Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
File: IsOFEHH5YIjHtxGcteFGPLq5jFk.mft (raw, json)
Hash identifier: 3dK7ICRluOwS+p0ls3znBpypVZHQO1xfDeoVstIk0Is=
Subject key identifier: EF:6D:4C:5F:AB:6D:CC:6D:8B:94:F7:40:8F:E8:FE:2F:5F:FE:71:62
Authority key identifier: 22:C3:85:10:71:F9:60:88:C7:B7:11:9C:B5:E1:46:3C:BA:B9:8C:59
Certificate issuer: /CN=22c3851071f96088c7b7119cb5e1463cbab98c59
Certificate serial: 0198D660F5D87B76CAC43EEA8F0823C4E882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
Manifest number: 1097
Signing time: Sat 23 Aug 2025 10:02:15 +0000
Manifest this update: Sat 23 Aug 2025 10:02:15 +0000
Manifest next update: Sun 24 Aug 2025 10:02:15 +0000
Files and hashes: 1: IsOFEHH5YIjHtxGcteFGPLq5jFk.crl (hash: bm9KXl45sWIUESWpsH0lneTH6Ls1YP/2OZ8Kn5Ps7rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f5:d8:7b:76:ca:c4:3e:ea:8f:08:23:c4:e8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c3851071f96088c7b7119cb5e1463cbab98c59
Validity
Not Before: Aug 23 10:02:15 2025 GMT
Not After : Aug 24 10:02:15 2025 GMT
Subject: CN=ef6d4c5fab6dcc6d8b94f7408fe8fe2f5ffe7162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:6e:24:96:59:f2:3f:5f:86:99:e0:b1:51:
1a:1e:a1:c8:79:c0:ab:b8:b9:64:72:3b:39:94:78:
7e:05:34:63:52:be:23:81:1e:e5:c3:79:9f:91:16:
1b:20:67:89:b7:3c:61:cf:28:d8:15:6f:53:6b:4a:
0d:ab:c9:58:bb:db:8a:ff:41:27:85:56:a2:e7:f8:
23:aa:d6:e1:67:4a:00:c7:11:84:2b:1d:6b:95:87:
17:18:49:bb:ab:e6:e8:86:14:72:36:cc:9d:b4:d2:
9c:5b:df:f2:30:d6:23:78:f2:0e:e0:81:e5:3b:76:
0c:c1:61:1a:18:19:52:46:04:21:dc:b8:26:05:25:
00:60:d2:36:61:e3:f9:28:bd:94:8d:7a:89:fe:4d:
fc:9f:eb:c4:08:5a:c4:de:a2:20:b5:85:95:bb:c5:
dd:28:f9:d1:f5:04:4e:54:d6:14:35:b5:34:f7:a7:
95:e2:d5:96:32:cc:e6:44:11:fb:87:5e:25:ce:c4:
2d:76:2b:b0:98:bc:f0:27:fa:c2:97:a2:a3:63:c1:
f4:8e:e0:cd:40:74:3b:e7:ac:52:19:e9:d2:e4:1d:
a8:2c:5b:a3:68:cf:13:61:e8:6f:51:ce:8e:a5:71:
7d:be:10:63:d6:d7:84:dc:cd:2e:b2:f0:38:9a:f4:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6D:4C:5F:AB:6D:CC:6D:8B:94:F7:40:8F:E8:FE:2F:5F:FE:71:62
X509v3 Authority Key Identifier:
keyid:22:C3:85:10:71:F9:60:88:C7:B7:11:9C:B5:E1:46:3C:BA:B9:8C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:03:7f:23:1a:e6:b1:36:be:ef:47:96:48:0a:9c:9b:cf:01:
e0:54:65:89:8b:d1:eb:ce:65:cf:bd:a9:6c:36:8c:ff:f4:ca:
