Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
File: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft (raw, json)
Hash identifier: 9UgXUdLkZ2Mtn0qZAoCQbpPhIslMM5wJN2NxHB1QZNg=
Subject key identifier: 84:12:F5:68:F1:B9:12:88:FD:43:24:09:17:0F:FA:17:9C:CA:6F:D0
Authority key identifier: 8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
Certificate issuer: /CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Certificate serial: 0198D65F04CC86489ED62361E9DD4EC581FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
Manifest number: 0D80
Signing time: Sat 23 Aug 2025 10:00:07 +0000
Manifest this update: Sat 23 Aug 2025 10:00:07 +0000
Manifest next update: Sun 24 Aug 2025 10:00:07 +0000
Files and hashes: 1: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl (hash: 9ZXJ6Co0AXVVlVjzljUfn4GXXpuZ3MmqFx87B93gZTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:04:cc:86:48:9e:d6:23:61:e9:dd:4e:c5:81:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Validity
Not Before: Aug 23 10:00:07 2025 GMT
Not After : Aug 24 10:00:07 2025 GMT
Subject: CN=8412f568f1b91288fd432409170ffa179cca6fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:33:1e:66:06:3c:0e:73:bb:a3:db:82:40:
32:72:c1:1b:9c:e0:6b:e9:04:05:54:dd:e0:32:f9:
96:36:9f:fb:0e:87:32:77:67:3d:31:b7:e0:d4:99:
6e:fa:b3:e9:39:f0:bb:9a:ef:5f:4b:85:ef:a7:c5:
84:6b:64:86:50:54:f4:4f:a0:16:f8:37:75:5b:fc:
84:ad:0d:68:35:ea:85:f4:c4:6c:46:69:15:dd:a5:
f8:23:4c:66:aa:ba:89:d6:f2:c6:2b:07:18:b1:c8:
5a:4e:1f:63:60:ce:08:2b:85:23:bf:4b:4d:44:19:
2d:df:fb:b8:11:ea:34:22:d4:4c:4b:06:dc:54:ea:
c5:b4:a6:90:8e:96:e6:6f:a2:0e:43:d8:8a:09:43:
7c:d7:8c:06:02:de:b4:94:f8:cf:75:2f:a3:79:33:
13:dd:39:38:44:8b:f9:39:c9:88:84:9a:3c:07:75:
65:45:fe:af:3b:51:96:5c:2d:50:9e:e4:77:1d:ec:
d3:fb:ec:74:b7:fc:54:d1:15:5f:13:d7:22:a6:9d:
54:ff:5b:ba:b6:ef:61:95:e7:66:d1:9b:96:6f:c1:
68:ab:00:9e:24:2b:f1:d6:5a:be:30:a7:dd:d3:d6:
79:6b:f7:6d:59:ff:af:e6:0c:03:74:63:8e:84:43:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:12:F5:68:F1:B9:12:88:FD:43:24:09:17:0F:FA:17:9C:CA:6F:D0
X509v3 Authority Key Identifier:
keyid:8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ea:ff:e5:7c:5f:16:4d:c7:05:72:40:11:cd:18:13:c8:65:
87:0e:b8:c8:69:ef:45:b6:59:01:5d:85:4b:c8:15:8d:ad:89:
8a:bb:90:ca:be:c7:9b:35:51:6a:86:8a:b7:dd:e7:73:6f:72:
d4:18:1d:7c:44:9b:ef:84:c9:77:b1:33:f7:06:15:50:0b:92:
fd:8e:2b:b6:2d:76:e9:ea:58:ab:c4:1c:6a:85:cf:e9:9b:8d:
5e:a8:f9:6e:4e:fe:d4:53:38:f3:c6:f5:9e:fe:bb:97:91:b7:
a8:27:1f:80:96:c4:e0:fc:0f:24:6d:15:e2:f4:63:68:63:c6:
51:47:16:16:af:c2:3f:08:8d:83:08:56:43:47:30:43:f7:18:
6f:7e:4d:04:ad:f1:ee:de:7a:a9:d3:3d:35:63:8d:2a:43:6e:
86:a5:e1:b1:0b:ae:84:22:fc:4e:55:69:ed:5e:13:37:c5:0b:
9e:0f:79:a1:0e:32:1b:48:e3:64:23:12:cb:d5:8a:40:79:6c:
0c:39:0e:ac:f7:2c:16:2d:31:ce:f7:b7:0b:b4:ed:a5:c5:a6:
ee:38:a1:e1:fd:03:9e:70:b7:80:d4:0d:89:bf:d5:1a:ea:70:
af:f7:76:ea:b7:a3:1d:ef:62:34:c0:87:ed:f2:3c:40:6d:f9:
11:72:c5:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXwTMhkie1iNh6d1OxYH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjljZjFlYTY1ZjA4ZTI5MGEwNDE1Mjc3ZTY1ZWM5NWI3
ODBkNzcwHhcNMjUwODIzMTAwMDA3WhcNMjUwODI0MTAwMDA3WjAzMTEwLwYDVQQD
Eyg4NDEyZjU2OGYxYjkxMjg4ZmQ0MzI0MDkxNzBmZmExNzljY2E2ZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sUzHmYGPA5zu6PbgkAycsEbnOBr
6QQFVN3gMvmWNp/7Docyd2c9Mbfg1Jlu+rPpOfC7mu9fS4Xvp8WEa2SGUFT0T6AW
+Dd1W/yErQ1oNeqF9MRsRmkV3aX4I0xmqrqJ1vLGKwcYschaTh9jYM4IK4Ujv0tN
RBkt3/u4Eeo0ItRMSwbcVOrFtKaQjpbmb6IOQ9iKCUN814wGAt60lPjPdS+jeTMT
3Tk4RIv5OcmIhJo8B3VlRf6vO1GWXC1QnuR3HezT++x0t/xU0RVfE9cipp1U/1u6
tu9hledm0ZuWb8FoqwCeJCvx1lq+MKfd09Z5a/dtWf+v5gwDdGOOhEM55wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQS9WjxuRKI/UMkCRcP+hecym/QMB8GA1UdIwQY
MBaAFItpzx6mXwjikKBBUnfmXslbeA13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJuUEhxWmZDT0tRb0VGU2QtWmV5VnQ0RFhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85M2UzMDEtNjJmOC00OWYxLWEwZjct
N2VkNmVmNzNmZjZkLzEvaTJuUEhxWmZDT0tRb0VGU2QtWmV5VnQ0RFhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS85M2UzMDEtNjJmOC00OWYxLWEwZjctN2VkNmVmNzNmZjZk
LzEvaTJuUEhxWmZDT0tRb0VGU2QtWmV5VnQ0RFhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoer/5Xxf
Fk3HBXJAEc0YE8hlhw64yGnvRbZZAV2FS8gVja2JiruQyr7HmzVRaoaKt93nc29y
1BgdfESb74TJd7Ez9wYVUAuS/Y4rti126epYq8QcaoXP6ZuNXqj5bk7+1FM488b1
nv67l5G3qCcfgJbE4PwPJG0V4vRjaGPGUUcWFq/CPwiNgwhWQ0cwQ/cYb35NBK3x
7t56qdM9NWONKkNuhqXhsQuuhCL8TlVp7V4TN8ULng95oQ4yG0jjZCMSy9WKQHls
DDkOrPcsFi0xzve3C7TtpcWm7jih4f0DnnC3gNQNib/VGupwr/d26rejHe9iNMCH
7fI8QG35EXLFdA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:05:33 2025 by rpki-client