Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
File: IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json)
Hash identifier: Puvw3HDnkuPdbeq1ltUE8vznFDS4o427bpfFS6G5m5E=
Subject key identifier: 3B:12:A6:63:8A:A0:A0:54:3E:A5:7C:B5:68:CF:5E:28:32:CA:88:91
Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495
Certificate serial: 0198D4E0B42A4C994651D83F34DE59DF0817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
Manifest number: 05A5
Signing time: Sat 23 Aug 2025 03:02:32 +0000
Manifest this update: Sat 23 Aug 2025 03:02:32 +0000
Manifest next update: Sun 24 Aug 2025 03:02:32 +0000
Files and hashes: 1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: 2PX0fOWC5q5ueAsX9ILoNxq1hytvu29mpEhOiktK1Eo=)
2: VHq92EwfoMDVXDmr3YDQVJFW754.roa (hash: JpzdYMai2LkiTqQiR+iyiuscebR4y7kmN03dvpWGwHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b4:2a:4c:99:46:51:d8:3f:34:de:59:df:08:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495
Validity
Not Before: Aug 23 03:02:32 2025 GMT
Not After : Aug 24 03:02:32 2025 GMT
Subject: CN=3b12a6638aa0a0543ea57cb568cf5e2832ca8891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:f9:02:de:a0:9c:9f:ac:e7:80:07:d0:08:
2f:cc:02:97:e1:20:77:27:33:ba:af:96:79:86:76:
d5:9a:84:53:fe:c4:6f:e0:8f:d3:1f:0c:1a:ed:61:
95:fd:ff:9d:1b:e5:1f:69:20:49:9a:3d:70:85:36:
55:d1:6a:de:71:bd:a8:4d:4b:cd:37:cb:2f:73:d2:
1f:f9:8e:36:2f:a1:8c:76:52:72:62:5c:26:5f:02:
59:74:17:76:bb:63:db:00:98:b8:95:43:82:c3:11:
ad:77:7b:38:f4:fe:f9:66:ae:c5:40:8f:93:6e:f5:
94:06:2c:fb:c9:fc:11:b6:6e:a5:8d:6a:05:f3:82:
8f:28:f8:0c:51:14:f9:68:f7:e3:1f:a1:77:58:6e:
71:63:40:28:28:5f:4a:e0:fa:73:49:b2:91:9e:d3:
dd:04:f7:30:fc:c7:88:20:66:4b:b2:70:2d:2b:29:
d7:b4:09:5c:81:76:d0:34:25:7c:80:10:17:88:7b:
8d:84:bc:af:8c:3d:1e:37:16:91:44:b2:60:5e:da:
33:4d:57:cc:ea:38:e6:cc:a3:17:d6:32:d9:2e:6b:
c8:fc:02:00:dc:30:06:95:1f:a4:66:12:0f:dc:ae:
b2:64:0d:58:c0:0b:b5:db:7a:51:c7:6d:c1:25:9f:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:A6:63:8A:A0:A0:54:3E:A5:7C:B5:68:CF:5E:28:32:CA:88:91
X509v3 Authority Key Identifier:
keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:13:f3:3b:1b:2a:69:75:13:8b:d0:5e:09:42:0f:6c:fc:6c:
4b:d4:e2:38:4e:4d:f5:83:ba:23:b3:a4:ab:01:00:98:44:23:
c4:ea:45:21:3d:58:b5:96:21:0a:5f:e6:b7:6b:87:92:6d:bd:
32:5a:bf:b1:04:f5:69:1f:3f:87:66:51:fb:3e:23:83:e2:23:
7d:50:95:8f:65:57:a6:22:c2:9c:84:97:91:4b:f7:d1:8a:83:
c6:57:b8:9a:d4:d7:5f:d5:36:87:f7:68:f4:2f:86:a2:88:0e:
f6:cf:e8:0c:3f:37:61:44:72:82:39:0f:ce:96:05:63:3e:be:
53:13:ee:c4:43:e8:af:95:27:cf:be:b3:6d:7b:11:79:f3:61:
7a:15:26:f1:88:cf:83:68:8d:0d:8a:bb:cc:56:39:ef:ed:48:
af:ef:fd:f5:1c:e2:f0:2e:e2:39:f6:95:9f:99:7f:f4:c2:f5:
d7:33:1b:16:de:1a:09:79:f7:92:c0:00:d0:9a:81:91:88:3d:
d2:3f:d4:45:4f:6b:e1:c0:9b:aa:c0:52:63:13:a0:7a:8b:19:
66:8b:ce:1b:f7:87:e4:f0:e2:98:65:fb:c8:06:73:d5:b2:4a:
54:8f:49:75:a2:66:11:d3:2e:de:5c:da:9f:b0:c5:fb:1a:63:
60:a6:3d:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4LQqTJlGUdg/NN5Z3wgXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZmI0YTBjNDZlYTkxZTcwNjBmYjI5NDI2YTEzMjMzODUy
Njg0OTUwHhcNMjUwODIzMDMwMjMyWhcNMjUwODI0MDMwMjMyWjAzMTEwLwYDVQQD
EygzYjEyYTY2MzhhYTBhMDU0M2VhNTdjYjU2OGNmNWUyODMyY2E4ODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCH5At6gnJ+s54AH0AgvzAKX4SB3
JzO6r5Z5hnbVmoRT/sRv4I/THwwa7WGV/f+dG+UfaSBJmj1whTZV0Wrecb2oTUvN
N8svc9If+Y42L6GMdlJyYlwmXwJZdBd2u2PbAJi4lUOCwxGtd3s49P75Zq7FQI+T
bvWUBiz7yfwRtm6ljWoF84KPKPgMURT5aPfjH6F3WG5xY0AoKF9K4PpzSbKRntPd
BPcw/MeIIGZLsnAtKynXtAlcgXbQNCV8gBAXiHuNhLyvjD0eNxaRRLJgXtozTVfM
6jjmzKMX1jLZLmvI/AIA3DAGlR+kZhIP3K6yZA1YwAu123pRx23BJZ9FhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsSpmOKoKBUPqV8tWjPXigyyoiRMB8GA1UdIwQY
MBaAFCD7SgxG6pHnBg+ylCahMjOFJoSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVB0S0RFYnFrZWNHRDdLVUpxRXlNNFVtaEpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wYjM1YzUtODk5MC00ZTc2LWFlZWUt
ZmNhZjRjZGQxNjYzLzEvSVB0S0RFYnFrZWNHRDdLVUpxRXlNNFVtaEpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wYjM1YzUtODk5MC00ZTc2LWFlZWUtZmNhZjRjZGQxNjYz
LzEvSVB0S0RFYnFrZWNHRDdLVUpxRXlNNFVtaEpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhPzOxsq
aXUTi9BeCUIPbPxsS9TiOE5N9YO6I7OkqwEAmEQjxOpFIT1YtZYhCl/mt2uHkm29
Mlq/sQT1aR8/h2ZR+z4jg+IjfVCVj2VXpiLCnISXkUv30YqDxle4mtTXX9U2h/do
9C+GoogO9s/oDD83YURygjkPzpYFYz6+UxPuxEPor5Unz76zbXsRefNhehUm8YjP
g2iNDYq7zFY57+1Ir+/99Rzi8C7iOfaVn5l/9ML11zMbFt4aCXn3ksAA0JqBkYg9
0j/URU9r4cCbqsBSYxOgeosZZovOG/eH5PDimGX7yAZz1bJKVI9JdaJmEdMu3lza
n7DF+xpjYKY9WQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:04 2025 by rpki-client