Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File: IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier: 2qewUu2wugmFnT174FBbt4VHapOAOTPZSC0z3DxC89w=
Subject key identifier: 71:EF:C7:8B:61:BA:2C:6A:DD:0C:CE:30:0C:82:16:B1:D9:0E:34:D1
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial: 0198733D12225058AEE5A7F765168A93C143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number: 15A9
Signing time: Mon 04 Aug 2025 04:00:38 +0000
Manifest this update: Mon 04 Aug 2025 04:00:38 +0000
Manifest next update: Tue 05 Aug 2025 04:00:38 +0000
Files and hashes: 1: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: pu9dWlb0rxspWP8UXQk/kyMr1Xf0yZiMzNpRQ4YIGvM=)
2: MOp992QACjCU4CSR_4wEvEmDi9g.roa (hash: dTmvXI6qyvbgdeeHz07O4lgdS1FEoKVIkXmdx9O7lnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:12:22:50:58:ae:e5:a7:f7:65:16:8a:93:c1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Validity
Not Before: Aug 4 04:00:38 2025 GMT
Not After : Aug 5 04:00:38 2025 GMT
Subject: CN=71efc78b61ba2c6add0cce300c8216b1d90e34d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e3:42:5f:08:12:ec:75:c6:c1:e8:c1:0c:f1:
82:bb:bb:5f:b2:78:f0:cd:37:50:b2:0d:ff:b1:c4:
f5:7e:5b:78:43:0c:6e:97:ca:96:65:d4:ee:34:0c:
b3:c5:fe:89:7c:fe:49:d4:3b:80:1e:00:71:9f:d7:
52:e3:6d:f5:d2:b0:75:fa:cd:47:12:fb:4e:9b:41:
7d:8a:c4:8d:b2:a0:22:87:5f:41:97:ea:0b:fd:2b:
4d:51:e3:f1:61:c3:c1:31:f7:bc:99:76:58:44:9e:
aa:1d:e5:67:4c:ba:36:ab:5c:ba:ff:39:8f:09:45:
07:28:26:a5:45:12:6b:5c:81:76:90:33:39:a7:6c:
3b:d1:c4:bb:8a:cb:80:17:da:8a:b5:fe:63:06:e3:
d0:b4:09:cb:34:f5:73:24:d5:1a:29:7a:82:ba:c9:
7a:d9:fd:1d:48:33:b8:9d:0a:0b:88:b1:ac:8f:66:
7d:22:9c:dd:dd:ab:a8:c9:3c:03:7a:5d:5b:50:6d:
a4:a1:6a:90:88:50:6e:68:74:a4:9e:4f:ba:41:a1:
c5:bc:98:8c:9e:fe:06:c3:ea:13:6d:2a:76:73:0d:
db:0d:d9:df:ff:d8:27:00:d1:58:93:fb:44:5d:71:
cd:c0:e6:69:9f:53:03:09:79:77:fd:25:2c:a5:83:
9f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EF:C7:8B:61:BA:2C:6A:DD:0C:CE:30:0C:82:16:B1:D9:0E:34:D1
X509v3 Authority Key Identifier:
keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f0:72:2c:cf:ec:cb:26:16:91:ee:f6:0d:cf:2f:3f:5c:a3:
1f:f1:fa:98:5c:e5:41:e0:d6:23:3c:36:08:83:bb:cd:01:94:
30:f2:eb:f8:c8:39:22:13:9c:a7:b2:25:6b:99:bc:62:02:dc:
b8:d9:11:63:ee:78:69:1c:e2:c4:73:8e:1a:06:e0:b3:00:f4:
69:8e:99:00:85:a4:64:19:b9:b6:65:8e:b6:5e:88:0b:e4:b4:
ee:50:7c:1d:26:21:59:c9:7e:60:df:1f:ce:f1:3b:a3:26:35:
15:66:f2:04:cf:b2:67:6c:08:c7:51:8d:08:82:3d:b2:e6:52:
af:f6:08:4d:23:be:72:38:e9:38:9f:79:d4:f9:e4:2d:86:f7:
2a:16:ff:d2:4d:6f:f4:6c:08:c5:7d:7e:80:b4:2e:36:2c:07:
b6:93:37:f2:71:95:14:19:8d:82:fb:4f:1a:e1:67:29:b1:15:
d9:c9:90:21:93:d0:a1:fe:a8:ec:9e:73:63:1d:69:75:a9:6b:
06:47:ad:f6:fe:7a:49:79:83:d3:88:c8:c1:e5:bc:16:0a:6a:
3e:ab:47:86:94:b4:06:44:a0:ce:a8:49:7d:9c:f0:1c:39:03:
ae:f3:52:3a:ab:a7:fd:f7:96:95:0c:37:ff:57:d1:5b:82:6f:
fb:93:a4:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPRIiUFiu5af3ZRaKk8FDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYjZhMjVmMmY3NDE5MWJlOWVhMGNhOWMxOTE1ZmU3NDVj
ZjU3YzgwHhcNMjUwODA0MDQwMDM4WhcNMjUwODA1MDQwMDM4WjAzMTEwLwYDVQQD
Eyg3MWVmYzc4YjYxYmEyYzZhZGQwY2NlMzAwYzgyMTZiMWQ5MGUzNGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+NCXwgS7HXGwejBDPGCu7tfsnjw
zTdQsg3/scT1flt4Qwxul8qWZdTuNAyzxf6JfP5J1DuAHgBxn9dS42310rB1+s1H
EvtOm0F9isSNsqAih19Bl+oL/StNUePxYcPBMfe8mXZYRJ6qHeVnTLo2q1y6/zmP
CUUHKCalRRJrXIF2kDM5p2w70cS7isuAF9qKtf5jBuPQtAnLNPVzJNUaKXqCusl6
2f0dSDO4nQoLiLGsj2Z9Ipzd3auoyTwDel1bUG2koWqQiFBuaHSknk+6QaHFvJiM
nv4Gw+oTbSp2cw3bDdnf/9gnANFYk/tEXXHNwOZpn1MDCXl3/SUspYOfDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHvx4thuixq3QzOMAyCFrHZDjTRMB8GA1UdIwQY
MBaAFCK2ol8vdBkb6eoMqcGRX+dFz1fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgt
YjkwYTk0MWVhNTFhLzEvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgtYjkwYTk0MWVhNTFh
LzEvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/ByLM/s
yyYWke72Dc8vP1yjH/H6mFzlQeDWIzw2CIO7zQGUMPLr+Mg5IhOcp7Ila5m8YgLc
uNkRY+54aRzixHOOGgbgswD0aY6ZAIWkZBm5tmWOtl6IC+S07lB8HSYhWcl+YN8f
zvE7oyY1FWbyBM+yZ2wIx1GNCII9suZSr/YITSO+cjjpOJ951PnkLYb3Khb/0k1v
9GwIxX1+gLQuNiwHtpM38nGVFBmNgvtPGuFnKbEV2cmQIZPQof6o7J5zYx1pdalr
Bket9v56SXmD04jIweW8FgpqPqtHhpS0BkSgzqhJfZzwHDkDrvNSOqun/feWlQw3
/1fRW4Jv+5Okkw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:58 2025 by rpki-client