Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier: W3DcnqhHkrD4td3GkyvCLnLKZVBty9gFqRRoPImGTi8=
Subject key identifier: 4D:E8:C9:45:8E:CD:B0:21:32:AB:57:B9:CB:48:49:2D:37:42:22:4B
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 0198D5BC3C94C14A555A9AEE5562B47B5ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 07:02:19 +0000
Manifest this update: Sat 23 Aug 2025 07:02:19 +0000
Manifest next update: Sun 24 Aug 2025 07:02:19 +0000
Files and hashes: 1: DE9IUhyQDVKAZFd3LetU9Q2xs6k.roa (hash: 4yKIJoSmqEpGXf1pIollJ7FnnZ1pkmaGTlVLtjz3pSc=)
2: H8-4BKw4Tio0v7fBDDkOvu0xYf0.roa (hash: KAd/cINuj3Zmkb8yZBl9rfV147mzpewaBmWKPtSwHrI=)
3: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: CwVlAhs9XtN2Iahm9IGW8ZMDl58HYHZSAieNHod40xs=)
4: j_UhRom1_CjoZ8ktPpSsCzemlX0.roa (hash: p3RE9tXJ28D2EkcXNDeylKcBqqXVLJJQRP9qM16ttXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3c:94:c1:4a:55:5a:9a:ee:55:62:b4:7b:5e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Aug 23 07:02:19 2025 GMT
Not After : Aug 24 07:02:19 2025 GMT
Subject: CN=4de8c9458ecdb02132ab57b9cb48492d3742224b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:69:55:23:57:fe:36:3c:a5:a5:29:23:7f:
93:1c:bb:14:6c:09:74:87:9d:d6:9f:f3:2b:32:8a:
19:c3:8f:44:59:6d:e8:55:d1:0e:5e:0f:f4:98:52:
79:a1:42:2a:1d:91:23:68:92:c9:23:38:f8:0c:91:
58:46:0e:62:2f:8b:7d:d4:a2:b3:5d:dc:62:19:4b:
6e:92:27:4e:e5:79:49:09:64:4c:3b:54:0e:7a:25:
69:2a:aa:93:bb:91:94:f0:1f:a3:d2:6d:cb:75:30:
70:4c:b8:e2:9d:20:88:90:0d:b4:88:8d:f5:96:4c:
98:fc:0a:46:b5:0b:9a:e2:40:41:9c:6b:04:d0:75:
82:39:a7:49:e8:8a:3e:0d:7d:f2:ba:96:0a:c1:08:
c5:84:2e:62:cb:2c:c2:18:80:f3:61:f7:50:9a:2b:
a1:1a:0b:b7:11:fd:45:e8:43:ae:7b:b6:a2:fb:36:
18:78:83:58:8b:7c:9b:14:64:79:75:48:98:c8:17:
52:77:29:90:c5:f3:8c:0c:4f:9a:4e:1f:ff:1d:7b:
69:37:58:9c:f5:23:cc:f2:74:89:44:9a:b4:e2:0e:
07:54:7b:65:71:62:b4:9c:bd:74:c6:7e:20:26:aa:
50:f2:ac:15:ce:4d:66:35:63:92:e4:8f:ef:98:2b:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E8:C9:45:8E:CD:B0:21:32:AB:57:B9:CB:48:49:2D:37:42:22:4B
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:01:a6:f3:77:5d:4c:2e:1b:5d:27:15:90:fe:f7:9a:71:34:
c7:0d:00:96:46:63:f2:2a:ff:32:bd:d7:df:c2:00:4d:51:f2:
c8:d1:65:1f:d5:31:f8:26:60:ee:f9:1f:dd:82:a2:49:f2:a7:
79:f9:24:3b:c1:cd:b7:e9:5e:88:39:b1:51:44:b6:26:2c:58:
1e:0b:78:f8:5e:a2:1b:2e:dd:12:49:69:6a:8c:67:9d:48:a0:
67:93:30:7b:6e:f9:06:0f:30:5b:e7:0a:70:1d:36:ce:a6:4a:
a8:7d:0c:2d:55:fe:26:a1:49:fc:a3:b3:0e:b7:c8:c8:41:e6:
0d:2c:f8:8c:80:33:e0:d7:04:24:e4:08:3a:d1:e1:ee:1b:cd:
35:ac:e1:08:db:e2:c5:35:f2:32:1c:2c:fb:c5:dc:cf:a0:32:
9d:2f:4c:37:c1:cb:f2:ea:9f:84:fc:34:7f:9b:d0:6d:80:32:
f5:97:56:90:84:fa:50:71:ef:c9:12:fa:24:51:67:ce:12:c3:
54:8b:2d:a0:f6:a6:98:d4:d0:ba:03:94:d8:7c:2e:38:69:45:
21:8c:27:d0:0d:e1:85:4c:31:81:b1:ed:5b:9a:7d:ab:a7:14:
83:ae:0f:79:57:36:73:78:5e:93:08:69:be:b1:bd:82:9d:6b:
4e:7f:20:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvDyUwUpVWpruVWK0e17ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMGY0MTNmYjBhZjBiZDhmZTEzMDgyMGQzMDQ5ZDBlNzFl
ZDRiYjAwHhcNMjUwODIzMDcwMjE5WhcNMjUwODI0MDcwMjE5WjAzMTEwLwYDVQQD
Eyg0ZGU4Yzk0NThlY2RiMDIxMzJhYjU3YjljYjQ4NDkyZDM3NDIyMjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BxpVSNX/jY8paUpI3+THLsUbAl0
h53Wn/MrMooZw49EWW3oVdEOXg/0mFJ5oUIqHZEjaJLJIzj4DJFYRg5iL4t91KKz
XdxiGUtukidO5XlJCWRMO1QOeiVpKqqTu5GU8B+j0m3LdTBwTLjinSCIkA20iI31
lkyY/ApGtQua4kBBnGsE0HWCOadJ6Io+DX3yupYKwQjFhC5iyyzCGIDzYfdQmiuh
Ggu3Ef1F6EOue7ai+zYYeINYi3ybFGR5dUiYyBdSdymQxfOMDE+aTh//HXtpN1ic
9SPM8nSJRJq04g4HVHtlcWK0nL10xn4gJqpQ8qwVzk1mNWOS5I/vmCuPDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3oyUWOzbAhMqtXuctISS03QiJLMB8GA1UdIwQY
MBaAFCIPQT+wrwvY/hMIINMEnQ5x7UuwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjM1N2QtYjE3MC00MGE1LWE2Njkt
ODJlYmEwY2IzYjBkLzEvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjM1N2QtYjE3MC00MGE1LWE2NjktODJlYmEwY2IzYjBk
LzEvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwGm83dd
TC4bXScVkP73mnE0xw0AlkZj8ir/Mr3X38IATVHyyNFlH9Ux+CZg7vkf3YKiSfKn
efkkO8HNt+leiDmxUUS2JixYHgt4+F6iGy7dEklpaoxnnUigZ5Mwe275Bg8wW+cK
cB02zqZKqH0MLVX+JqFJ/KOzDrfIyEHmDSz4jIAz4NcEJOQIOtHh7hvNNazhCNvi
xTXyMhws+8Xcz6AynS9MN8HL8uqfhPw0f5vQbYAy9ZdWkIT6UHHvyRL6JFFnzhLD
VIstoPammNTQugOU2HwuOGlFIYwn0A3hhUwxgbHtW5p9q6cUg64PeVc2c3hekwhp
vrG9gp1rTn8g9Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:13 2025 by rpki-client