Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
File: iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft (raw, json)
Hash identifier: 6f35TQIr70ipN/cRUa+vTxBPoZMrIir6zwpgWp1aDJ8=
Subject key identifier: 35:27:02:A4:A2:6F:BE:2C:81:1F:DF:0B:9F:3C:A7:60:E7:7E:AF:A5
Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Certificate issuer: /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Certificate serial: 0198D6CD338680239FF052365AF50826C625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 12:00:28 +0000
Manifest this update: Sat 23 Aug 2025 12:00:28 +0000
Manifest next update: Sun 24 Aug 2025 12:00:28 +0000
Files and hashes: 1: RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa (hash: pKnXAopaFCsi1rLxZMLLXoTv9xoOBoXWRjgeegBslqw=)
2: iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl (hash: VVE0Pq643Lbei/0cTOlivESk1R/AQ26y+SlwpjPrxHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:33:86:80:23:9f:f0:52:36:5a:f5:08:26:c6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Validity
Not Before: Aug 23 12:00:28 2025 GMT
Not After : Aug 24 12:00:28 2025 GMT
Subject: CN=352702a4a26fbe2c811fdf0b9f3ca760e77eafa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:78:1c:d0:72:ae:d5:ad:63:65:c9:2d:b8:
ea:21:b6:43:65:68:82:0c:dd:fa:82:22:b2:c2:9c:
c1:b9:21:4e:a7:54:43:4c:6b:29:f6:5e:7b:37:f9:
d7:b5:97:ac:ec:7d:78:18:41:b4:09:de:22:c4:74:
3f:9b:c3:5c:24:53:18:95:4c:a8:9d:f9:40:c0:b2:
51:79:c6:56:e8:0a:38:d7:38:72:1a:3e:bc:01:8d:
8c:57:1e:e8:3b:9a:8b:13:22:f8:a9:29:c0:c9:65:
14:df:61:8c:30:65:44:25:c8:ee:ce:c9:40:a5:be:
23:2b:96:3e:21:21:c9:d6:b3:a9:57:ad:13:1b:b2:
70:f1:15:8c:29:33:2a:35:05:ec:e8:13:34:d7:21:
0a:68:c0:e2:d6:50:02:d7:0f:02:7d:a8:54:c6:50:
28:46:55:62:b0:ea:af:2f:1d:09:dc:93:f5:48:1c:
f7:07:38:86:d1:75:b2:82:1f:0e:fe:5c:b9:9f:72:
f7:ba:d2:d6:73:ee:56:5f:92:ca:3c:ab:7e:6c:11:
a5:a3:cc:11:4e:fe:08:56:a6:f7:07:df:21:f9:9e:
73:8c:9e:ba:62:eb:f3:1a:9e:a0:3f:1b:88:27:73:
6e:e1:14:a5:a3:7b:2b:26:1f:70:fa:ce:45:c5:59:
f0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:27:02:A4:A2:6F:BE:2C:81:1F:DF:0B:9F:3C:A7:60:E7:7E:AF:A5
X509v3 Authority Key Identifier:
keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:70:a8:fb:96:86:97:0c:23:3e:51:ef:ea:1a:12:a1:0a:ee:
49:06:a6:76:a7:f2:60:e9:13:3e:da:c6:14:f4:22:28:20:7e:
bc:5d:15:04:f9:73:f8:b8:e7:12:ea:ba:f6:a2:21:a5:07:c2:
63:9f:ca:2a:ac:a8:58:87:7c:98:f1:5c:8d:f2:c7:e7:51:aa:
c5:11:1d:a2:fc:47:93:97:d4:e6:b7:cc:d7:31:79:22:df:ac:
7c:1f:d2:e4:7e:ea:de:d1:25:da:57:e9:e7:27:3a:8d:79:2b:
fa:8f:97:33:41:ae:69:56:01:35:39:55:f3:b2:8e:aa:58:7c:
f5:85:d4:24:7a:68:8e:36:f6:30:3e:e8:a6:47:94:e2:33:90:
2c:1a:0c:78:91:51:17:1f:e7:41:81:de:8a:37:36:5f:f1:16:
ca:6a:54:3e:30:46:52:7d:32:fd:01:53:10:58:95:1e:d3:03:
9a:73:91:c2:14:93:1d:c3:6b:3f:67:3c:7b:87:00:44:f9:dc:
b1:18:d6:37:f7:31:f1:09:00:c9:a2:1a:ad:57:5c:2b:da:1e:
a9:85:22:e9:73:2e:4c:c6:6d:e4:38:29:31:c5:72:05:9c:59:
1c:00:bc:28:60:25:3f:19:fe:e9:6d:94:1f:2b:fd:f9:c3:1e:
1a:7e:f7:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzTOGgCOf8FI2WvUIJsYlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZDVlMDlhZjgyYTk2OTE4Yzg2YTY0N2I0ZWRjZDhlYmIy
MzgyMGQwHhcNMjUwODIzMTIwMDI4WhcNMjUwODI0MTIwMDI4WjAzMTEwLwYDVQQD
EygzNTI3MDJhNGEyNmZiZTJjODExZmRmMGI5ZjNjYTc2MGU3N2VhZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpF4HNByrtWtY2XJLbjqIbZDZWiC
DN36giKywpzBuSFOp1RDTGsp9l57N/nXtZes7H14GEG0Cd4ixHQ/m8NcJFMYlUyo
nflAwLJRecZW6Ao41zhyGj68AY2MVx7oO5qLEyL4qSnAyWUU32GMMGVEJcjuzslA
pb4jK5Y+ISHJ1rOpV60TG7Jw8RWMKTMqNQXs6BM01yEKaMDi1lAC1w8CfahUxlAo
RlVisOqvLx0J3JP1SBz3BziG0XWygh8O/ly5n3L3utLWc+5WX5LKPKt+bBGlo8wR
Tv4IVqb3B98h+Z5zjJ66YuvzGp6gPxuIJ3Nu4RSlo3srJh9w+s5FxVnwqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUnAqSib74sgR/fC588p2Dnfq+lMB8GA1UdIwQY
MBaAFIjV4Jr4KpaRjIamR7TtzY67I4INMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ZGJlOTMtNWRmOC00OGEzLTg2MTMt
MjkzYjYyNzk0ODUwLzEvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83ZGJlOTMtNWRmOC00OGEzLTg2MTMtMjkzYjYyNzk0ODUw
LzEvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHCo+5aG
lwwjPlHv6hoSoQruSQamdqfyYOkTPtrGFPQiKCB+vF0VBPlz+LjnEuq69qIhpQfC
Y5/KKqyoWId8mPFcjfLH51GqxREdovxHk5fU5rfM1zF5It+sfB/S5H7q3tEl2lfp
5yc6jXkr+o+XM0GuaVYBNTlV87KOqlh89YXUJHpojjb2MD7opkeU4jOQLBoMeJFR
Fx/nQYHeijc2X/EWympUPjBGUn0y/QFTEFiVHtMDmnORwhSTHcNrP2c8e4cARPnc
sRjWN/cx8QkAyaIarVdcK9oeqYUi6XMuTMZt5DgpMcVyBZxZHAC8KGAlPxn+6W2U
Hyv9+cMeGn73SQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:50:49 2025 by rpki-client