Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
File: I9SAsHlWF-Libm4YJkN356lsePM.mft (raw, json)
Hash identifier: N3Hua6BZlXLLSkLAGa7M73OaDgwzZp22S69tCggbH8c=
Subject key identifier: 6D:84:5D:CA:99:CA:53:29:D0:2C:F4:78:D9:45:0B:22:39:62:55:7B
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 0198733D861DFCB9FB3E1B85667667A88DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
Manifest number: 14A0
Signing time: Mon 04 Aug 2025 04:01:08 +0000
Manifest this update: Mon 04 Aug 2025 04:01:08 +0000
Manifest next update: Tue 05 Aug 2025 04:01:08 +0000
Files and hashes: 1: I9SAsHlWF-Libm4YJkN356lsePM.crl (hash: 3lHVa3Se6JnrZ5jXg+IXtlsalNOfIG6WuZuiNBf0JJs=)
2: i2GfKnioIrK4DFco2liFl7JEt9U.roa (hash: Ib8ibm5kzCYxk8mp5/206nEi8+cY3/XjnCkQAxAJBU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:86:1d:fc:b9:fb:3e:1b:85:66:76:67:a8:8d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Aug 4 04:01:08 2025 GMT
Not After : Aug 5 04:01:08 2025 GMT
Subject: CN=6d845dca99ca5329d02cf478d9450b223962557b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:34:00:83:c0:0c:f2:3c:5c:03:68:b2:d4:e1:
db:83:8e:a6:d4:59:56:5e:0d:10:16:13:50:dc:18:
ad:bd:92:73:c2:3f:d0:a6:fd:19:80:d1:6c:85:15:
69:1b:6a:58:14:54:7e:16:b8:a3:94:b1:8f:0d:14:
88:53:92:a5:05:cf:d5:94:f2:61:d5:e7:78:e9:fb:
76:6b:37:9c:09:86:65:36:58:96:0b:cb:a3:f4:e8:
7e:1e:1c:92:df:42:35:61:8f:93:30:f8:cd:a7:0b:
98:72:d4:9c:7b:25:52:0f:5c:06:87:be:d6:05:30:
0e:40:77:b5:7d:d9:4f:6b:a0:ba:5a:3d:19:a6:e0:
2e:8d:57:9d:08:63:ab:c2:a8:38:d2:32:61:8d:d9:
ce:c0:99:f1:af:c7:f6:f8:c5:1b:14:34:51:30:ca:
12:ce:cd:18:f0:be:46:6b:87:5e:4b:11:d6:07:14:
7c:2c:6e:8e:a8:e0:7b:09:78:a7:b9:af:b3:22:c5:
30:7c:ec:71:3a:7b:41:d0:2d:42:37:9a:b0:9f:a4:
54:f6:e0:fd:85:fa:a2:eb:b9:e9:65:96:a5:d3:00:
66:3a:b2:96:a0:cc:3a:7f:85:04:85:09:e3:06:85:
11:fa:3d:c4:7f:5d:76:4a:7f:6f:ba:bf:1a:93:32:
de:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:84:5D:CA:99:CA:53:29:D0:2C:F4:78:D9:45:0B:22:39:62:55:7B
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:36:9c:1a:3f:57:79:a7:4e:c6:a4:24:47:c2:d8:a7:7c:75:
0b:b5:7e:68:54:95:64:c6:59:4a:9c:fd:79:7a:1c:f8:b5:67:
b6:ab:dc:94:3f:74:12:e4:6e:a6:dd:b7:80:de:ce:1b:af:44:
4d:ad:91:c9:ee:d8:74:a4:a5:cb:88:4f:10:d3:e9:33:25:80:
77:a3:d4:af:65:7e:5e:c2:ec:f8:4b:88:3b:5e:85:1f:36:aa:
5b:18:19:29:7b:73:b1:d3:7c:92:2c:e8:17:6b:0c:57:a7:be:
4b:ae:2b:99:8a:5f:a6:d6:6b:2c:bb:37:40:25:ea:0c:86:35:
fe:6f:93:99:a9:37:8d:3c:fa:5c:70:48:44:89:f7:4c:99:ce:
ae:88:53:d9:3a:0a:0d:2c:3f:7b:b1:a2:0b:a3:36:03:78:d7:
be:89:3e:23:f2:a7:bf:e5:2a:f8:14:e4:f0:0b:e6:4d:0f:0e:
67:26:ea:e1:89:a2:db:71:0c:86:e9:91:8e:16:b8:6e:4a:cc:
14:67:ce:d0:de:3a:bf:f9:82:48:93:6c:6e:8a:6c:b6:21:89:
76:52:38:60:78:94:e2:15:ee:fd:df:98:bd:5f:60:63:9e:2b:
50:5d:07:64:34:19:cf:72:42:67:4d:c1:5d:42:8b:6b:c0:de:
3e:eb:a7:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPYYd/Ln7PhuFZnZnqI2lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZDQ4MGIwNzk1NjE3ZTJlMjZlNmUxODI2NDM3N2U3YTk2
Yzc4ZjMwHhcNMjUwODA0MDQwMTA4WhcNMjUwODA1MDQwMTA4WjAzMTEwLwYDVQQD
Eyg2ZDg0NWRjYTk5Y2E1MzI5ZDAyY2Y0NzhkOTQ1MGIyMjM5NjI1NTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDQAg8AM8jxcA2iy1OHbg46m1FlW
Xg0QFhNQ3BitvZJzwj/Qpv0ZgNFshRVpG2pYFFR+FrijlLGPDRSIU5KlBc/VlPJh
1ed46ft2azecCYZlNliWC8uj9Oh+HhyS30I1YY+TMPjNpwuYctSceyVSD1wGh77W
BTAOQHe1fdlPa6C6Wj0ZpuAujVedCGOrwqg40jJhjdnOwJnxr8f2+MUbFDRRMMoS
zs0Y8L5Ga4deSxHWBxR8LG6OqOB7CXinua+zIsUwfOxxOntB0C1CN5qwn6RU9uD9
hfqi67npZZal0wBmOrKWoMw6f4UEhQnjBoUR+j3Ef112Sn9vur8akzLeiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2EXcqZylMp0Cz0eNlFCyI5YlV7MB8GA1UdIwQY
MBaAFCPUgLB5Vhfi4m5uGCZDd+epbHjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTlTQXNIbFdGLUxpYm00WUprTjM1NmxzZVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82NjRjYWItYmE5YS00YzQwLTk3ZjQt
YWY5OGU0OWYxMWFlLzEvSTlTQXNIbFdGLUxpYm00WUprTjM1NmxzZVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82NjRjYWItYmE5YS00YzQwLTk3ZjQtYWY5OGU0OWYxMWFl
LzEvSTlTQXNIbFdGLUxpYm00WUprTjM1NmxzZVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODacGj9X
eadOxqQkR8LYp3x1C7V+aFSVZMZZSpz9eXoc+LVntqvclD90EuRupt23gN7OG69E
Ta2Rye7YdKSly4hPENPpMyWAd6PUr2V+XsLs+EuIO16FHzaqWxgZKXtzsdN8kizo
F2sMV6e+S64rmYpfptZrLLs3QCXqDIY1/m+Tmak3jTz6XHBIRIn3TJnOrohT2ToK
DSw/e7GiC6M2A3jXvok+I/Knv+Uq+BTk8AvmTQ8OZybq4Ymi23EMhumRjha4bkrM
FGfO0N46v/mCSJNsbopstiGJdlI4YHiU4hXu/d+YvV9gY54rUF0HZDQZz3JCZ03B
XUKLa8DePuunJw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:54 2025 by rpki-client