Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
File: i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft (raw, json)
Hash identifier: rD2ykDXTmPZDyb1C4Ba+Nn+NotHePKP/Mn9Fn1+6XNw=
Subject key identifier: 25:6E:94:BC:BF:6C:46:20:25:AF:AD:38:3F:FE:25:BE:98:21:82:2B
Authority key identifier: 8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
Certificate issuer: /CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Certificate serial: 0198D5BC5563E947C6DF45350C5E625D2A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
Manifest number: 0B21
Signing time: Sat 23 Aug 2025 07:02:26 +0000
Manifest this update: Sat 23 Aug 2025 07:02:26 +0000
Manifest next update: Sun 24 Aug 2025 07:02:26 +0000
Files and hashes: 1: i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl (hash: KNvJGr58W/MC3Q5sdD5Ii+EfiFAxMHOuSH1oMJ7Da6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:55:63:e9:47:c6:df:45:35:0c:5e:62:5d:2a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Validity
Not Before: Aug 23 07:02:26 2025 GMT
Not After : Aug 24 07:02:26 2025 GMT
Subject: CN=256e94bcbf6c462025afad383ffe25be9821822b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:13:5a:8b:c3:1e:65:cf:f4:87:18:dd:e0:
10:da:44:58:1e:8d:b2:80:80:da:11:38:a7:09:55:
bb:a3:75:dd:27:0f:14:27:02:26:9e:96:6b:21:5c:
5d:28:c6:e9:46:01:cb:a3:a7:9d:ec:05:16:89:71:
7c:b5:84:db:ce:d8:1f:5b:0e:4f:9b:54:87:4d:c9:
02:3f:6e:c2:e8:fc:29:65:61:e9:88:84:4d:81:d7:
89:9f:c8:e8:27:17:f3:df:09:09:21:c6:55:25:47:
d3:19:9a:a3:7b:fd:17:a2:2d:5f:76:7d:84:f2:dd:
7d:a6:d6:82:4d:c8:94:d1:35:31:2b:b3:cf:74:52:
3b:f8:38:12:f8:96:7e:f5:d7:48:b9:2b:f1:4b:cd:
14:8e:6b:c0:2b:0f:89:db:84:0d:35:2c:a2:bc:43:
34:b2:62:6d:62:e3:4a:06:19:80:95:2a:59:c0:dd:
5f:0e:7b:06:ce:4f:4d:e0:a0:37:87:e8:82:77:f0:
1f:b7:70:29:83:b5:75:94:2c:f8:24:92:ae:a4:14:
8b:f8:87:3d:72:fa:35:e6:8f:3f:aa:6b:b6:8d:98:
2f:38:88:c3:03:4b:98:39:60:a3:d0:03:06:8c:6f:
1a:0e:1d:12:f5:8a:67:a5:b4:60:28:ba:0b:18:4e:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6E:94:BC:BF:6C:46:20:25:AF:AD:38:3F:FE:25:BE:98:21:82:2B
X509v3 Authority Key Identifier:
keyid:8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:28:51:d8:22:2c:69:bd:63:ae:3e:4e:13:1d:a4:e8:9f:56:
e0:8b:de:db:3a:96:fe:4e:b3:17:1e:25:9c:31:54:58:18:93:
f4:82:ed:3b:fc:7f:49:18:16:04:46:9b:fe:c9:fc:d3:a4:af:
51:f9:35:c1:6d:23:b0:5e:46:39:0e:7b:2c:f4:01:c9:46:4a:
18:1b:f4:83:46:71:97:70:93:06:2e:f8:bd:3f:6a:7a:a8:0d:
36:93:63:58:65:fd:11:d0:91:70:87:0d:6d:c6:45:0a:b0:03:
cf:c6:a6:8e:75:c2:3d:76:69:bb:92:5d:e5:64:86:44:bc:6b:
7e:b2:7d:c7:b3:91:ec:eb:e3:67:76:4a:f8:2b:64:38:7f:e7:
ce:21:2c:d3:74:43:53:f2:07:11:15:6d:4f:8f:d0:e1:c0:0f:
22:36:69:ea:ae:5b:81:d1:90:19:40:3c:60:94:67:0b:58:c6:
3b:68:98:03:7f:6d:27:81:fd:f0:67:66:37:47:e4:b7:95:58:
65:0e:9e:e5:de:3c:52:09:05:86:08:8c:f4:66:0b:8b:47:da:
21:58:c4:3b:2b:90:9d:a1:ec:ac:07:ce:b2:dd:31:17:d0:ad:
77:97:dd:55:ec:f1:35:94:fb:90:34:52:e3:bd:75:48:93:a0:
ab:ec:dc:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvFVj6UfG30U1DF5iXSodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZDg5MzFmNjM1Nzk0MjhiZjA4Y2NiMTk5YTNhOThkY2Jh
NmI4MjQwHhcNMjUwODIzMDcwMjI2WhcNMjUwODI0MDcwMjI2WjAzMTEwLwYDVQQD
EygyNTZlOTRiY2JmNmM0NjIwMjVhZmFkMzgzZmZlMjViZTk4MjE4MjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCgTWovDHmXP9IcY3eAQ2kRYHo2y
gIDaETinCVW7o3XdJw8UJwImnpZrIVxdKMbpRgHLo6ed7AUWiXF8tYTbztgfWw5P
m1SHTckCP27C6PwpZWHpiIRNgdeJn8joJxfz3wkJIcZVJUfTGZqje/0Xoi1fdn2E
8t19ptaCTciU0TUxK7PPdFI7+DgS+JZ+9ddIuSvxS80UjmvAKw+J24QNNSyivEM0
smJtYuNKBhmAlSpZwN1fDnsGzk9N4KA3h+iCd/Aft3Apg7V1lCz4JJKupBSL+Ic9
cvo15o8/qmu2jZgvOIjDA0uYOWCj0AMGjG8aDh0S9YpnpbRgKLoLGE5/CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVulLy/bEYgJa+tOD/+Jb6YIYIrMB8GA1UdIwQY
MBaAFIvYkx9jV5QovwjMsZmjqY3LprgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlpVEgyTlhsQ2lfQ015eG1hT3BqY3VtdUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83YWM3YmItMjFkYy00YTExLTk3OTEt
NGVlMTZkNmM4MGE2LzEvaTlpVEgyTlhsQ2lfQ015eG1hT3BqY3VtdUNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83YWM3YmItMjFkYy00YTExLTk3OTEtNGVlMTZkNmM4MGE2
LzEvaTlpVEgyTlhsQ2lfQ015eG1hT3BqY3VtdUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByhR2CIs
ab1jrj5OEx2k6J9W4Ive2zqW/k6zFx4lnDFUWBiT9ILtO/x/SRgWBEab/sn806Sv
Ufk1wW0jsF5GOQ57LPQByUZKGBv0g0Zxl3CTBi74vT9qeqgNNpNjWGX9EdCRcIcN
bcZFCrADz8amjnXCPXZpu5Jd5WSGRLxrfrJ9x7OR7OvjZ3ZK+CtkOH/nziEs03RD
U/IHERVtT4/Q4cAPIjZp6q5bgdGQGUA8YJRnC1jGO2iYA39tJ4H98GdmN0fkt5VY
ZQ6e5d48UgkFhgiM9GYLi0faIVjEOyuQnaHsrAfOst0xF9Ctd5fdVezxNZT7kDRS
4711SJOgq+zcTg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:50 2025 by rpki-client