Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
File: IqETXjyWLnRuT1fR6qSUoEnwOxs.mft (raw, json)
Hash identifier: 3bVez7ZveBIVkJ5jdQZ1WY+eUriNtPzI3pWmYdaq3sQ=
Subject key identifier: 44:8C:6A:BE:3F:BC:66:65:61:96:C8:CE:3E:11:0D:07:01:B9:9C:05
Authority key identifier: 22:A1:13:5E:3C:96:2E:74:6E:4F:57:D1:EA:A4:94:A0:49:F0:3B:1B
Certificate issuer: /CN=22a1135e3c962e746e4f57d1eaa494a049f03b1b
Certificate serial: 0199FB7CD9E86CF5823969ADFD2DE4DAAF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
Manifest number: AB
Signing time: Sun 19 Oct 2025 08:01:27 +0000
Manifest this update: Sun 19 Oct 2025 08:01:27 +0000
Manifest next update: Mon 20 Oct 2025 08:01:27 +0000
Files and hashes: 1: IqETXjyWLnRuT1fR6qSUoEnwOxs.crl (hash: Fwwod/4iHVVdpuQXB+gAXG3gtXYvBlcVtwfl7Xiyvf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d9:e8:6c:f5:82:39:69:ad:fd:2d:e4:da:af:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a1135e3c962e746e4f57d1eaa494a049f03b1b
Validity
Not Before: Oct 19 08:01:27 2025 GMT
Not After : Oct 20 08:01:27 2025 GMT
Subject: CN=448c6abe3fbc66656196c8ce3e110d0701b99c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e9:66:8a:14:d2:f3:42:d4:b4:7f:39:90:66:
dd:79:61:c9:7d:0b:88:9a:03:dc:72:1d:f6:71:ea:
58:dd:4c:ee:15:64:61:e2:f9:1d:8b:39:27:00:e8:
d5:67:a8:6e:ed:40:fc:c4:f2:dd:8e:d9:7e:d7:1e:
91:c2:86:62:c1:d7:5a:af:4d:b0:a8:32:d9:8b:b1:
2b:1b:9f:33:a3:3c:86:53:78:5d:20:08:ef:b6:2b:
25:2e:a2:8b:56:b0:f2:65:11:90:89:24:09:e0:21:
e9:ad:35:08:7f:fb:1b:18:1e:b5:db:ec:1f:da:36:
17:e3:b8:fc:95:d6:11:ac:c6:47:1b:b9:36:ec:fb:
6c:e8:bf:96:26:62:7d:38:d8:7f:f6:fd:19:a3:0f:
8c:34:f4:fb:9d:8e:2e:0b:1d:19:02:5f:6b:cb:1d:
be:96:26:c6:87:63:c4:ef:f4:d9:cf:69:da:70:38:
96:d3:a1:ae:44:3f:e6:a1:90:23:83:6a:ac:25:36:
d9:9d:bf:9a:ea:c8:a0:51:dd:42:73:8e:20:e8:c5:
28:55:f9:1b:56:65:70:56:85:a5:5f:18:1e:1e:ad:
07:7c:47:c9:ab:2e:a0:3e:89:f3:2b:d3:cb:5e:f7:
5e:86:c5:84:0e:55:1c:08:1c:49:10:c7:f2:16:5e:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8C:6A:BE:3F:BC:66:65:61:96:C8:CE:3E:11:0D:07:01:B9:9C:05
X509v3 Authority Key Identifier:
keyid:22:A1:13:5E:3C:96:2E:74:6E:4F:57:D1:EA:A4:94:A0:49:F0:3B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:06:74:58:75:16:b5:18:24:29:16:4e:fb:b3:2e:16:d0:15:
d5:6d:4f:e8:3f:9c:90:14:fa:f8:f0:ea:09:8e:b6:1a:ae:65:
