5tJlrRJudC1c5FSO5TjzTo
IKvNR0/ryLhGRgLO3PrsHTHvOjG9I3kRwhkzR8PQt3G7SSYXVZhmfL/s5dyVDsij
qizgwo9dIcy0Ztv9TSHF8NSM2/xMCQsgBMmiVxio99dRi6a4505E6GDbGirZXXPS
3rxtPCLUlx2TSp2aEa/Qa9n7cIjdoyXDmb1p8o0oqsVlfGZ+caApKqLGg9lyJTGr
K2T9iVI2l/RzbxrikfhMqRWSYX83DKewn/Uag9KU5IV7AQ1gxaEYClRuJHUY7QLx
0x6DBnQghxJA+Zc24lI3t97HjCE4D3g67NTH2Vxps2D7xmPWeD51YLb/QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPji1LzlMUNmMQpSwpUwCNCd414/MB8GA1UdIwQY
MBaAFCFERy0WlzadgyuhJuXhcjKs1fXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEt
ODc3ZDMxYzE2MWMzLzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEtODc3ZDMxYzE2MWMz
LzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiK6cERm
qw9phE02ZGAgqNnlY/pxJm9YX+0TtbzNIV6skxZYu2LrwDSJg5QDbCOpNes5hlJU
bmfst4123PoVxn2viJgg1s1iPiJZG8OOo8ICo1cjuuRSL5vR5eSdrRlfQgAiU9n0
NNWiigA2ejO+Ou+CTbyFRr3ARaW/93HNxJJLYiGtugoLblpFykSVBJJN4ImwUvua
1Gv2+K/hSCpL9mDAo1elOgFFHBQWyt0h5e/TPlFo+7UcKCJjA8sQDEP9QB9+qsO0
QB4jvBKDMlBGy+eSIQGCgAfBWkWgr0p1zvPH/eEJPa5NW/F+2YDvZF0/UPmNKHVX
8vkNOU2PPHV59A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:34:34 2025 by rpki-client