Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
File: Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json)
Hash identifier: FC21qgHAXI4SAr0w6uYZC567NKRnHUXjUWXYV1db1sw=
Subject key identifier: EF:8F:9D:D3:E3:1C:92:04:CF:2D:47:9F:10:1D:F0:AE:7B:D8:6F:A6
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 0198A083E53D897702D059C1365452CB7716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
Manifest number: 158A
Signing time: Tue 12 Aug 2025 23:00:55 +0000
Manifest this update: Tue 12 Aug 2025 23:00:55 +0000
Manifest next update: Wed 13 Aug 2025 23:00:55 +0000
Files and hashes: 1: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: BKfOTKg7bFVwCIW3hYwbMY9gI2AXJ7CljrNu8WiwUsE=)
2: UVEBG1ExZGcscljMEXZmdhHPbmo.roa (hash: OGY1ZCPh4kqtkS+2sWG7TSBefV4b/lqw2cPXHz2iP6A=)
3: l7ZphxTNLdfz3s0c0sr67IQOn_Q.roa (hash: 7qT5TEH8UgfN71QCeNJwaAV6tPLOUHK85hJIN/udCok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:e5:3d:89:77:02:d0:59:c1:36:54:52:cb:77:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Aug 12 23:00:55 2025 GMT
Not After : Aug 13 23:00:55 2025 GMT
Subject: CN=ef8f9dd3e31c9204cf2d479f101df0ae7bd86fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6e:95:ed:41:d8:40:f9:2b:03:fd:9d:5d:5c:
51:ef:6b:26:db:bb:5f:d9:a9:f9:e5:9c:a2:f7:70:
b5:10:9f:46:e9:3a:8d:7d:91:65:89:41:bb:34:13:
a0:7d:0e:0a:33:c3:77:33:9c:05:26:eb:2e:99:36:
e9:9a:51:5e:be:cb:11:18:90:ab:d8:af:f2:3d:92:
cc:a4:0e:c9:92:81:89:5e:a2:cc:9c:c6:47:3d:84:
8d:6e:fa:38:5f:ea:e9:db:ba:5a:fe:fc:49:cd:86:
02:89:67:3c:88:f2:2f:35:2d:d1:c0:ce:76:78:38:
84:08:00:25:19:26:c6:6d:39:6d:b7:9d:1c:d5:1e:
44:6c:63:81:e2:88:36:ba:bc:0c:e4:54:27:9d:94:
cc:24:ab:53:5d:0c:28:30:f3:2e:ca:1f:2d:de:b4:
25:e7:7f:ce:c7:33:68:e7:5b:11:57:ac:a1:42:91:
06:7f:f6:65:08:e9:9d:a1:4d:b0:11:68:8b:48:91:
06:a7:74:3d:c6:60:2e:61:a3:bd:78:43:0f:e0:87:
35:dc:d2:e1:65:3f:b6:38:fb:b3:16:d5:f2:c9:4c:
af:d3:f5:bd:9a:44:18:6d:b7:cc:0a:3e:fe:8e:ad:
d1:6c:3d:75:c7:1c:1b:18:b3:28:6a:65:11:04:f6:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8F:9D:D3:E3:1C:92:04:CF:2D:47:9F:10:1D:F0:AE:7B:D8:6F:A6
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9c:22:6e:6b:f2:fc:5d:aa:9f:36:26:de:2e:ef:cd:f3:c5:
29:b8:10:1c:3a:2a:bf:c4:e7:9b:f2:a3:ac:86:c6:dd:c2:5d:
88:e4:f1:62:51:43:c4:2e:46:97:3a:bc:4a:77:0c:fd:8c:eb:
b1:97:05:68:98:98:37:7d:94:ff:55:36:8e:53:72:ba:b8:34:
14:4e:f2:68:dd:85:86:0a:47:6a:d7:82:ad:3f:3e:a0:9c:4b:
6f:87:01:dc:ae:d3:66:f1:b5:6e:d7:68:ad:db:df:b4:0a:83:
72:c1:22:8a:10:4d:57:5a:37:ad:f4:df:21:30:5c:1c:20:a5:
a3:b5:52:ca:83:91:c7:1f:63:f7:7b:5f:b5:34:42:e1:45:ed:
6c:89:bc:49:7a:22:9e:ec:94:12:fe:dc:18:f4:bf:83:01:49:
8b:70:f7:31:15:6e:34:8e:5b:8a:b7:68:8b:8c:07:dd:5d:8e:
24:23:51:39:d1:51:b3:3a:17:be:40:57:a5:5a:21:e0:44:6d:
12:10:b1:53:00:0e:be:26:4b:9b:8e:2e:c0:a2:db:61:03:1b:
da:d0:da:45:ad:d3:91:ff:ef:ff:76:43:59:7e:7e:4d:e4:42:
0e:98:c7:0b:2e:24:e1:d7:69:f2:2a:9a:c0:51:8c:31:19:72:
ce:35:fd:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigg+U9iXcC0FnBNlRSy3cWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYWNmNjZmMDAxOWM1NTYzMzFiZWY5ZWNkOGRmNjUyNzgy
YTYzZjgwHhcNMjUwODEyMjMwMDU1WhcNMjUwODEzMjMwMDU1WjAzMTEwLwYDVQQD
EyhlZjhmOWRkM2UzMWM5MjA0Y2YyZDQ3OWYxMDFkZjBhZTdiZDg2ZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G6V7UHYQPkrA/2dXVxR72sm27tf
2an55Zyi93C1EJ9G6TqNfZFliUG7NBOgfQ4KM8N3M5wFJusumTbpmlFevssRGJCr
2K/yPZLMpA7JkoGJXqLMnMZHPYSNbvo4X+rp27pa/vxJzYYCiWc8iPIvNS3RwM52
eDiECAAlGSbGbTltt50c1R5EbGOB4og2urwM5FQnnZTMJKtTXQwoMPMuyh8t3rQl
53/OxzNo51sRV6yhQpEGf/ZlCOmdoU2wEWiLSJEGp3Q9xmAuYaO9eEMP4Ic13NLh
ZT+2OPuzFtXyyUyv0/W9mkQYbbfMCj7+jq3RbD11xxwbGLMoamURBPa97QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+PndPjHJIEzy1HnxAd8K572G+mMB8GA1UdIwQY
MBaAFCKs9m8AGcVWMxvvns2N9lJ4KmP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yZTk2NzctYzVkZC00YTMxLWE4ZTct
MTY4ZjIxNTA4Yzc0LzEvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8yZTk2NzctYzVkZC00YTMxLWE4ZTctMTY4ZjIxNTA4Yzc0
LzEvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5wibmvy
/F2qnzYm3i7vzfPFKbgQHDoqv8Tnm/KjrIbG3cJdiOTxYlFDxC5Glzq8SncM/Yzr
sZcFaJiYN32U/1U2jlNyurg0FE7yaN2FhgpHateCrT8+oJxLb4cB3K7TZvG1btdo
rdvftAqDcsEiihBNV1o3rfTfITBcHCClo7VSyoORxx9j93tftTRC4UXtbIm8SXoi
nuyUEv7cGPS/gwFJi3D3MRVuNI5birdoi4wH3V2OJCNROdFRszoXvkBXpVoh4ERt
EhCxUwAOviZLm44uwKLbYQMb2tDaRa3Tkf/v/3ZDWX5+TeRCDpjHCy4k4ddp8iqa
wFGMMRlyzjX9+A==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:37 2025 by rpki-client