Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
File: IxG6LbhgGYJqsQLhnyyoogkxaFI.mft (raw, json)
Hash identifier: IQTPekU5uwETCnUMrZ/GbhRITx5Qm3eOky1V7L+VsSs=
Subject key identifier: 95:A8:EC:F5:B1:FB:81:D6:74:D4:E0:37:15:0A:FD:28:12:BA:F9:AC
Authority key identifier: 23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
Certificate issuer: /CN=2311ba2db86019826ab102e19f2ca8a209316852
Certificate serial: 0198D5BC1C331D0E2C5169A8D955F9ED2F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
Manifest number: 0147
Signing time: Sat 23 Aug 2025 07:02:11 +0000
Manifest this update: Sat 23 Aug 2025 07:02:11 +0000
Manifest next update: Sun 24 Aug 2025 07:02:11 +0000
Files and hashes: 1: IxG6LbhgGYJqsQLhnyyoogkxaFI.crl (hash: i6PStyxSloUnIfZ24bFREA7cF0tzEMZ4KDL2KoBbeuU=)
2: VEacVgiUB2mSTjU4m54DaN-4dWE.roa (hash: 4yBoFANUnzxzanObGvRjvvX/EIqsjlCUPMYRv3xQRSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1c:33:1d:0e:2c:51:69:a8:d9:55:f9:ed:2f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2311ba2db86019826ab102e19f2ca8a209316852
Validity
Not Before: Aug 23 07:02:11 2025 GMT
Not After : Aug 24 07:02:11 2025 GMT
Subject: CN=95a8ecf5b1fb81d674d4e037150afd2812baf9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:21:13:e5:dd:33:6f:f3:f6:f7:23:b6:7e:
5b:5d:99:b3:b6:8e:54:84:b1:1e:99:a4:c5:1e:df:
41:93:5c:ee:ca:98:3f:e0:6a:04:25:9d:6c:1a:17:
9a:42:11:e9:e1:dc:76:68:50:99:2e:a0:da:e5:ed:
7d:55:00:78:2e:66:0c:32:5f:bf:36:b4:39:73:f7:
f4:bf:b4:54:e6:13:94:9e:a0:66:a6:1b:51:c0:4d:
d4:9f:46:5b:05:aa:74:1e:e5:2d:f8:2d:2f:02:f1:
71:cb:f9:d1:e5:76:24:ef:d6:01:34:fe:09:67:1b:
d8:3c:5f:8f:50:34:7f:71:ee:fe:4d:2a:a5:e5:f8:
ae:1d:d0:5b:9b:61:97:74:86:42:ba:63:1c:ed:89:
53:6f:ef:80:ab:d6:9e:ee:4e:c6:c2:fc:3c:b3:33:
42:8e:d7:1b:2e:66:2f:3b:92:df:4d:76:d3:e5:f2:
2f:a5:d5:b2:72:6c:41:aa:eb:e5:bf:2c:e3:15:8e:
c7:78:23:24:47:5f:7e:aa:23:85:e0:51:03:db:08:
af:de:a2:3d:83:19:36:80:48:55:c2:c7:e9:1d:84:
9e:68:85:b3:15:30:7d:31:78:16:1d:75:22:27:71:
78:fc:b5:4f:55:d5:c4:01:6a:da:69:94:3f:b3:3a:
7a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A8:EC:F5:B1:FB:81:D6:74:D4:E0:37:15:0A:FD:28:12:BA:F9:AC
X509v3 Authority Key Identifier:
keyid:23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:80:c1:b2:70:41:34:af:cc:34:77:63:c8:38:3d:63:0e:52:
