Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json)
Hash identifier: CZ+3j4uqeqBMj+dHifplWERpfJQFr1RngKFpX7T6dfo=
Subject key identifier: A6:52:E5:CE:77:31:FB:53:9C:51:C7:93:FB:4E:AE:CB:6B:5B:D6:D0
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 01989F036A46C982794C76C8916CF711288B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
Manifest number: 162C
Signing time: Tue 12 Aug 2025 16:00:57 +0000
Manifest this update: Tue 12 Aug 2025 16:00:57 +0000
Manifest next update: Wed 13 Aug 2025 16:00:57 +0000
Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: iHiHkIveODYMfPdmuBtI3sQdGgVrvKRUwwOE+Y3cT00=)
2: ceDg72YenqK4_dFvq8QBAcGglOc.roa (hash: Zws7AOUBGinLUnjZoVBw7x3JkyX35Jt03arL9swrd5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:6a:46:c9:82:79:4c:76:c8:91:6c:f7:11:28:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Aug 12 16:00:57 2025 GMT
Not After : Aug 13 16:00:57 2025 GMT
Subject: CN=a652e5ce7731fb539c51c793fb4eaecb6b5bd6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:bb:5c:d1:f0:96:c8:4a:f2:58:ca:be:48:
89:29:e0:78:2d:a3:94:3b:05:fe:98:f5:4c:31:39:
bd:91:e0:f8:22:be:14:86:e4:f3:64:22:39:9b:49:
d4:2a:cd:b9:6b:e5:3f:ff:9a:fd:5a:c7:3d:33:37:
d5:13:ec:9d:a1:40:f6:39:8a:a3:44:11:e3:c2:c3:
eb:91:9c:40:6e:cf:88:44:0c:d1:15:05:9f:29:26:
83:c8:80:07:e0:e6:47:73:cb:4d:e9:82:fd:b7:98:
d6:fa:0e:72:b5:fe:92:68:fb:f7:a2:50:2c:58:21:
0c:30:b5:27:c7:3a:18:43:83:bd:f9:b1:63:b2:af:
70:61:54:40:a6:4f:1d:5d:f4:ee:68:10:6a:ad:5f:
c1:c8:6a:e1:24:d2:af:18:59:2a:e6:a9:54:fa:e8:
b8:2f:d2:d0:46:14:76:1e:01:f0:27:11:9d:50:d6:
25:dd:09:01:27:97:b2:0f:4c:be:ee:5e:8a:94:6f:
b8:77:da:79:ea:31:41:cf:6f:3a:83:b2:1c:4e:03:
71:02:6c:6f:c4:6e:ee:95:15:a4:7e:c5:5c:97:3a:
9f:6d:a8:f5:d3:fb:5d:87:f7:87:58:c1:ac:85:2c:
64:b3:0e:8e:b6:4f:1b:b6:75:87:de:ba:f7:a2:3c:
f8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:52:E5:CE:77:31:FB:53:9C:51:C7:93:FB:4E:AE:CB:6B:5B:D6:D0
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:89:23:1c:8b:6f:50:cc:49:3a:5c:53:ab:15:17:0c:56:fd:
fe:25:77:66:de:fa:cc:a6:00:db:f1:9d:43:e7:4b:f3:98:92:
16:a1:3f:d2:df:b8:a7:6e:6b:2b:43:ad:aa:0e:32:89:2c:3b:
13:c4:dc:76:72:38:5e:13:a9:79:fb:ec:db:73:37:57:e7:7f:
a4:10:e4:43:c6:59:cc:09:05:5e:1c:8a:ee:e8:bd:92:6a:99:
29:35:19:d6:f2:95:4a:45:02:8d:45:66:71:b4:4a:21:6e:2f:
b0:46:de:8d:73:27:cb:78:3e:a5:24:b0:69:64:a5:ca:65:5c:
73:f9:9d:75:b9:f1:5d:58:06:a8:23:eb:52:f3:78:ca:13:6a:
31:2b:9a:bd:58:0c:08:91:2d:39:c8:23:36:cc:6e:ac:3c:aa:
a1:f4:f4:7f:b0:45:03:25:bd:b7:93:7a:4f:84:5e:4d:e6:84:
2c:d5:a7:84:86:5e:37:88:08:05:62:b2:6b:33:18:e2:23:cb:
d0:bf:bf:9f:44:f8:87:d0:a2:7d:ba:4b:b9:59:b3:45:fc:e0:
62:96:8c:ec:ea:32:7f:12:e8:c0:40:04:66:5a:1d:72:2f:a2:
4f:7a:8b:39:60:45:ef:da:50:df:9f:95:0b:1d:54:db:ef:af:
b6:4d:a4:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifA2pGyYJ5THbIkWz3ESiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MmMyYjczMDAwNDA2ODI0ZGZiYzdhZTM4ODZlYjc4Njdm
OGVjNmUwHhcNMjUwODEyMTYwMDU3WhcNMjUwODEzMTYwMDU3WjAzMTEwLwYDVQQD
EyhhNjUyZTVjZTc3MzFmYjUzOWM1MWM3OTNmYjRlYWVjYjZiNWJkNmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSq7XNHwlshK8ljKvkiJKeB4LaOU
OwX+mPVMMTm9keD4Ir4UhuTzZCI5m0nUKs25a+U//5r9Wsc9MzfVE+ydoUD2OYqj
RBHjwsPrkZxAbs+IRAzRFQWfKSaDyIAH4OZHc8tN6YL9t5jW+g5ytf6SaPv3olAs
WCEMMLUnxzoYQ4O9+bFjsq9wYVRApk8dXfTuaBBqrV/ByGrhJNKvGFkq5qlU+ui4
L9LQRhR2HgHwJxGdUNYl3QkBJ5eyD0y+7l6KlG+4d9p56jFBz286g7IcTgNxAmxv
xG7ulRWkfsVclzqfbaj10/tdh/eHWMGshSxksw6Otk8btnWH3rr3ojz4NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZS5c53MftTnFHHk/tOrstrW9bQMB8GA1UdIwQY
MBaAFPYsK3MABAaCTfvHrjiG63hn+OxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYt
NTZlYmY4MjlkNmIyLzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYtNTZlYmY4MjlkNmIy
LzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYkjHItv
UMxJOlxTqxUXDFb9/iV3Zt76zKYA2/GdQ+dL85iSFqE/0t+4p25rK0Otqg4yiSw7
E8TcdnI4XhOpefvs23M3V+d/pBDkQ8ZZzAkFXhyK7ui9kmqZKTUZ1vKVSkUCjUVm
cbRKIW4vsEbejXMny3g+pSSwaWSlymVcc/mddbnxXVgGqCPrUvN4yhNqMSuavVgM
CJEtOcgjNsxurDyqofT0f7BFAyW9t5N6T4ReTeaELNWnhIZeN4gIBWKyazMY4iPL
0L+/n0T4h9CifbpLuVmzRfzgYpaM7OoyfxLowEAEZlodci+iT3qLOWBF79pQ35+V
Cx1U2++vtk2kdQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:21 2025 by rpki-client