Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: tpMuyKHwZhk/F2pnXvA4RNBdB0cIRtzlnUFXspWDCRM=
Subject key identifier: 43:7B:DD:3D:00:F1:EB:FD:49:0A:4B:A4:1E:12:45:A4:5B:F8:37:C4
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 0198752BFC848CB22EA18DC0D20707018732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 10A2
Signing time: Mon 04 Aug 2025 13:01:13 +0000
Manifest this update: Mon 04 Aug 2025 13:01:13 +0000
Manifest next update: Tue 05 Aug 2025 13:01:13 +0000
Files and hashes: 1: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: z5DoLo7R5MFRfm8UatGf9QtKy/LKziqXYS20I0FJ0TQ=)
2: ff-qexzHEUD1WgOGjo1dcXlM5zw.roa (hash: okd5E/DUi3wr0dkKGYnxuoMgYENizBl6tX2uR1KatU4=)
3: o-JKFkGOw7b9iS81cGqL_sPqhTE.roa (hash: LeiOclwc6FMh1dAwDJxgRxawRJ1HHtp5FtwQRdIanPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:fc:84:8c:b2:2e:a1:8d:c0:d2:07:07:01:87:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Aug 4 13:01:13 2025 GMT
Not After : Aug 5 13:01:13 2025 GMT
Subject: CN=437bdd3d00f1ebfd490a4ba41e1245a45bf837c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:09:0d:31:b0:4c:b1:d8:2a:8b:5c:d5:75:
10:46:9f:7f:de:05:3f:fc:7a:c0:9c:2a:45:92:1b:
61:24:8d:d9:3d:13:9a:74:6f:fa:4e:e4:f5:58:ce:
d6:21:e4:81:3d:93:97:78:67:1b:3e:9e:e9:37:42:
cb:88:e9:6a:db:1c:a6:78:1a:40:b9:d3:27:42:50:
f8:4c:29:17:9a:7e:9b:7a:c9:e9:67:ea:f4:13:10:
b0:09:6b:2e:bf:8d:4e:5b:d3:26:cd:cf:f9:41:0e:
79:fb:2a:22:c5:2f:9d:10:13:66:8b:f7:bb:da:33:
2c:6e:05:8c:da:3c:d1:63:63:0f:c3:8c:fd:27:94:
60:a6:d4:97:62:8d:4f:09:f1:00:c3:78:3c:5e:68:
a7:d2:b0:9e:e4:53:b4:b9:21:3f:7e:da:48:24:35:
21:25:3f:79:74:02:c5:0b:e6:d3:99:e5:e8:de:29:
92:46:b4:fd:a7:64:fb:d5:e9:b6:d9:56:a0:e3:21:
91:e9:31:ca:4f:07:fa:a1:42:e8:41:92:39:1e:fe:
41:a7:84:4c:0c:81:88:10:af:18:7f:03:42:ae:9d:
ae:07:bb:e8:78:50:c8:32:b8:65:79:f8:3a:fd:26:
1b:5e:4b:10:4d:75:d9:29:5d:65:be:e4:b3:87:15:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7B:DD:3D:00:F1:EB:FD:49:0A:4B:A4:1E:12:45:A4:5B:F8:37:C4
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fd:fe:5f:36:59:e9:99:8b:21:b6:61:b2:13:d9:c5:64:96:
73:f5:17:eb:be:f2:92:ba:30:eb:1f:0a:80:3d:f7:f9:46:62:
6e:57:63:99:30:15:c5:71:bc:13:14:ea:cb:64:c3:8e:d5:f0:
93:6a:72:4b:44:d9:df:d4:78:0c:2d:ae:d0:1f:f0:16:f4:36:
02:52:68:1c:11:3f:af:6b:64:3c:63:21:a3:9b:12:b1:61:79:
a8:f9:8a:3f:2d:ce:84:72:ff:8d:31:46:ef:6e:ae:8e:c8:52:
f8:1e:0f:b1:c8:6a:be:92:1b:9a:5b:5d:cf:35:75:e0:26:ac:
1c:2f:7e:f6:ef:fe:11:9d:cd:49:86:d8:06:00:ee:29:9a:de:
b5:53:d2:b3:a1:bb:5b:5a:05:75:fc:79:b4:ae:2e:99:49:7d:
d5:66:53:96:76:40:71:be:49:f3:41:c1:cc:30:a8:b5:a7:d6:
99:e7:d4:21:49:38:ff:0a:fa:3d:f1:b7:62:c2:76:c0:73:3e:
b8:d7:47:ee:42:96:90:5e:84:2f:d1:09:15:ba:02:29:40:17:
7f:38:af:dc:64:35:63:72:f0:94:10:0d:ca:a6:cc:71:66:8a:
c4:42:57:55:d0:2a:b2:f2:a3:a2:a6:4e:0b:8b:b9:e6:1b:ea:
75:83:c4:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1K/yEjLIuoY3A0gcHAYcyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZWViMjQyZmIwYWZhYTAzN2Q5Y2FmNTYwNGM2NTg3ZTQw
ZGUzYjUwHhcNMjUwODA0MTMwMTEzWhcNMjUwODA1MTMwMTEzWjAzMTEwLwYDVQQD
Eyg0MzdiZGQzZDAwZjFlYmZkNDkwYTRiYTQxZTEyNDVhNDViZjgzN2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdsJDTGwTLHYKotc1XUQRp9/3gU/
/HrAnCpFkhthJI3ZPROadG/6TuT1WM7WIeSBPZOXeGcbPp7pN0LLiOlq2xymeBpA
udMnQlD4TCkXmn6besnpZ+r0ExCwCWsuv41OW9Mmzc/5QQ55+yoixS+dEBNmi/e7
2jMsbgWM2jzRY2MPw4z9J5RgptSXYo1PCfEAw3g8Xmin0rCe5FO0uSE/ftpIJDUh
JT95dALFC+bTmeXo3imSRrT9p2T71em22Vag4yGR6THKTwf6oULoQZI5Hv5Bp4RM
DIGIEK8YfwNCrp2uB7voeFDIMrhlefg6/SYbXksQTXXZKV1lvuSzhxXK8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN73T0A8ev9SQpLpB4SRaRb+DfEMB8GA1UdIwQY
MBaAFCLuskL7CvqgN9nK9WBMZYfkDeO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYt
MjUxNTYyZjAwZmM1LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYtMjUxNTYyZjAwZmM1
LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFf3+XzZZ
6ZmLIbZhshPZxWSWc/UX677ykrow6x8KgD33+UZibldjmTAVxXG8ExTqy2TDjtXw
k2pyS0TZ39R4DC2u0B/wFvQ2AlJoHBE/r2tkPGMho5sSsWF5qPmKPy3OhHL/jTFG
726ujshS+B4PschqvpIbmltdzzV14CasHC9+9u/+EZ3NSYbYBgDuKZretVPSs6G7
W1oFdfx5tK4umUl91WZTlnZAcb5J80HBzDCotafWmefUIUk4/wr6PfG3YsJ2wHM+
uNdH7kKWkF6EL9EJFboCKUAXfziv3GQ1Y3LwlBANyqbMcWaKxEJXVdAqsvKjoqZO
C4u55hvqdYPERQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:36 2025 by rpki-client