Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
File: 9IOBPbTT97DwLDH4W1JDww9F4lI.mft (raw, json)
Hash identifier: T6wP+yz/ecUDlP1FU9eyG3M8XtysvSSP0M5P8iQXsb4=
Subject key identifier: BD:86:1A:03:D5:51:9F:1C:B9:E5:69:0F:63:6B:F3:1C:87:87:F9:00
Authority key identifier: F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
Certificate issuer: /CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Certificate serial: 0198D660109C1816EEEEDF5141672427E5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:16 +0000
Manifest this update: Sat 23 Aug 2025 10:01:16 +0000
Manifest next update: Sun 24 Aug 2025 10:01:16 +0000
Files and hashes: 1: 9IOBPbTT97DwLDH4W1JDww9F4lI.crl (hash: MkPnmbxhUlrs2iud1ekSd5Rz+5WeFFL27QVQbIeui20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:10:9c:18:16:ee:ee:df:51:41:67:24:27:e5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Validity
Not Before: Aug 23 10:01:16 2025 GMT
Not After : Aug 24 10:01:16 2025 GMT
Subject: CN=bd861a03d5519f1cb9e5690f636bf31c8787f900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:81:bf:1e:b7:2d:5c:68:27:8f:b6:fa:aa:ae:
94:0a:f8:37:19:a7:6a:02:3d:b3:0b:0e:37:a3:f4:
60:b4:29:98:5a:6f:8e:00:f3:33:1f:33:72:b4:e2:
93:88:a5:aa:ce:58:9e:e5:49:0d:41:8e:14:47:d0:
8c:2f:42:d5:e7:ec:ff:78:79:d6:03:d9:78:81:0e:
60:67:d5:13:e0:e6:74:e2:10:c4:6f:db:71:9c:23:
5b:28:9b:d6:03:aa:ea:e8:75:08:bd:d0:74:56:2a:
84:16:8b:c1:b0:4e:df:14:98:5c:df:13:62:fc:60:
ff:94:d2:61:9e:6b:b2:fe:84:f5:e6:22:b3:30:cc:
1a:cf:f8:70:d2:43:d6:a8:47:e1:84:3f:ac:03:4f:
27:98:85:65:9c:04:66:eb:c1:e0:a4:85:e6:c2:e0:
db:d7:56:69:ad:6a:73:93:ed:5f:c6:d2:9e:60:de:
f0:2a:2d:5b:8d:09:28:28:c7:a3:b2:bd:cb:86:94:
cd:10:56:55:91:f3:41:08:18:ce:1c:f7:7e:14:64:
05:b1:c0:c0:42:8e:76:88:a6:cb:a9:90:89:06:63:
cf:8f:f1:21:f0:3d:fe:5c:7e:77:33:3e:11:a0:cb:
fb:9f:a2:e6:b2:bd:dd:0d:54:e2:eb:26:16:04:ee:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:86:1A:03:D5:51:9F:1C:B9:E5:69:0F:63:6B:F3:1C:87:87:F9:00
X509v3 Authority Key Identifier:
keyid:F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d7:d8:82:47:bd:97:75:27:93:d8:bd:ce:9f:c9:6d:74:7e:
fc:27:73:45:d4:a7:7c:9a:5f:56:2e:0a:af:ff:69:93:b3:2a:
43:bb:be:18:c6:ae:e4:a4:bb:7b:76:b2:48:1c:54:5c:c0:dd:
c2:bb:05:58:06:ac:17:63:dc:d5:49:89:fc:a5:6e:7a:b4:78:
f9:e2:70:d7:c9:83:0d:b2:87:03:22:ae:e6:35:a3:b9:d1:7b:
61:4b:13:ee:86:59:c6:03:20:9a:a1:f2:58:2f:75:92:5b:d1:
9c:e4:d9:19:57:64:2e:50:7c:23:a6:a7:f9:e8:84:3f:ef:ff:
90:be:ce:45:69:ed:88:ec:52:24:a5:b6:81:14:79:ab:84:15:
89:6d:21:28:ac:65:72:0d:7c:41:3c:65:18:49:1a:2e:9c:46:
9f:79:08:cd:bd:7a:e1:a4:c8:97:1d:a1:2a:e2:3b:5e:cb:37:
45:bf:a6:c0:94:f6:13:84:2c:68:cc:da:09:af:47:3b:f5:3b:
f8:7d:05:37:b3:50:59:3d:4d:be:14:ef:da:c4:69:ce:89:bc:
95:9d:53:ba:94:80:82:6f:71:b3:a7:da:4e:dd:9d:97:ac:06:
be:e4:f3:00:e0:6b:93:d7:50:0b:70:f7:03:30:d0:a1:83:51:
de:96:eb:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYBCcGBbu7t9RQWckJ+W9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODM4MTNkYjRkM2Y3YjBmMDJjMzFmODViNTI0M2MzMGY0
NWUyNTIwHhcNMjUwODIzMTAwMTE2WhcNMjUwODI0MTAwMTE2WjAzMTEwLwYDVQQD
EyhiZDg2MWEwM2Q1NTE5ZjFjYjllNTY5MGY2MzZiZjMxYzg3ODdmOTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IG/HrctXGgnj7b6qq6UCvg3Gadq
Aj2zCw43o/RgtCmYWm+OAPMzHzNytOKTiKWqzlie5UkNQY4UR9CML0LV5+z/eHnW
A9l4gQ5gZ9UT4OZ04hDEb9txnCNbKJvWA6rq6HUIvdB0ViqEFovBsE7fFJhc3xNi
/GD/lNJhnmuy/oT15iKzMMwaz/hw0kPWqEfhhD+sA08nmIVlnARm68HgpIXmwuDb
11ZprWpzk+1fxtKeYN7wKi1bjQkoKMejsr3LhpTNEFZVkfNBCBjOHPd+FGQFscDA
Qo52iKbLqZCJBmPPj/Eh8D3+XH53Mz4RoMv7n6Lmsr3dDVTi6yYWBO5qzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2GGgPVUZ8cueVpD2Nr8xyHh/kAMB8GA1UdIwQY
MBaAFPSDgT200/ew8Cwx+FtSQ8MPReJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mZDJhNzMtMjE1Ny00NmNmLTk4MWEt
ZTcxOGM4NDNhMjk0LzEvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mZDJhNzMtMjE1Ny00NmNmLTk4MWEtZTcxOGM4NDNhMjk0
LzEvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtfYgke9
l3Unk9i9zp/JbXR+/CdzRdSnfJpfVi4Kr/9pk7MqQ7u+GMau5KS7e3aySBxUXMDd
wrsFWAasF2Pc1UmJ/KVuerR4+eJw18mDDbKHAyKu5jWjudF7YUsT7oZZxgMgmqHy
WC91klvRnOTZGVdkLlB8I6an+eiEP+//kL7ORWntiOxSJKW2gRR5q4QViW0hKKxl
cg18QTxlGEkaLpxGn3kIzb164aTIlx2hKuI7Xss3Rb+mwJT2E4QsaMzaCa9HO/U7
+H0FN7NQWT1NvhTv2sRpzom8lZ1TupSAgm9xs6faTt2dl6wGvuTzAOBrk9dQC3D3
AzDQoYNR3pbrBw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:51:48 2025 by rpki-client