Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
File: 9IFCCQRj_g9JoTDRUYZql3F9RCo.mft (raw, json)
Hash identifier: 2KO5mHow7l88ZeagfkHOjNmLJTi1A2qESc2MsrVp+B0=
Subject key identifier: 04:48:98:44:AC:72:2F:30:05:64:DA:F9:B5:17:CC:99:4D:C5:B7:9D
Authority key identifier: F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
Certificate issuer: /CN=f48142090463fe0f49a130d151866a97717d442a
Certificate serial: 0198D4A7AD2CEFA890DE17B4B0BF2913708B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
Manifest number: 0398
Signing time: Sat 23 Aug 2025 02:00:15 +0000
Manifest this update: Sat 23 Aug 2025 02:00:15 +0000
Manifest next update: Sun 24 Aug 2025 02:00:15 +0000
Files and hashes: 1: 9IFCCQRj_g9JoTDRUYZql3F9RCo.crl (hash: SezrDh722wCjdaGtZs5ZJqFbVifdBOhooMrP1ZLcUfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ad:2c:ef:a8:90:de:17:b4:b0:bf:29:13:70:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48142090463fe0f49a130d151866a97717d442a
Validity
Not Before: Aug 23 02:00:15 2025 GMT
Not After : Aug 24 02:00:15 2025 GMT
Subject: CN=04489844ac722f300564daf9b517cc994dc5b79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:db:97:21:20:ef:13:c3:a2:db:37:43:88:15:
64:b1:d9:8a:c9:6c:c6:f2:05:13:37:d9:59:ee:c9:
6a:76:29:4f:37:c7:f4:5d:49:af:72:52:6d:81:ee:
1c:db:24:a9:10:ec:4f:8c:e7:39:2a:c7:65:6e:64:
da:8e:87:7d:e6:8e:ad:49:0b:cc:56:9b:66:c4:c4:
52:12:55:cc:72:60:69:86:d9:01:f9:81:25:7c:04:
ee:0d:21:9d:6c:ab:37:1e:0b:0b:f0:56:24:10:76:
36:50:72:5f:35:09:ae:32:ea:d1:4d:3c:cf:f4:07:
c6:ba:3d:f4:9f:91:b4:9d:e0:d8:54:61:38:a5:00:
e3:09:c5:bd:e3:11:f0:c4:e8:e7:6e:b5:2b:4d:51:
dd:2d:42:e9:2b:23:d7:17:7f:95:66:1a:57:ed:90:
ec:38:dc:26:bf:01:26:c7:0b:31:63:ee:71:a6:c9:
94:52:6c:ff:7a:bf:98:41:2b:2f:37:90:d7:d5:52:
44:17:50:46:f9:fc:90:68:b6:85:38:0f:16:25:73:
ce:75:4d:73:9c:84:61:13:7f:29:35:fd:9b:0a:b8:
35:20:ea:f1:15:82:7f:ce:b1:c0:37:5e:a5:2f:39:
84:0e:cc:27:30:e3:95:49:2c:3b:a8:fe:f4:3b:fd:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:48:98:44:AC:72:2F:30:05:64:DA:F9:B5:17:CC:99:4D:C5:B7:9D
X509v3 Authority Key Identifier:
keyid:F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:dd:13:d6:1a:45:f1:c1:57:a2:be:6c:d2:be:59:bd:bb:16:
35:bb:5f:d0:d5:a7:a6:79:98:bf:f8:f8:30:78:7b:22:48:22:
fc:6f:67:8e:c2:77:b0:cd:17:40:99:15:89:2c:f8:76:9a:ea:
