Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: yVMYxlIHp6M1VwkXOkjio+6xpRWiIejBRaAup1ysh0I=
Subject key identifier: 00:38:94:94:0B:7E:AC:8A:9D:6D:8B:66:3E:AD:02:FF:30:FE:A1:E7
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 0198D4735D6B6FCAAB2F5A0330F0DF254501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 01:03:06 +0000
Manifest this update: Sat 23 Aug 2025 01:03:06 +0000
Manifest next update: Sun 24 Aug 2025 01:03:06 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: 7RGlOpZWRi1sLRbC09yLvzHO8DoS1h8Ten2zanjp0ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:5d:6b:6f:ca:ab:2f:5a:03:30:f0:df:25:45:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Aug 23 01:03:06 2025 GMT
Not After : Aug 24 01:03:06 2025 GMT
Subject: CN=003894940b7eac8a9d6d8b663ead02ff30fea1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f5:47:47:5d:47:02:6f:db:d1:66:d6:e8:e2:
d9:1b:4e:79:f6:e3:d6:aa:9c:83:9e:f4:4b:bd:be:
40:14:83:f3:29:bc:5a:40:e6:fe:bf:00:a8:79:1f:
f0:bd:48:c9:90:ee:88:20:d4:3d:f5:a6:33:8c:fe:
05:6c:d4:63:f0:b2:11:83:f1:02:73:4b:c1:ad:80:
b8:ce:44:25:94:34:b6:4e:fb:69:a7:07:2b:55:e4:
93:37:51:3c:1c:5c:07:46:3d:6b:53:58:43:e2:4d:
2d:46:a7:20:89:63:96:77:5e:bf:03:67:66:a5:f1:
89:e5:a8:df:78:4e:9c:3c:f9:9a:ea:c1:e4:33:e0:
8d:c3:17:78:9f:75:11:f6:b1:3c:89:66:42:64:a1:
81:02:f3:ee:a9:65:30:7c:15:f3:77:5d:1f:f5:35:
ae:64:28:69:75:12:ec:ba:3b:35:c2:f3:26:61:12:
3c:b3:c9:22:b4:9c:77:04:06:c9:45:cc:04:68:56:
47:ed:ea:4f:d9:a2:7a:95:f8:4a:f0:5d:19:e9:9c:
b5:b3:81:d3:73:53:85:ce:76:e4:5f:3c:b8:17:43:
26:00:cd:bc:02:ce:26:0b:1f:41:85:d8:e7:4a:f9:
1b:bf:62:bd:0c:e6:8f:10:46:a7:af:48:f0:2f:ca:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:38:94:94:0B:7E:AC:8A:9D:6D:8B:66:3E:AD:02:FF:30:FE:A1:E7
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c8:a1:7a:15:04:57:24:71:fe:38:05:e5:27:43:47:c6:96:
07:62:59:9c:51:82:30:7e:1d:33:aa:a6:a5:36:5d:b0:ac:48:
c8:b1:68:60:f3:e2:c6:7d:27:93:2c:54:b1:62:1f:7f:fa:45:
c0:dc:a0:2e:d4:20:c5:ca:85:1e:b7:52:e7:48:0e:85:64:b3:
e3:f4:a1:2f:df:83:f4:7e:77:20:23:81:cf:7d:0f:29:b4:15:
d3:27:c0:97:b3:01:06:ff:62:41:5d:f1:ee:c7:ab:22:f8:63:
e1:1f:64:92:f4:6d:44:0a:13:da:e2:bb:cd:df:30:c8:f7:18:
32:b4:4a:7d:ec:0c:24:9e:b5:c5:81:4f:df:62:1e:48:db:ba:
a7:ab:ee:3d:8b:78:0d:16:aa:18:c5:32:de:9c:60:0d:d9:76:
e6:42:c1:4e:f2:2d:76:7a:45:82:3b:a1:02:b3:84:5e:c4:60:
4b:8a:1c:95:cc:c3:d6:ad:e6:e0:d2:49:ea:f6:7c:49:2a:64:
57:9d:be:3a:34:91:06:69:c4:a5:5c:91:35:b7:6e:3c:91:6b:
1c:19:65:1c:57:b1:ff:55:77:24:18:8b:32:20:1a:10:f1:31:
f6:56:cc:43:23:c3:65:6d:e6:e4:6b:bc:c5:f8:bc:d6:91:6d:
89:73:16:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc11rb8qrL1oDMPDfJUUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZGM5MWU2NjY0OTRkMGRjNTZhMmI4MWQyMjlhYmQ2ZWUz
NWY4NGMwHhcNMjUwODIzMDEwMzA2WhcNMjUwODI0MDEwMzA2WjAzMTEwLwYDVQQD
EygwMDM4OTQ5NDBiN2VhYzhhOWQ2ZDhiNjYzZWFkMDJmZjMwZmVhMWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/VHR11HAm/b0WbW6OLZG0559uPW
qpyDnvRLvb5AFIPzKbxaQOb+vwCoeR/wvUjJkO6IINQ99aYzjP4FbNRj8LIRg/EC
c0vBrYC4zkQllDS2TvtppwcrVeSTN1E8HFwHRj1rU1hD4k0tRqcgiWOWd16/A2dm
pfGJ5ajfeE6cPPma6sHkM+CNwxd4n3UR9rE8iWZCZKGBAvPuqWUwfBXzd10f9TWu
ZChpdRLsujs1wvMmYRI8s8kitJx3BAbJRcwEaFZH7epP2aJ6lfhK8F0Z6Zy1s4HT
c1OFznbkXzy4F0MmAM28As4mCx9BhdjnSvkbv2K9DOaPEEanr0jwL8pBiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAA4lJQLfqyKnW2LZj6tAv8w/qHnMB8GA1UdIwQY
MBaAFCDckeZmSU0NxWorgdIpq9buNfhMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU55UjVtWkpUUTNGYWl1QjBpbXIxdTQxLUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy81ZmY3MDgtY2I3YS00MWU5LTkwOTMt
MWQwMGVhODQxZDNlLzEvSU55UjVtWkpUUTNGYWl1QjBpbXIxdTQxLUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy81ZmY3MDgtY2I3YS00MWU5LTkwOTMtMWQwMGVhODQxZDNl
LzEvSU55UjVtWkpUUTNGYWl1QjBpbXIxdTQxLUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasihehUE
VyRx/jgF5SdDR8aWB2JZnFGCMH4dM6qmpTZdsKxIyLFoYPPixn0nkyxUsWIff/pF
wNygLtQgxcqFHrdS50gOhWSz4/ShL9+D9H53ICOBz30PKbQV0yfAl7MBBv9iQV3x
7serIvhj4R9kkvRtRAoT2uK7zd8wyPcYMrRKfewMJJ61xYFP32IeSNu6p6vuPYt4
DRaqGMUy3pxgDdl25kLBTvItdnpFgjuhArOEXsRgS4oclczD1q3m4NJJ6vZ8SSpk
V52+OjSRBmnEpVyRNbduPJFrHBllHFex/1V3JBiLMiAaEPEx9lbMQyPDZW3m5Gu8
xfi81pFtiXMW8A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:48 2025 by rpki-client