Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
File: ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json)
Hash identifier: +B700WxVECph4K38mI+jCm6yWnQDinQ+A6jaZsPSPwU=
Subject key identifier: 74:9D:BF:25:D4:E8:F6:06:2A:AD:21:54:2F:0A:03:36:1F:99:BC:C7
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial: 019874BD7728DAD917BBF4D4A602107B6A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
Manifest number: 0D3F
Signing time: Mon 04 Aug 2025 11:00:30 +0000
Manifest this update: Mon 04 Aug 2025 11:00:30 +0000
Manifest next update: Tue 05 Aug 2025 11:00:30 +0000
Files and hashes: 1: VD1pOY6vP5TwIHzsVFu_IinabUU.roa (hash: cVzGsu9mooBFFczgcbG8J8W2oDgnSi/7QeWcMNjjuWQ=)
2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: bvIUZ8+Er5cRr5oHx1gJTdAIiy+wvrRPETX4pfcuUPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:77:28:da:d9:17:bb:f4:d4:a6:02:10:7b:6a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Validity
Not Before: Aug 4 11:00:30 2025 GMT
Not After : Aug 5 11:00:30 2025 GMT
Subject: CN=749dbf25d4e8f6062aad21542f0a03361f99bcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b8:c1:fe:b0:70:33:25:55:a9:08:de:23:e0:
00:31:b2:38:2e:a5:e2:cb:78:89:21:a4:a5:a9:50:
72:08:db:47:72:35:02:ca:4c:92:ca:7c:13:2a:22:
0d:58:2a:f4:60:8b:5b:4f:00:99:77:77:01:0f:94:
65:c8:a5:00:22:21:7c:aa:24:be:f5:17:fe:66:78:
49:35:51:13:5a:c5:fc:82:b9:8c:f9:31:84:e3:a5:
dd:bd:83:a6:7a:fc:d7:56:9f:45:53:46:fd:97:95:
a3:a5:cc:10:63:01:03:a2:cb:f0:ec:c6:22:42:2a:
2f:3e:e7:f8:41:a3:ab:d7:09:fd:81:64:d9:11:67:
d6:d1:6d:08:95:b5:f1:48:d6:0a:25:f1:3a:ee:6e:
67:86:24:50:48:50:a2:76:79:22:38:d8:98:26:26:
ef:8b:2a:75:ed:95:61:89:2e:55:bc:7b:f2:b6:82:
54:b7:74:fb:15:59:e2:cd:61:45:a4:ba:f1:c9:21:
e3:b5:e5:2b:d3:c9:d4:ac:4b:2d:6c:76:94:e6:46:
0b:49:8c:19:39:4c:ae:3b:d5:9f:ad:ed:3a:92:ad:
38:c7:32:ae:51:9d:bc:c5:b7:af:39:88:f5:ef:66:
74:ca:51:99:ab:49:fc:f4:29:35:53:b8:76:ab:e7:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9D:BF:25:D4:E8:F6:06:2A:AD:21:54:2F:0A:03:36:1F:99:BC:C7
X509v3 Authority Key Identifier:
keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e3:c1:c3:b0:8c:67:dd:bb:d8:c9:9e:30:06:df:41:4d:a2:
b8:61:50:ac:63:4a:55:39:11:e0:8b:d0:7a:57:b4:73:59:60:
10:a2:5f:55:c6:0a:e7:e9:c8:79:92:4e:8c:e4:83:24:9d:54:
cf:05:a0:ce:35:52:4d:fe:2e:a5:4c:cc:a6:77:e8:54:c0:3d:
4a:d4:6c:32:22:df:25:7e:6f:03:17:d7:44:8e:cc:50:4a:7b:
92:5e:3f:47:33:f4:28:94:da:be:3a:fe:cd:c8:48:b6:4f:da:
55:1a:1a:68:97:78:08:64:c8:b8:2f:50:cf:e9:53:c3:7b:b5:
a6:94:53:a3:53:a8:13:34:28:22:d8:9d:3b:a8:fb:73:74:b4:
4d:53:6b:95:89:91:a2:3e:4a:9a:91:b2:49:a7:28:66:d8:74:
06:1a:6b:fc:94:a7:42:ce:6c:18:72:91:dc:91:5b:11:11:f3:
a4:7c:7d:de:5b:3b:7e:e8:a5:24:ed:27:ca:16:74:d6:40:4e:
55:ec:44:45:cf:e1:8f:ca:e4:b5:d6:d8:99:18:9f:84:2e:41:
c5:f0:b6:5a:6a:ff:7e:be:69:d0:7a:8a:01:d3:c5:e5:d3:a3:
b9:24:aa:c2:42:cf:0f:b2:86:7e:9f:be:0e:4a:3a:6f:32:4f:
7f:ba:bd:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0vXco2tkXu/TUpgIQe2qXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMWI3MjliNzVjNWY4YjJlOWQxNThhYTI5NjM5NmQ2ODBi
ZTcwYWQwHhcNMjUwODA0MTEwMDMwWhcNMjUwODA1MTEwMDMwWjAzMTEwLwYDVQQD
Eyg3NDlkYmYyNWQ0ZThmNjA2MmFhZDIxNTQyZjBhMDMzNjFmOTliY2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37jB/rBwMyVVqQjeI+AAMbI4LqXi
y3iJIaSlqVByCNtHcjUCykySynwTKiINWCr0YItbTwCZd3cBD5RlyKUAIiF8qiS+
9Rf+ZnhJNVETWsX8grmM+TGE46XdvYOmevzXVp9FU0b9l5WjpcwQYwEDosvw7MYi
QiovPuf4QaOr1wn9gWTZEWfW0W0IlbXxSNYKJfE67m5nhiRQSFCidnkiONiYJibv
iyp17ZVhiS5VvHvytoJUt3T7FVnizWFFpLrxySHjteUr08nUrEstbHaU5kYLSYwZ
OUyuO9Wfre06kq04xzKuUZ28xbevOYj172Z0ylGZq0n89Ck1U7h2q+ex2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSdvyXU6PYGKq0hVC8KAzYfmbzHMB8GA1UdIwQY
MBaAFIsbcpt1xfiy6dFYqiljltaAvnCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yZGQyNTYtODE0YS00ZmIzLTg1MTUt
NjY4MTQ5MjYzNTM5LzEvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yZGQyNTYtODE0YS00ZmIzLTg1MTUtNjY4MTQ5MjYzNTM5
LzEvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+PBw7CM
Z9272MmeMAbfQU2iuGFQrGNKVTkR4IvQele0c1lgEKJfVcYK5+nIeZJOjOSDJJ1U
zwWgzjVSTf4upUzMpnfoVMA9StRsMiLfJX5vAxfXRI7MUEp7kl4/RzP0KJTavjr+
zchItk/aVRoaaJd4CGTIuC9Qz+lTw3u1ppRTo1OoEzQoItidO6j7c3S0TVNrlYmR
oj5KmpGySacoZth0Bhpr/JSnQs5sGHKR3JFbERHzpHx93ls7fuilJO0nyhZ01kBO
VexERc/hj8rktdbYmRifhC5BxfC2Wmr/fr5p0HqKAdPF5dOjuSSqwkLPD7KGfp++
Dko6bzJPf7q98A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:42 2025 by rpki-client