Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
File: IQdBCPDRRZtitsetsn1pNLoL56U.mft (raw, json)
Hash identifier: A2jXVfbnWdEjnOylLmCBO7YTdtvJSEMSq2iMs4beKJk=
Subject key identifier: 9F:5D:4A:88:97:3C:1C:4D:A2:90:33:29:9D:6F:E3:11:BA:B8:FE:6F
Authority key identifier: 21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
Certificate issuer: /CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Certificate serial: 0198D7058B253978B41CAD7EB8C4780ABB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
Manifest number: 15D8
Signing time: Sat 23 Aug 2025 13:02:01 +0000
Manifest this update: Sat 23 Aug 2025 13:02:01 +0000
Manifest next update: Sun 24 Aug 2025 13:02:01 +0000
Files and hashes: 1: IQdBCPDRRZtitsetsn1pNLoL56U.crl (hash: LlHk+QZbSkuhjy/NKpkW7QHFQO3aV56OR0p/HjU9sOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:8b:25:39:78:b4:1c:ad:7e:b8:c4:78:0a:bb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Validity
Not Before: Aug 23 13:02:01 2025 GMT
Not After : Aug 24 13:02:01 2025 GMT
Subject: CN=9f5d4a88973c1c4da29033299d6fe311bab8fe6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:37:70:d5:76:a4:59:5b:0d:18:54:1d:6c:
2c:41:45:6c:a3:ce:0f:dc:69:0d:9d:97:7e:9d:35:
9a:52:0a:39:e8:27:1d:d2:a3:7c:ec:18:bd:7f:d4:
b2:e7:92:49:f3:6f:6a:c2:ff:9b:6c:42:a2:87:8a:
34:65:ce:b9:dd:87:43:8d:12:e2:33:a7:a4:7a:65:
84:da:dd:bd:da:2c:c5:49:14:3c:da:66:6f:40:70:
e0:22:de:50:ea:4f:75:2a:ab:8d:5a:7e:74:a5:b7:
db:ad:83:95:01:2e:72:c0:93:c8:97:06:e1:52:3b:
6a:85:d7:ac:ec:d9:c6:30:a6:f2:1c:63:ec:98:e4:
aa:ff:52:23:86:1c:cc:ef:29:46:fc:ab:33:30:c0:
5b:dd:01:62:f5:09:1d:a6:31:9a:cc:eb:36:8f:2a:
3b:d4:41:44:5f:f9:52:17:34:fa:ee:97:e7:36:d7:
e0:be:7b:7b:85:b1:0b:5f:80:ee:df:d4:91:76:17:
5b:ca:95:d1:0c:03:1f:69:20:34:b6:cb:5c:65:fa:
09:5b:3f:39:da:d6:68:8d:07:34:1d:fb:49:e5:00:
9d:17:60:8e:28:13:c9:7c:20:a5:16:11:f4:a1:8d:
c4:b3:55:b8:82:b5:53:56:72:70:66:c8:26:3b:d7:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5D:4A:88:97:3C:1C:4D:A2:90:33:29:9D:6F:E3:11:BA:B8:FE:6F
X509v3 Authority Key Identifier:
keyid:21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:21:5c:59:4f:6c:20:8f:e3:23:a8:5e:f4:e3:b5:6f:04:0e:
ac:ef:c8:56:ee:e5:81:0b:3c:ce:f3:06:41:9d:e0:b5:33:0a:
cc:51:ee:53:95:8e:67:62:19:cf:9f:72:09:49:7e:13:ab:1d:
94:d8:8f:64:f8:a3:81:eb:fc:7a:96:b9:aa:48:82:7a:73:ec:
92:6d:9b:b2:0b:0e:8f:5f:8d:65:45:c1:48:b5:80:b7:10:24:
84:63:7a:33:0f:8d:26:be:95:36:a4:e0:01:5b:43:44:04:46:
21:25:93:08:cc:ce:a5:14:28:6d:b0:b2:6b:bd:ab:43:fb:ff:
b2:c8:b0:db:b7:41:db:e4:18:e2:d7:b2:cd:cb:1b:94:38:8b:
81:8a:f0:5b:23:1a:41:da:fe:f6:33:d1:b3:1f:a5:31:a8:f2:
54:a1:56:8f:5b:fe:e2:d4:54:d9:bc:0b:2c:07:25:a0:fb:c1:
1a:aa:e0:cc:a6:08:8f:26:d3:4a:01:92:ff:f0:0c:78:58:88:
17:f6:33:20:6e:96:27:ba:fc:7c:03:ef:7a:fc:07:bf:c7:74:
ea:e9:0d:15:87:11:fc:b8:9d:df:04:f9:80:11:0b:56:75:72:
2a:82:f4:e4:70:81:99:4c:0b:29:cb:7d:84:28:a7:94:e8:e3:
5b:bb:cc:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBYslOXi0HK1+uMR4CrtxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDc0MTA4ZjBkMTQ1OWI2MmI2YzdhZGIyN2Q2OTM0YmEw
YmU3YTUwHhcNMjUwODIzMTMwMjAxWhcNMjUwODI0MTMwMjAxWjAzMTEwLwYDVQQD
Eyg5ZjVkNGE4ODk3M2MxYzRkYTI5MDMzMjk5ZDZmZTMxMWJhYjhmZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6E3cNV2pFlbDRhUHWwsQUVso84P
3GkNnZd+nTWaUgo56Ccd0qN87Bi9f9Sy55JJ829qwv+bbEKih4o0Zc653YdDjRLi
M6ekemWE2t292izFSRQ82mZvQHDgIt5Q6k91KquNWn50pbfbrYOVAS5ywJPIlwbh
Ujtqhdes7NnGMKbyHGPsmOSq/1IjhhzM7ylG/KszMMBb3QFi9QkdpjGazOs2jyo7
1EFEX/lSFzT67pfnNtfgvnt7hbELX4Du39SRdhdbypXRDAMfaSA0tstcZfoJWz85
2tZojQc0HftJ5QCdF2COKBPJfCClFhH0oY3Es1W4grVTVnJwZsgmO9cZOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9dSoiXPBxNopAzKZ1v4xG6uP5vMB8GA1UdIwQY
MBaAFCEHQQjw0UWbYrbHrbJ9aTS6C+elMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFkQkNQRFJSWnRpdHNldHNuMXBOTG9MNTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZWZiNDQtMDEyYi00MTVmLTgyMjAt
YzYyMjBlMTg1Njk0LzEvSVFkQkNQRFJSWnRpdHNldHNuMXBOTG9MNTZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC82ZWZiNDQtMDEyYi00MTVmLTgyMjAtYzYyMjBlMTg1Njk0
LzEvSVFkQkNQRFJSWnRpdHNldHNuMXBOTG9MNTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCFcWU9s
II/jI6he9OO1bwQOrO/IVu7lgQs8zvMGQZ3gtTMKzFHuU5WOZ2IZz59yCUl+E6sd
lNiPZPijgev8epa5qkiCenPskm2bsgsOj1+NZUXBSLWAtxAkhGN6Mw+NJr6VNqTg
AVtDRARGISWTCMzOpRQobbCya72rQ/v/ssiw27dB2+QY4teyzcsblDiLgYrwWyMa
Qdr+9jPRsx+lMajyVKFWj1v+4tRU2bwLLAcloPvBGqrgzKYIjybTSgGS//AMeFiI
F/YzIG6WJ7r8fAPvevwHv8d06ukNFYcR/Lid3wT5gBELVnVyKoL05HCBmUwLKct9
hCinlOjjW7vMAQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:13:02 2025 by rpki-client