Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
File: I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json)
Hash identifier: T6SnDGvHsMQDpZWiYHQv9LU2OG2Xr5E9n47eyqPw1eU=
Subject key identifier: 09:E3:40:89:7C:1B:67:ED:77:61:7B:2E:B0:EC:33:BC:15:CF:D9:90
Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Certificate serial: 0198D4E039FDC871559C9C11592D5FF5AFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
Manifest number: 0342
Signing time: Sat 23 Aug 2025 03:02:01 +0000
Manifest this update: Sat 23 Aug 2025 03:02:01 +0000
Manifest next update: Sun 24 Aug 2025 03:02:01 +0000
Files and hashes: 1: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: uxmaT3Tph9Mc7t+F70mc9WK7P1YkKQbmTfFZTW6lWRI=)
2: j4EIa7tKAt7zUJqXstTzU7rzvAM.roa (hash: KBhYqMx9SY3f4s8BMjZo/0KJeCGNnKyC4D8ert+K2y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:39:fd:c8:71:55:9c:9c:11:59:2d:5f:f5:af:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Validity
Not Before: Aug 23 03:02:01 2025 GMT
Not After : Aug 24 03:02:01 2025 GMT
Subject: CN=09e340897c1b67ed77617b2eb0ec33bc15cfd990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:f4:4f:e5:c6:6d:2c:70:6e:46:30:82:de:
c0:2a:08:13:ba:19:6f:db:4b:9b:48:84:7f:a7:41:
23:d1:c6:a5:a3:32:c2:4b:de:74:4e:1a:e1:7c:8a:
de:b6:d3:8a:a8:48:3b:4e:73:d4:93:40:e6:b2:b5:
43:9b:43:7e:5d:16:e5:0b:f6:d1:1e:97:b4:dd:72:
28:d1:2e:18:b3:39:73:2f:10:a1:4b:1a:96:56:f7:
b2:6b:7c:9f:47:3c:f3:02:4b:23:db:28:49:14:83:
5c:8e:86:1d:b6:70:2b:c1:eb:d6:85:bc:d0:d2:44:
1c:a7:2b:32:54:6d:e7:d5:59:09:51:56:14:f0:8b:
80:35:f1:2f:35:bc:2e:3b:ab:51:1e:59:1a:95:0d:
d4:8a:f9:1f:c3:fe:84:db:ab:a0:d9:a6:2b:03:1b:
ca:21:52:9a:2c:74:8a:4e:08:f5:69:fd:0c:55:f1:
84:7b:6d:6c:db:e1:b9:c1:46:d5:96:e8:4b:db:40:
27:41:28:1e:0c:bc:b0:7a:7d:42:52:da:5d:9a:47:
66:36:b5:74:c8:34:82:e9:de:48:f6:34:a9:29:fe:
bc:87:57:19:d6:da:82:9b:f8:fa:96:ea:4a:6d:c0:
02:6e:f9:cf:5b:b6:36:66:18:18:99:24:0d:58:67:
f1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E3:40:89:7C:1B:67:ED:77:61:7B:2E:B0:EC:33:BC:15:CF:D9:90
X509v3 Authority Key Identifier:
keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bb:e8:34:0a:98:4f:5a:98:23:54:10:65:b9:e9:5d:a9:3f:
a8:c5:ac:7f:b7:3f:d8:a4:0a:97:c6:8e:b4:75:52:a8:67:c0:
0c:6c:e2:80:e7:6d:f9:b8:c6:4f:4a:a9:a9:d5:c5:e5:87:86:
fd:f6:be:14:f1:ba:3c:32:a2:08:77:52:84:9c:5a:dc:74:b3:
31:a7:f9:8c:61:5f:52:39:20:5a:67:57:36:66:d6:4f:20:82:
b8:1c:39:2f:97:3d:13:db:b6:0d:f8:11:b2:fd:73:ee:29:80:
1b:85:61:e2:47:f7:6a:2a:1e:a0:7d:11:06:28:96:bb:9c:a1:
a6:8c:92:50:b4:cf:b5:2f:98:60:56:20:7b:a1:e2:a0:51:e6:
2d:06:61:c7:5c:58:ff:9d:57:cf:86:0b:3e:38:a2:14:78:2f:
61:a7:d9:6c:74:94:ab:75:9a:27:50:82:25:47:52:f7:1b:59:
40:4e:83:f3:23:15:2a:de:01:28:85:9b:fb:9a:e1:59:4b:ed:
f1:78:61:05:2c:fe:69:e2:03:02:1b:da:e3:df:1b:6a:18:78:
77:c8:09:e9:08:19:c2:4e:59:33:92:48:04:20:3a:eb:6e:30:
5d:ad:de:95:fc:0e:c5:f9:f9:83:17:cb:ca:48:00:41:63:0d:
71:e7:4d:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4Dn9yHFVnJwRWS1f9a/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTk4NjdlYTYwM2ZjOGNmOTJiYjViYWM2ZjI1NTcxMGUz
YmYzNmEwHhcNMjUwODIzMDMwMjAxWhcNMjUwODI0MDMwMjAxWjAzMTEwLwYDVQQD
EygwOWUzNDA4OTdjMWI2N2VkNzc2MTdiMmViMGVjMzNiYzE1Y2ZkOTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0v0T+XGbSxwbkYwgt7AKggTuhlv
20ubSIR/p0Ej0calozLCS950ThrhfIrettOKqEg7TnPUk0DmsrVDm0N+XRblC/bR
Hpe03XIo0S4YszlzLxChSxqWVveya3yfRzzzAksj2yhJFINcjoYdtnArwevWhbzQ
0kQcpysyVG3n1VkJUVYU8IuANfEvNbwuO6tRHlkalQ3Uivkfw/6E26ug2aYrAxvK
IVKaLHSKTgj1af0MVfGEe21s2+G5wUbVluhL20AnQSgeDLywen1CUtpdmkdmNrV0
yDSC6d5I9jSpKf68h1cZ1tqCm/j6lupKbcACbvnPW7Y2ZhgYmSQNWGfx+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnjQIl8G2ftd2F7LrDsM7wVz9mQMB8GA1UdIwQY
MBaAFCOphn6mA/yM+Su1usbyVXEOO/NqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEt
NTk0YTI3ZGIxNDZiLzEvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEtNTk0YTI3ZGIxNDZi
LzEvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbvoNAqY
T1qYI1QQZbnpXak/qMWsf7c/2KQKl8aOtHVSqGfADGzigOdt+bjGT0qpqdXF5YeG
/fa+FPG6PDKiCHdShJxa3HSzMaf5jGFfUjkgWmdXNmbWTyCCuBw5L5c9E9u2DfgR
sv1z7imAG4Vh4kf3aioeoH0RBiiWu5yhpoySULTPtS+YYFYge6HioFHmLQZhx1xY
/51Xz4YLPjiiFHgvYafZbHSUq3WaJ1CCJUdS9xtZQE6D8yMVKt4BKIWb+5rhWUvt
8XhhBSz+aeIDAhva498bahh4d8gJ6QgZwk5ZM5JIBCA6624wXa3elfwOxfn5gxfL
ykgAQWMNcedNhg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:11 2025 by rpki-client