Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier: wtQlcC2AMhnx7F2a4mmV7IL8q33NI86xxwZsJxnYwac=
Subject key identifier: D1:42:1D:EF:C5:28:5A:70:EF:A1:3A:27:28:2F:14:4F:59:45:4C:5A
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 0198D54E27DE55FCCC280ED17513932A5121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number: 0D06
Signing time: Sat 23 Aug 2025 05:02:05 +0000
Manifest this update: Sat 23 Aug 2025 05:02:05 +0000
Manifest next update: Sun 24 Aug 2025 05:02:05 +0000
Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: 1T3wDMeCnecXtpcCjmphOCvKXr5leDb21JJHCBTOWOA=)
2: maYu8dN9neYyc8DtbRu2KTpDdQk.roa (hash: H5U+8VR9PAI4QlkVpTR8DC6LqpMXq6tJVvxgrK/vIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:27:de:55:fc:cc:28:0e:d1:75:13:93:2a:51:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: Aug 23 05:02:05 2025 GMT
Not After : Aug 24 05:02:05 2025 GMT
Subject: CN=d1421defc5285a70efa13a27282f144f59454c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:67:c6:f6:0d:19:b3:6b:5f:a4:d5:48:15:49:
38:5d:56:79:94:2d:02:2f:45:3e:63:78:0e:54:56:
24:1e:72:ec:46:22:10:de:f6:7a:f1:1d:95:2a:5a:
83:b3:df:99:1a:8e:76:e9:10:d9:4b:0e:93:2d:ee:
48:a5:46:57:32:a0:fd:97:58:90:90:1a:46:b2:fb:
a8:d2:95:2d:38:27:20:95:d9:8f:84:f1:0f:f3:97:
24:f3:b5:07:2c:26:bc:ca:7c:53:e9:11:1c:f6:e1:
74:5b:62:73:22:ab:fb:09:96:c4:19:08:89:65:59:
ed:0b:e7:8c:38:ea:bb:85:35:58:fc:a9:b0:5e:8b:
81:d2:cf:2d:69:d4:88:28:21:af:87:51:86:f0:7d:
33:7c:cd:50:95:40:d9:86:0d:80:41:de:f1:31:b4:
5c:d8:23:7e:93:ed:80:c8:e5:b8:e4:7e:e6:83:7c:
33:9d:c6:51:8f:c6:b4:d8:27:58:e1:53:5c:cf:d8:
c5:71:dd:ed:85:7c:3d:68:80:6b:44:fb:49:88:6b:
17:a3:15:d4:2c:bd:f6:2e:36:46:95:93:d1:3c:e5:
c9:11:ce:a7:c2:7f:7f:08:14:50:dc:29:2d:0d:fc:
bd:76:d6:34:ec:64:1c:50:c3:cf:7e:cf:5d:4a:98:
35:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:42:1D:EF:C5:28:5A:70:EF:A1:3A:27:28:2F:14:4F:59:45:4C:5A
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4c:bd:d6:cb:aa:84:8b:92:b9:c7:4c:8a:75:87:3a:8a:c7:
5e:5b:33:a6:ae:28:d3:fc:6d:46:62:b8:96:bb:0f:0b:57:0f:
9d:04:0d:fc:fc:fd:47:d1:1f:d8:2e:97:48:ae:2c:4a:c9:e5:
00:0c:f0:10:06:00:dd:46:c2:bb:9f:98:d7:6e:6f:51:cd:b0:
ee:81:a4:24:8a:f4:0f:ff:3b:2b:6b:e4:57:10:31:0b:8a:ef:
54:7b:5a:93:c2:0a:26:c6:09:b5:4a:14:e5:24:73:8a:a5:04:
1e:ad:65:fe:cc:69:4a:79:d7:49:fa:e5:37:65:6c:77:83:ad:
ea:78:5b:fa:e0:c8:7d:b1:78:19:64:11:a9:4f:0a:b2:77:34:
59:b5:39:3a:ad:5e:2e:cd:a4:25:43:eb:7f:55:f0:26:e1:94:
7a:1c:c1:f0:9c:75:ce:52:f8:9b:05:36:e6:9d:57:be:6a:9e:
76:66:36:73:39:ba:e3:92:93:dc:64:5d:fb:7f:d5:2c:f7:d8:
03:a5:ea:c1:97:b9:5e:96:26:01:a8:65:6b:11:06:53:c4:60:
6c:a0:d2:5c:25:98:32:ef:7b:24:d2:86:ac:69:61:00:78:4f:
1a:9c:e9:34:f7:61:9a:33:2f:4e:4d:a8:71:d2:a3:aa:41:3b:
aa:3e:a4:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTifeVfzMKA7RdROTKlEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDFmNDM5ZGViYWZmNTg4MDM5NWQ3OGYwYmJmYWQ4Y2E3
NjA4YmYwHhcNMjUwODIzMDUwMjA1WhcNMjUwODI0MDUwMjA1WjAzMTEwLwYDVQQD
EyhkMTQyMWRlZmM1Mjg1YTcwZWZhMTNhMjcyODJmMTQ0ZjU5NDU0YzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGfG9g0Zs2tfpNVIFUk4XVZ5lC0C
L0U+Y3gOVFYkHnLsRiIQ3vZ68R2VKlqDs9+ZGo526RDZSw6TLe5IpUZXMqD9l1iQ
kBpGsvuo0pUtOCcgldmPhPEP85ck87UHLCa8ynxT6REc9uF0W2JzIqv7CZbEGQiJ
ZVntC+eMOOq7hTVY/KmwXouB0s8tadSIKCGvh1GG8H0zfM1QlUDZhg2AQd7xMbRc
2CN+k+2AyOW45H7mg3wzncZRj8a02CdY4VNcz9jFcd3thXw9aIBrRPtJiGsXoxXU
LL32LjZGlZPRPOXJEc6nwn9/CBRQ3CktDfy9dtY07GQcUMPPfs9dSpg1ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFCHe/FKFpw76E6JygvFE9ZRUxaMB8GA1UdIwQY
MBaAFCEB9Dneuv9YgDldePC7+tjKdgi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83OGM0MTQtOWIwOS00Nzc1LWE1NTgt
ZTNkZWZiN2UyNTE4LzEvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83OGM0MTQtOWIwOS00Nzc1LWE1NTgtZTNkZWZiN2UyNTE4
LzEvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfky91suq
hIuSucdMinWHOorHXlszpq4o0/xtRmK4lrsPC1cPnQQN/Pz9R9Ef2C6XSK4sSsnl
AAzwEAYA3UbCu5+Y125vUc2w7oGkJIr0D/87K2vkVxAxC4rvVHtak8IKJsYJtUoU
5SRziqUEHq1l/sxpSnnXSfrlN2Vsd4Ot6nhb+uDIfbF4GWQRqU8Ksnc0WbU5Oq1e
Ls2kJUPrf1XwJuGUehzB8Jx1zlL4mwU25p1XvmqedmY2czm645KT3GRd+3/VLPfY
A6XqwZe5XpYmAahlaxEGU8RgbKDSXCWYMu97JNKGrGlhAHhPGpzpNPdhmjMvTk2o
cdKjqkE7qj6k/w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:40 2025 by rpki-client