Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: pwzmTMd2kUX5ESKuUn0oKwTHZ0zYhe+0DsQcILS9enY=
Subject key identifier: AD:28:CB:86:72:D4:59:05:34:63:71:5A:18:F8:56:31:64:B1:97:40
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 0199FBEAE0BA4F101D2D801F7FB01DDA8CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:01:37 +0000
Manifest this update: Sun 19 Oct 2025 10:01:37 +0000
Manifest next update: Mon 20 Oct 2025 10:01:37 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: n0D7/gqiDu0iPyY6bYuGcIU0f8jtHVHDhP5bDTWLPw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e0:ba:4f:10:1d:2d:80:1f:7f:b0:1d:da:8c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Oct 19 10:01:37 2025 GMT
Not After : Oct 20 10:01:37 2025 GMT
Subject: CN=ad28cb8672d459053463715a18f8563164b19740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:34:d7:67:7d:63:25:f4:4d:e2:63:22:20:
0a:ed:8f:d7:db:61:2a:5b:bf:00:d4:7e:6a:19:9d:
9c:30:32:a4:7a:16:5e:28:87:19:8e:5e:b8:25:72:
96:64:e9:94:8f:98:59:3b:a6:4e:27:89:08:5d:bb:
ec:34:ab:29:17:dc:cd:1c:74:96:d2:d4:ac:d3:93:
3d:be:9d:4d:60:5d:9b:e0:8d:88:cc:cc:e3:cd:cb:
12:f7:14:6e:55:d2:26:6f:23:39:57:63:9b:94:eb:
cd:3c:47:69:bb:53:31:38:0f:88:53:6a:4f:c6:89:
d7:f7:dc:f9:46:52:46:93:bc:1c:a4:d2:52:93:9e:
e4:a3:0a:8c:fc:75:91:c3:1f:08:77:80:84:d4:de:
3e:c4:e9:33:8a:bc:08:95:bf:ea:25:a4:99:df:29:
11:ff:34:11:a2:0b:07:ff:4c:a3:22:16:2a:a9:aa:
a7:92:aa:33:c2:a4:fe:d6:75:f3:4d:34:63:0f:84:
3f:4d:86:8a:9e:fc:b9:f3:0f:24:28:49:09:2b:6e:
8d:25:3a:cb:42:cf:36:d2:30:15:3a:95:d8:e3:9c:
f2:fd:9c:4b:e5:89:b1:18:a4:2d:be:37:89:10:f7:
09:cf:e8:b8:18:22:d1:35:59:ce:90:fc:ce:64:57:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:28:CB:86:72:D4:59:05:34:63:71:5A:18:F8:56:31:64:B1:97:40
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:af:53:db:7a:98:a6:21:8a:26:88:f9:3b:00:a8:a9:3e:e5:
62:17:a6:1f:6f:63:66:17:2b:27:b3:8c:a8:32:a5:2e:5f:33:
f8:3c:71:21:57:0e:f1:fe:c5:6c:2f:5f:de:1c:74:c1:ba:7b:
47:d7:15:04:ce:3f:16:3b:e1:10:52:b2:ba:a9:b9:52:85:53:
62:8a:f2:6c:d0:8a:7c:14:98:f2:d1:8a:e9:c6:c8:c7:01:b2:
07:b3:25:60:d7:8f:28:8c:33:24:3b:2f:8b:77:03:a4:15:bb:
a8:c5:dc:be:8a:ce:55:b5:90:d1:71:6c:0e:98:65:78:90:dc:
0e:88:70:5a:6d:67:4f:98:7c:42:2f:46:ae:35:d0:72:02:1b:
ff:ef:03:cb:d2:ca:9e:94:68:38:aa:2c:7a:fd:03:8f:f2:98:
10:95:e9:27:f4:a0:c4:0d:65:30:62:b0:b7:e6:27:35:10:b0:
93:c6:32:aa:af:30:68:20:a7:99:48:b9:bd:60:cd:66:3c:c5:
d0:93:94:15:7e:f0:b5:9b:67:fb:f5:76:87:86:02:dd:02:62:
84:87:38:90:45:81:0e:56:f6:24:0d:97:2c:60:e0:ea:1f:33:
97:7e:75:17:96:50:a7:cf:4f:b9:4f:18:e5:b6:5e:9f:f5:35:
12:24:50:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76uC6TxAdLYAff7Ad2ozlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGIyMjE3MDBiMjgxZjgyM2UzMjJhMzIyMjFhODY3ZTVi
MDc5YTYwHhcNMjUxMDE5MTAwMTM3WhcNMjUxMDIwMTAwMTM3WjAzMTEwLwYDVQQD
EyhhZDI4Y2I4NjcyZDQ1OTA1MzQ2MzcxNWExOGY4NTYzMTY0YjE5NzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx88012d9YyX0TeJjIiAK7Y/X22Eq
W78A1H5qGZ2cMDKkehZeKIcZjl64JXKWZOmUj5hZO6ZOJ4kIXbvsNKspF9zNHHSW
0tSs05M9vp1NYF2b4I2IzMzjzcsS9xRuVdImbyM5V2OblOvNPEdpu1MxOA+IU2pP
xonX99z5RlJGk7wcpNJSk57kowqM/HWRwx8Id4CE1N4+xOkzirwIlb/qJaSZ3ykR
/zQRogsH/0yjIhYqqaqnkqozwqT+1nXzTTRjD4Q/TYaKnvy58w8kKEkJK26NJTrL
Qs820jAVOpXY45zy/ZxL5YmxGKQtvjeJEPcJz+i4GCLRNVnOkPzOZFc0KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0oy4Zy1FkFNGNxWhj4VjFksZdAMB8GA1UdIwQY
MBaAFCCLIhcAsoH4I+MioyIhqGflsHmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYt
OWIyYTlmNDZhNDgzLzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYtOWIyYTlmNDZhNDgz
LzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYa9T23qY
piGKJoj5OwCoqT7lYhemH29jZhcrJ7OMqDKlLl8z+DxxIVcO8f7FbC9f3hx0wbp7
R9cVBM4/FjvhEFKyuqm5UoVTYorybNCKfBSY8tGK6cbIxwGyB7MlYNePKIwzJDsv
i3cDpBW7qMXcvorOVbWQ0XFsDphleJDcDohwWm1nT5h8Qi9GrjXQcgIb/+8Dy9LK
npRoOKosev0Dj/KYEJXpJ/SgxA1lMGKwt+YnNRCwk8Yyqq8waCCnmUi5vWDNZjzF
0JOUFX7wtZtn+/V2h4YC3QJihIc4kEWBDlb2JA2XLGDg6h8zl351F5ZQp89PuU8Y
5bZen/U1EiRQ7A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:05 2025 by rpki-client