Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
File: I-_rMup5TJRQkgia5cE1AvdxbN4.mft (raw, json)
Hash identifier: SqEDxgiakT4B3dwThsWH60Z6Ht1rIRYpInjMwSS+Ws4=
Subject key identifier: 3B:4F:B8:BB:16:10:B4:35:B1:6E:68:4D:B0:E4:8C:37:1C:B6:AD:CD
Authority key identifier: 23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
Certificate issuer: /CN=23efeb32ea794c945092089ae5c13502f7716cde
Certificate serial: 0198D516120EE9DB2229BB86065DA998FC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 04:00:50 +0000
Manifest this update: Sat 23 Aug 2025 04:00:50 +0000
Manifest next update: Sun 24 Aug 2025 04:00:50 +0000
Files and hashes: 1: I-_rMup5TJRQkgia5cE1AvdxbN4.crl (hash: jcPb9ucbHW11Suzj9j9iNh90OtfXe3Pzc0OiIuG0d4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:12:0e:e9:db:22:29:bb:86:06:5d:a9:98:fc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23efeb32ea794c945092089ae5c13502f7716cde
Validity
Not Before: Aug 23 04:00:50 2025 GMT
Not After : Aug 24 04:00:50 2025 GMT
Subject: CN=3b4fb8bb1610b435b16e684db0e48c371cb6adcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:b8:ae:83:5f:5e:48:81:34:80:8d:ae:26:
d0:32:37:70:02:1d:6c:bb:a4:4e:ff:a9:33:3b:11:
7c:bc:2d:71:61:c5:1d:59:4d:67:97:83:a7:13:98:
86:5c:33:01:ff:34:1d:eb:d4:11:72:a8:4c:7a:6c:
b2:02:93:ba:91:b4:d8:08:af:44:39:aa:73:40:bf:
a2:7e:95:0a:43:af:fe:c5:3e:89:70:3b:2c:d2:5b:
5e:14:91:38:29:1f:84:cb:61:f5:1d:bd:d2:e9:aa:
52:be:37:26:93:2d:da:4f:ca:a7:a6:44:6d:f2:9c:
9f:28:b1:8d:56:f5:98:08:a7:b4:96:93:8b:1a:9c:
18:d8:90:ef:45:0f:6e:62:4e:ec:cf:3a:24:65:a3:
21:02:e3:76:99:0f:1c:30:15:84:5d:dc:e6:ea:e5:
a3:40:b2:22:15:e2:f2:83:b6:23:25:d9:2d:fc:7f:
4f:3e:18:33:fd:f3:13:e3:a2:85:ef:86:87:3b:6c:
66:6f:2e:c4:af:e6:24:90:a8:5e:75:a0:09:b3:90:
50:a2:e6:1d:df:bc:84:9a:2b:79:e4:88:f9:56:12:
e7:87:c1:4d:5e:4c:fb:a6:8b:3f:05:fa:e7:9e:2a:
e5:d4:d9:57:42:5d:a3:6f:19:1e:d4:68:37:6b:57:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4F:B8:BB:16:10:B4:35:B1:6E:68:4D:B0:E4:8C:37:1C:B6:AD:CD
X509v3 Authority Key Identifier:
keyid:23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:27:b6:25:f3:3d:6d:b6:f7:95:cc:a2:c6:3b:22:7f:1c:15:
12:c8:fd:16:74:77:39:70:49:59:26:4f:e9:73:e5:e7:fc:a6:
ed:7d:ce:ee:b6:b2:72:f7:b6:68:32:73:3a:5c:e0:7f:ae:34:
79:ce:66:75:f1:e8:25:9f:0a:bc:19:88:9d:49:a9:bf:34:83:
0c:c8:6b:05:19:15:d8:b7:b8:f7:2a:04:6b:e7:3f:6f:7a:5c:
a8:3c:bb:b7:2b:a5:62:30:e2:58:96:59:e5:7f:af:f3:db:3a:
40:e7:48:c2:df:2c:1d:a1:61:84:5a:29:18:6b:16:ee:bd:52:
b0:99:23:df:59:69:92:3f:21:2e:f3:fe:ab:0d:2d:3f:cc:cc:
68:3c:d3:48:d4:10:ca:a2:c7:77:81:b7:13:5a:b8:60:f4:25:
7f:53:f9:a7:77:39:aa:ad:4a:c1:18:85:9c:d7:3e:96:fb:21:
14:0d:f8:9d:e0:77:38:52:dc:97:81:91:6d:2d:b0:1f:00:bb:
9e:5c:21:b6:16:5a:24:10:e0:1b:30:90:25:c1:48:b1:04:fa:
11:a8:e1:39:cb:67:99:46:e1:51:e3:7c:4b:a2:28:4d:d8:1d:
b6:a5:51:be:65:47:b1:09:95:17:8a:52:dd:b4:fd:48:16:05:
98:55:75:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFhIO6dsiKbuGBl2pmPwRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZWZlYjMyZWE3OTRjOTQ1MDkyMDg5YWU1YzEzNTAyZjc3
MTZjZGUwHhcNMjUwODIzMDQwMDUwWhcNMjUwODI0MDQwMDUwWjAzMTEwLwYDVQQD
EygzYjRmYjhiYjE2MTBiNDM1YjE2ZTY4NGRiMGU0OGMzNzFjYjZhZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYW4roNfXkiBNICNribQMjdwAh1s
u6RO/6kzOxF8vC1xYcUdWU1nl4OnE5iGXDMB/zQd69QRcqhMemyyApO6kbTYCK9E
OapzQL+ifpUKQ6/+xT6JcDss0lteFJE4KR+Ey2H1Hb3S6apSvjcmky3aT8qnpkRt
8pyfKLGNVvWYCKe0lpOLGpwY2JDvRQ9uYk7szzokZaMhAuN2mQ8cMBWEXdzm6uWj
QLIiFeLyg7YjJdkt/H9PPhgz/fMT46KF74aHO2xmby7Er+YkkKhedaAJs5BQouYd
37yEmit55Ij5VhLnh8FNXkz7pos/Bfrnnirl1NlXQl2jbxke1Gg3a1c4IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtPuLsWELQ1sW5oTbDkjDcctq3NMB8GA1UdIwQY
MBaAFCPv6zLqeUyUUJIImuXBNQL3cWzeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8yMDUyZjMtMmJlMS00MTdhLWE0MTYt
ZGZiZDViNWVhNzYwLzEvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8yMDUyZjMtMmJlMS00MTdhLWE0MTYtZGZiZDViNWVhNzYw
LzEvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSe2JfM9
bbb3lcyixjsifxwVEsj9FnR3OXBJWSZP6XPl5/ym7X3O7raycve2aDJzOlzgf640
ec5mdfHoJZ8KvBmInUmpvzSDDMhrBRkV2Le49yoEa+c/b3pcqDy7tyulYjDiWJZZ
5X+v89s6QOdIwt8sHaFhhFopGGsW7r1SsJkj31lpkj8hLvP+qw0tP8zMaDzTSNQQ
yqLHd4G3E1q4YPQlf1P5p3c5qq1KwRiFnNc+lvshFA34neB3OFLcl4GRbS2wHwC7
nlwhthZaJBDgGzCQJcFIsQT6EajhOctnmUbhUeN8S6IoTdgdtqVRvmVHsQmVF4pS
3bT9SBYFmFV1cg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:47 2025 by rpki-client