Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
File: iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft (raw, json)
Hash identifier: g+d4HhsiLneMyD2Lq8TsGal+l4H2DsP5IE2pjZbgz1c=
Subject key identifier: 13:AF:82:91:70:D7:BA:8F:A6:C6:E2:00:85:D4:1C:CA:C6:5B:30:7C
Authority key identifier: 88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4
Certificate issuer: /CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
Certificate serial: 0198D6CD594C938A7A47EF42C2E31C373DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
Manifest number: 10CB
Signing time: Sat 23 Aug 2025 12:00:38 +0000
Manifest this update: Sat 23 Aug 2025 12:00:38 +0000
Manifest next update: Sun 24 Aug 2025 12:00:38 +0000
Files and hashes: 1: iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl (hash: kKh0OwfI1Klk2N3SdUme9magKwOhvGphtcDSrVyLm7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:59:4c:93:8a:7a:47:ef:42:c2:e3:1c:37:3d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
Validity
Not Before: Aug 23 12:00:38 2025 GMT
Not After : Aug 24 12:00:38 2025 GMT
Subject: CN=13af829170d7ba8fa6c6e20085d41ccac65b307c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:a9:72:98:b8:8a:7e:12:de:3c:ce:97:a8:
08:63:4a:95:c6:cd:15:29:8a:67:fa:bc:fd:d3:4a:
0a:8c:ac:6c:98:88:69:39:e7:da:a0:ad:bd:24:82:
6c:16:b8:ca:b8:2a:e0:f2:d7:27:9b:78:d8:e9:ca:
58:35:df:f6:fb:2a:f4:31:00:e1:de:ad:68:7d:1b:
b0:e2:ac:64:fc:aa:e8:5c:0f:e9:bf:c3:8b:f9:b8:
75:65:59:93:5a:cd:f2:7f:9a:d9:9b:2e:92:ca:94:
24:ca:9f:a0:71:56:91:5b:42:47:30:ba:94:87:43:
2b:65:51:b0:7d:dc:a7:c9:c3:d6:f1:3d:9c:65:dd:
e8:24:28:e2:f1:91:03:c1:a6:8c:36:84:7a:cd:8e:
f2:c8:16:42:05:3c:5d:20:7c:80:f6:4d:99:57:e4:
4b:e5:70:bf:a3:d0:4d:38:7e:f9:f8:1b:3e:b1:5f:
3c:09:c7:27:17:ac:99:d8:ce:f2:92:40:26:ed:c1:
c3:08:e1:f0:66:19:96:e5:c4:44:9b:40:e0:38:1c:
ec:bb:4c:32:aa:7f:bc:86:0d:34:8a:7d:b3:c1:35:
88:fb:ef:ac:1b:69:99:e1:75:05:b3:bf:ff:e8:2d:
f2:74:94:c2:9f:9a:1e:71:dd:6d:a7:71:f7:89:2e:
81:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AF:82:91:70:D7:BA:8F:A6:C6:E2:00:85:D4:1C:CA:C6:5B:30:7C
X509v3 Authority Key Identifier:
keyid:88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:50:73:94:5b:e5:65:b1:da:9e:81:e3:73:02:d3:df:b0:d4:
d3:a7:84:99:07:55:7c:68:a3:0d:a1:b2:35:c6:5d:ad:9a:00:
17:3b:07:44:71:5c:52:d3:36:01:a5:c1:fe:28:e6:fb:8d:4e:
bc:e8:f1:c4:ba:52:2f:f1:30:34:30:f3:2f:f2:d1:85:38:12:
cd:29:43:b7:cf:e5:17:d3:e9:51:b9:e5:8c:50:be:8f:0d:46:
69:8c:2a:b6:5d:e4:1a:c3:5c:4e:42:e1:42:f0:49:d4:e0:39:
96:ed:82:f6:0a:f4:18:c1:f7:7f:00:c8:19:9a:62:39:ea:ca:
a9:67:dd:c5:b1:3b:31:10:64:b2:18:b0:b9:1b:a0:1f:98:fc:
e7:84:40:f0:7f:12:52:77:9a:d3:62:f4:90:26:c0:ba:a4:f5:
ca:0d:09:93:26:35:e9:6b:2d:63:40:16:9f:4e:00:f5:3b:ce:
a3:be:29:b3:cc:56:3b:9c:7c:82:46:dd:69:3a:f2:fc:1d:77:
be:3d:77:18:91:51:5d:db:ef:0c:73:f9:0d:64:00:6a:59:dc:
d6:c7:73:e8:e6:3d:92:e0:93:57:19:d3:dc:51:81:56:03:5a:
9b:20:b7:4c:3f:01:db:c6:0d:c2:6e:5a:0d:6a:96:42:43:8b:
35:80:81:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzVlMk4p6R+9CwuMcNz3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4OTM0N2ViNjNkYjBlNjEyMzBjNWMzMWU5ZTE5ZGZjZTdl
OTQxYzQwHhcNMjUwODIzMTIwMDM4WhcNMjUwODI0MTIwMDM4WjAzMTEwLwYDVQQD
EygxM2FmODI5MTcwZDdiYThmYTZjNmUyMDA4NWQ0MWNjYWM2NWIzMDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG2pcpi4in4S3jzOl6gIY0qVxs0V
KYpn+rz900oKjKxsmIhpOefaoK29JIJsFrjKuCrg8tcnm3jY6cpYNd/2+yr0MQDh
3q1ofRuw4qxk/KroXA/pv8OL+bh1ZVmTWs3yf5rZmy6SypQkyp+gcVaRW0JHMLqU
h0MrZVGwfdynycPW8T2cZd3oJCji8ZEDwaaMNoR6zY7yyBZCBTxdIHyA9k2ZV+RL
5XC/o9BNOH75+Bs+sV88CccnF6yZ2M7ykkAm7cHDCOHwZhmW5cREm0DgOBzsu0wy
qn+8hg00in2zwTWI+++sG2mZ4XUFs7//6C3ydJTCn5oecd1tp3H3iS6BgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOvgpFw17qPpsbiAIXUHMrGWzB8MB8GA1UdIwQY
MBaAFIiTR+tj2w5hIwxcMenhnfzn6UHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUpOSDYyUGJEbUVqREZ3eDZlR2RfT2ZwUWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82OWRhYTctY2ZhZi00ZWY5LThmNWYt
ZDVlYjYyMWZjM2FjLzEvaUpOSDYyUGJEbUVqREZ3eDZlR2RfT2ZwUWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82OWRhYTctY2ZhZi00ZWY5LThmNWYtZDVlYjYyMWZjM2Fj
LzEvaUpOSDYyUGJEbUVqREZ3eDZlR2RfT2ZwUWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFBzlFvl
ZbHanoHjcwLT37DU06eEmQdVfGijDaGyNcZdrZoAFzsHRHFcUtM2AaXB/ijm+41O
vOjxxLpSL/EwNDDzL/LRhTgSzSlDt8/lF9PpUbnljFC+jw1GaYwqtl3kGsNcTkLh
QvBJ1OA5lu2C9gr0GMH3fwDIGZpiOerKqWfdxbE7MRBkshiwuRugH5j854RA8H8S
Unea02L0kCbAuqT1yg0JkyY16WstY0AWn04A9TvOo74ps8xWO5x8gkbdaTry/B13
vj13GJFRXdvvDHP5DWQAalnc1sdz6OY9kuCTVxnT3FGBVgNamyC3TD8B28YNwm5a
DWqWQkOLNYCB/w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:34:02 2025 by rpki-client