d0:11:ca:27:20:fe:49:a3:2e:39:5b:7d:95:1b:7c:56:82:20:
63:70:8a:f6:6a:ab:4d:38:59:f4:e1:91:69:80:a0:2a:0e:fe:
f9:69:ed:00:83:c1:13:f9:c5:59:6c:07:5f:aa:0f:b2:79:b8:
21:9e:84:68:d9:85:e7:fb:de:06:97:cc:4c:ac:d1:e6:9b:da:
a8:a2:ca:8a:d6:0b:73:15:bd:ab:dd:3b:3e:84:5b:cd:d1:2f:
4c:ff:c0:0a:d1:28:9d:7f:9a:32:13:3a:fc:dc:67:ab:4d:a0:
32:56:ed:fe:5e:83:36:18:80:7d:f4:39:44:1d:6d:43:60:a6:
ea:37:6d:25:f0:90:ea:03:da:2e:c6:bc:e9:3c:7b:44:39:21:
8d:15:9e:09:e6:2f:a1:0b:9f:4c:c2:01:14:d7:b8:98:08:b0:
e8:30:83:83:ff:82:68:c8:00:1a:d0:c2:3b:fb:9c:1f:e0:e3:
25:24:b5:82:ca:83:aa:b5:88:20:fe:19:d5:90:c8:55:2f:9e:
f9:63:8c:f5:9d:7d:79:eb:0e:c7:1c:26:ea:41:e3:da:fd:01:
e6:ce:78:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fNnobPWCOWmt/S3k2q8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTExMzVlM2M5NjJlNzQ2ZTRmNTdkMWVhYTQ5NGEwNDlm
MDNiMWIwHhcNMjUxMDE5MDgwMTI3WhcNMjUxMDIwMDgwMTI3WjAzMTEwLwYDVQQD
Eyg0NDhjNmFiZTNmYmM2NjY1NjE5NmM4Y2UzZTExMGQwNzAxYjk5YzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ulmihTS80LUtH85kGbdeWHJfQuI
mgPcch32cepY3UzuFWRh4vkdizknAOjVZ6hu7UD8xPLdjtl+1x6RwoZiwddar02w
qDLZi7ErG58zozyGU3hdIAjvtislLqKLVrDyZRGQiSQJ4CHprTUIf/sbGB612+wf
2jYX47j8ldYRrMZHG7k27Pts6L+WJmJ9ONh/9v0Zow+MNPT7nY4uCx0ZAl9ryx2+
libGh2PE7/TZz2nacDiW06GuRD/moZAjg2qsJTbZnb+a6sigUd1Cc44g6MUoVfkb
VmVwVoWlXxgeHq0HfEfJqy6gPonzK9PLXvdehsWEDlUcCBxJEMfyFl5BkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESMar4/vGZlYZbIzj4RDQcBuZwFMB8GA1UdIwQY
MBaAFCKhE148li50bk9X0eqklKBJ8DsbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFFVFhqeVdMblJ1VDFmUjZxU1VvRW53T3hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yZjA2NmMtZGM3YS00YTQ1LTg1NzQt
YTViMjk1YWVmYzAwLzEvSXFFVFhqeVdMblJ1VDFmUjZxU1VvRW53T3hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yZjA2NmMtZGM3YS00YTQ1LTg1NzQtYTViMjk1YWVmYzAw
LzEvSXFFVFhqeVdMblJ1VDFmUjZxU1VvRW53T3hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAZ0WHUW
tRgkKRZO+7MuFtAV1W1P6D+ckBT6+PDqCY62Gq5l0BHKJyD+SaMuOVt9lRt8VoIg
Y3CK9mqrTThZ9OGRaYCgKg7++WntAIPBE/nFWWwHX6oPsnm4IZ6EaNmF5/veBpfM
TKzR5pvaqKLKitYLcxW9q907PoRbzdEvTP/ACtEonX+aMhM6/Nxnq02gMlbt/l6D
NhiAffQ5RB1tQ2Cm6jdtJfCQ6gPaLsa86Tx7RDkhjRWeCeYvoQufTMIBFNe4mAiw
6DCDg/+CaMgAGtDCO/ucH+DjJSS1gsqDqrWIIP4Z1ZDIVS+e+WOM9Z19eesOxxwm
6kHj2v0B5s54Zg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:05 2025 by rpki-client