96:b2:0a:db:20:3c:1d:f1:a5:5e:1e:40:f1:cb:0f:fb:10:de:
ea:fe:f7:a2:35:16:db:51:97:e2:3c:6e:7d:67:3c:dc:53:49:
c1:b5:27:09:f5:56:42:91:ca:db:f5:5a:66:1a:1a:0e:c2:f0:
a6:2e:0b:f3:23:28:77:b0:12:a0:db:03:c3:82:f7:31:c5:42:
ad:0e:02:c3:52:a9:59:60:10:cb:b2:7f:26:f6:ad:a3:6b:e3:
b1:89:e7:8a:ae:c2:72:f7:00:aa:7b:a8:ed:a2:88:4a:cb:12:
a8:ac:0f:34:cd:22:8a:19:29:5f:37:0c:b3:b9:3c:eb:1e:e3:
ec:b4:61:39:1e:ba:f3:55:18:a5:4e:a8:ff:43:cb:65:35:6e:
34:1d:00:14:57:fb:fb:3e:7a:4d:09:60:3b:13:4f:d8:e6:a8:
d3:7a:77:29:bb:f3:ff:10:0b:8d:8f:96:0e:ed:ad:8c:52:7a:
25:9e:b5:14:cb:33:35:d4:d2:2d:b1:11:ea:6d:49:9a:74:55:
28:d1:60:ea:3a:41:2c:59:29:56:a8:fa:4e:fe:0a:55:24:f8:
d1:53:6c:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYPXYe3bKxD7qjwgjxOiCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzM4NTEwNzFmOTYwODhjN2I3MTE5Y2I1ZTE0NjNjYmFi
OThjNTkwHhcNMjUwODIzMTAwMjE1WhcNMjUwODI0MTAwMjE1WjAzMTEwLwYDVQQD
EyhlZjZkNGM1ZmFiNmRjYzZkOGI5NGY3NDA4ZmU4ZmUyZjVmZmU3MTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuhuJJZZ8j9fhpngsVEaHqHIecCr
uLlkcjs5lHh+BTRjUr4jgR7lw3mfkRYbIGeJtzxhzyjYFW9Ta0oNq8lYu9uK/0En
hVai5/gjqtbhZ0oAxxGEKx1rlYcXGEm7q+bohhRyNsydtNKcW9/yMNYjePIO4IHl
O3YMwWEaGBlSRgQh3LgmBSUAYNI2YeP5KL2UjXqJ/k38n+vECFrE3qIgtYWVu8Xd
KPnR9QROVNYUNbU096eV4tWWMszmRBH7h14lzsQtdiuwmLzwJ/rCl6KjY8H0juDN
QHQ756xSGenS5B2oLFujaM8TYehvUc6OpXF9vhBj1teE3M0usvA4mvQgYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9tTF+rbcxti5T3QI/o/i9f/nFiMB8GA1UdIwQY
MBaAFCLDhRBx+WCIx7cRnLXhRjy6uYxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNPRkVISDVZSWpIdHhHY3RlRkdQTHE1akZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mMGZmNWEtNTE2Yy00YjhlLWI5YTIt
Y2JmZGUwMjkwNzA4LzEvSXNPRkVISDVZSWpIdHhHY3RlRkdQTHE1akZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mMGZmNWEtNTE2Yy00YjhlLWI5YTItY2JmZGUwMjkwNzA4
LzEvSXNPRkVISDVZSWpIdHhHY3RlRkdQTHE1akZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwN/Ixrm
sTa+70eWSAqcm88B4FRliYvR685lz72pbDaM//TKlrIK2yA8HfGlXh5A8csP+xDe
6v73ojUW21GX4jxufWc83FNJwbUnCfVWQpHK2/VaZhoaDsLwpi4L8yMod7ASoNsD
w4L3McVCrQ4Cw1KpWWAQy7J/Jvato2vjsYnniq7CcvcAqnuo7aKISssSqKwPNM0i
ihkpXzcMs7k86x7j7LRhOR6681UYpU6o/0PLZTVuNB0AFFf7+z56TQlgOxNP2Oao
03p3Kbvz/xALjY+WDu2tjFJ6JZ61FMszNdTSLbER6m1JmnRVKNFg6jpBLFkpVqj6
Tv4KVST40VNsfA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:34 2025 by rpki-client