c5:33:5b:43:0a:f3:17:78:a5:f4:94:07:b1:60:bb:3f:c5:79:
37:88:8c:0b:e6:08:88:2a:b0:3b:2d:b0:5f:a2:f7:1c:c6:29:
1e:43:37:72:35:4c:d1:3f:19:fc:e6:cf:93:d7:13:f6:2d:61:
1c:7b:61:e7:d3:63:b3:f2:e4:de:d0:61:21:9f:88:05:14:7d:
18:9e:f7:bc:72:2a:48:64:ae:ae:20:b9:ea:42:da:2c:d2:72:
04:dd:8b:53:fa:03:85:07:b8:b6:b3:ca:4b:9c:25:7c:b1:60:
70:d3:02:03:58:12:48:f4:3b:6e:5b:35:7e:d8:4c:28:e6:90:
a0:d0:5f:de:81:c7:bc:42:eb:af:31:f9:77:b1:65:b8:5d:a1:
f9:8d:2e:3f:bf:d7:ad:44:99:c1:0a:35:e0:5b:48:3f:97:0e:
ee:89:0d:65:c9:4b:bb:a8:87:fb:3f:67:e1:03:73:34:a6:09:
d4:ad:39:e0:ca:2f:60:c8:09:eb:07:6f:0c:bf:16:1d:c1:3b:
25:be:fe:d5:8a:fa:b7:3a:20:50:7e:0d:cd:e6:78:a3:a1:d0:
e4:18:4e:3b:d4:f1:8c:de:69:ca:ec:8f:a1:e4:1f:5b:b8:70:
ff:92:50:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvBwzHQ4sUWmo2VX57S8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMTFiYTJkYjg2MDE5ODI2YWIxMDJlMTlmMmNhOGEyMDkz
MTY4NTIwHhcNMjUwODIzMDcwMjExWhcNMjUwODI0MDcwMjExWjAzMTEwLwYDVQQD
Eyg5NWE4ZWNmNWIxZmI4MWQ2NzRkNGUwMzcxNTBhZmQyODEyYmFmOWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVQhE+XdM2/z9vcjtn5bXZmzto5U
hLEemaTFHt9Bk1zuypg/4GoEJZ1sGheaQhHp4dx2aFCZLqDa5e19VQB4LmYMMl+/
NrQ5c/f0v7RU5hOUnqBmphtRwE3Un0ZbBap0HuUt+C0vAvFxy/nR5XYk79YBNP4J
ZxvYPF+PUDR/ce7+TSql5fiuHdBbm2GXdIZCumMc7YlTb++Aq9ae7k7Gwvw8szNC
jtcbLmYvO5LfTXbT5fIvpdWycmxBquvlvyzjFY7HeCMkR19+qiOF4FED2wiv3qI9
gxk2gEhVwsfpHYSeaIWzFTB9MXgWHXUiJ3F4/LVPVdXEAWraaZQ/szp6dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWo7PWx+4HWdNTgNxUK/SgSuvmsMB8GA1UdIwQY
MBaAFCMRui24YBmCarEC4Z8sqKIJMWhSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82ZGFlZWUtZWQzYi00YmYwLTk0Njgt
MmYxNzg3YmJmMTE2LzEvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82ZGFlZWUtZWQzYi00YmYwLTk0NjgtMmYxNzg3YmJmMTE2
LzEvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIDBsnBB
NK/MNHdjyDg9Yw5SxTNbQwrzF3il9JQHsWC7P8V5N4iMC+YIiCqwOy2wX6L3HMYp
HkM3cjVM0T8Z/ObPk9cT9i1hHHth59Njs/Lk3tBhIZ+IBRR9GJ73vHIqSGSuriC5
6kLaLNJyBN2LU/oDhQe4trPKS5wlfLFgcNMCA1gSSPQ7bls1fthMKOaQoNBf3oHH
vELrrzH5d7FluF2h+Y0uP7/XrUSZwQo14FtIP5cO7okNZclLu6iH+z9n4QNzNKYJ
1K054MovYMgJ6wdvDL8WHcE7Jb7+1Yr6tzogUH4NzeZ4o6HQ5BhOO9TxjN5pyuyP
oeQfW7hw/5JQFg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:45 2025 by rpki-client