67:55:1e:ec:2d:ed:12:c2:a9:5a:1c:92:b0:71:f9:f9:34:94:
29:24:47:02:d7:9d:42:18:27:02:9a:4f:a1:44:71:75:23:70:
c2:66:c0:cf:44:50:73:3b:ce:ec:44:10:b4:e2:58:9e:bb:a8:
b4:c5:b5:26:42:e6:78:db:f5:be:52:4a:9b:25:7e:e4:bd:0b:
0d:14:22:4b:f5:6e:56:0f:c3:39:52:46:4e:ec:33:3a:12:7c:
3d:50:2d:03:ef:7f:31:80:24:61:05:7e:50:06:34:82:26:57:
0f:6b:e0:1d:0a:36:27:77:f9:c8:e2:3e:fe:58:8e:d6:e4:93:
16:2f:fb:4a:fb:50:bf:da:aa:15:84:90:e4:31:a2:6e:ac:34:
35:aa:91:ea:b1:f1:0b:19:62:42:cd:30:f4:b7:33:a3:6f:c2:
86:91:43:f9:50:89:02:38:e5:21:a1:3a:59:2a:4e:5a:95:70:
db:f5:3b:5b:bb:e5:33:37:11:f2:5a:c9:81:a5:a6:11:6f:79:
aa:05:8c:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp60s76iQ3he0sL8pE3CLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODE0MjA5MDQ2M2ZlMGY0OWExMzBkMTUxODY2YTk3NzE3
ZDQ0MmEwHhcNMjUwODIzMDIwMDE1WhcNMjUwODI0MDIwMDE1WjAzMTEwLwYDVQQD
EygwNDQ4OTg0NGFjNzIyZjMwMDU2NGRhZjliNTE3Y2M5OTRkYzViNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tuXISDvE8Oi2zdDiBVksdmKyWzG
8gUTN9lZ7slqdilPN8f0XUmvclJtge4c2ySpEOxPjOc5KsdlbmTajod95o6tSQvM
VptmxMRSElXMcmBphtkB+YElfATuDSGdbKs3HgsL8FYkEHY2UHJfNQmuMurRTTzP
9AfGuj30n5G0neDYVGE4pQDjCcW94xHwxOjnbrUrTVHdLULpKyPXF3+VZhpX7ZDs
ONwmvwEmxwsxY+5xpsmUUmz/er+YQSsvN5DX1VJEF1BG+fyQaLaFOA8WJXPOdU1z
nIRhE38pNf2bCrg1IOrxFYJ/zrHAN16lLzmEDswnMOOVSSw7qP70O/1NFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARImESsci8wBWTa+bUXzJlNxbedMB8GA1UdIwQY
MBaAFPSBQgkEY/4PSaEw0VGGapdxfUQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlGQ0NRUmpfZzlKb1REUlVZWnFsM0Y5UkNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84MDhlNDEtOGZlYy00ZmZkLTg4NGYt
YzJjNzQyZTEyMmNlLzEvOUlGQ0NRUmpfZzlKb1REUlVZWnFsM0Y5UkNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC84MDhlNDEtOGZlYy00ZmZkLTg4NGYtYzJjNzQyZTEyMmNl
LzEvOUlGQ0NRUmpfZzlKb1REUlVZWnFsM0Y5UkNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQd0T1hpF
8cFXor5s0r5ZvbsWNbtf0NWnpnmYv/j4MHh7Ikgi/G9njsJ3sM0XQJkViSz4dprq
Z1Ue7C3tEsKpWhySsHH5+TSUKSRHAtedQhgnAppPoURxdSNwwmbAz0RQczvO7EQQ
tOJYnruotMW1JkLmeNv1vlJKmyV+5L0LDRQiS/VuVg/DOVJGTuwzOhJ8PVAtA+9/
MYAkYQV+UAY0giZXD2vgHQo2J3f5yOI+/liO1uSTFi/7SvtQv9qqFYSQ5DGibqw0
NaqR6rHxCxliQs0w9Lczo2/ChpFD+VCJAjjlIaE6WSpOWpVw2/U7W7vlMzcR8lrJ
gaWmEW95qgWMzw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:27 2025 by rpki-client