Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
File: mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft (raw, json)
Hash identifier: YeKuKg9jtnpJsceu8d98rGZ8IAUUxaM/jGnLKbRG+yU=
Subject key identifier: 9C:4F:6D:05:0C:26:43:B7:91:93:EB:B8:3C:C3:B9:67:2C:93:A3:A4
Authority key identifier: 99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
Certificate issuer: /CN=9972148c7362c2c9399bb3af741592c42516c547
Certificate serial: 0198D5BC08C871557C01A572D19F88CEBA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
Manifest number: 1185
Signing time: Sat 23 Aug 2025 07:02:06 +0000
Manifest this update: Sat 23 Aug 2025 07:02:06 +0000
Manifest next update: Sun 24 Aug 2025 07:02:06 +0000
Files and hashes: 1: mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl (hash: NFd64rYZnv6SI9Mdy1wJjcqsZw6aEI4cttH28muLcdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:08:c8:71:55:7c:01:a5:72:d1:9f:88:ce:ba:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9972148c7362c2c9399bb3af741592c42516c547
Validity
Not Before: Aug 23 07:02:06 2025 GMT
Not After : Aug 24 07:02:06 2025 GMT
Subject: CN=9c4f6d050c2643b79193ebb83cc3b9672c93a3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:89:fd:7d:ce:c7:17:c5:cb:c6:ff:69:85:
1c:30:7a:9b:c2:09:28:5e:0a:0e:11:4f:30:1b:04:
57:55:eb:b6:a4:18:da:5f:bd:2f:c2:f1:ae:09:5e:
77:bf:e3:32:98:d2:68:ef:b5:6a:9d:5d:ac:52:e3:
be:5c:31:11:6c:b5:f5:b3:80:48:82:40:96:6c:7b:
d2:8a:1a:af:9c:b4:d5:14:8a:64:fc:91:fd:33:0b:
10:60:19:e6:c5:b9:b7:fa:23:51:7b:5a:e8:44:87:
7e:c9:4e:f8:99:d5:b7:1f:79:4f:fd:9a:3f:8f:a7:
cc:75:27:e5:58:8c:d0:07:60:80:5d:c3:b9:9b:5b:
d7:18:91:85:a7:46:50:23:09:cb:04:81:3f:05:49:
c1:cf:d4:50:5e:af:37:f4:94:16:05:e0:90:32:7c:
b1:fa:f4:5d:54:89:42:7e:67:ab:21:9d:76:84:a0:
60:ad:90:94:f2:f0:5f:ad:ff:66:6d:b4:41:9b:be:
00:d9:4d:00:86:a7:39:9a:78:7f:5a:d9:96:e1:81:
aa:4e:41:fd:c9:fb:43:3f:d5:51:73:ca:b6:1e:78:
71:9d:ac:23:19:e6:61:40:69:36:6c:e2:67:cb:c4:
f3:77:9f:0f:3e:ed:1d:6a:99:43:54:a5:45:26:09:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4F:6D:05:0C:26:43:B7:91:93:EB:B8:3C:C3:B9:67:2C:93:A3:A4
X509v3 Authority Key Identifier:
keyid:99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e2:ed:bf:0c:8b:2f:60:1c:ab:8d:8c:7b:bb:e4:f8:52:80:
32:d9:35:b8:ed:3e:26:e0:3b:59:42:a4:c9:67:ca:a7:a3:c1:
d8:e8:13:bf:a1:ad:3a:11:d8:da:82:4e:a4:f0:4c:79:88:b7:
ae:48:6c:c1:69:6e:d1:36:c4:1b:91:bb:85:fd:41:28:37:1f:
cc:1f:ba:9d:5d:5e:a7:99:19:0b:3b:c6:d0:8b:9b:97:27:a2:
b1:c9:6f:ed:c5:38:6b:6a:70:07:6a:9b:56:29:ea:19:e5:39:
c5:3c:d1:e1:4b:79:d7:8d:ff:de:41:c0:a6:84:d6:64:a2:94:
23:7c:6e:b2:21:9d:dd:14:cb:62:5e:8d:28:c8:37:92:cb:6f:
2e:4a:45:71:20:f0:15:1b:e1:e0:a7:c0:34:32:d0:49:6a:f7:
e4:49:31:a4:a4:e6:62:06:f8:ea:34:4b:3e:3b:1b:57:c3:16:
42:be:dc:f8:b2:1c:b0:41:bf:41:53:a7:06:3f:71:c4:fa:aa:
f6:12:06:d0:9b:0a:af:46:ca:9a:6e:c0:7d:07:32:54:e4:b0:
4c:86:b9:d7:d5:1c:23:ac:05:58:f4:ce:62:91:43:94:e5:8a:
4f:39:ad:7c:0f:ca:f8:17:61:50:27:e8:ec:aa:ae:55:0d:65:
46:6d:44:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvAjIcVV8AaVy0Z+IzrouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NzIxNDhjNzM2MmMyYzkzOTliYjNhZjc0MTU5MmM0MjUx
NmM1NDcwHhcNMjUwODIzMDcwMjA2WhcNMjUwODI0MDcwMjA2WjAzMTEwLwYDVQQD
Eyg5YzRmNmQwNTBjMjY0M2I3OTE5M2ViYjgzY2MzYjk2NzJjOTNhM2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0naJ/X3OxxfFy8b/aYUcMHqbwgko
XgoOEU8wGwRXVeu2pBjaX70vwvGuCV53v+MymNJo77VqnV2sUuO+XDERbLX1s4BI
gkCWbHvSihqvnLTVFIpk/JH9MwsQYBnmxbm3+iNRe1roRId+yU74mdW3H3lP/Zo/
j6fMdSflWIzQB2CAXcO5m1vXGJGFp0ZQIwnLBIE/BUnBz9RQXq839JQWBeCQMnyx
+vRdVIlCfmerIZ12hKBgrZCU8vBfrf9mbbRBm74A2U0Ahqc5mnh/WtmW4YGqTkH9
yftDP9VRc8q2HnhxnawjGeZhQGk2bOJny8Tzd58PPu0daplDVKVFJglGJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxPbQUMJkO3kZPruDzDuWcsk6OkMB8GA1UdIwQY
MBaAFJlyFIxzYsLJOZuzr3QVksQlFsVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVhJVWpITml3c2s1bTdPdmRCV1N4Q1VXeFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81ODdiN2ItMDcxYy00MzBiLTllYjIt
NmVjNjI2OTBiMTliLzEvbVhJVWpITml3c2s1bTdPdmRCV1N4Q1VXeFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81ODdiN2ItMDcxYy00MzBiLTllYjItNmVjNjI2OTBiMTli
LzEvbVhJVWpITml3c2s1bTdPdmRCV1N4Q1VXeFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+LtvwyL
L2Acq42Me7vk+FKAMtk1uO0+JuA7WUKkyWfKp6PB2OgTv6GtOhHY2oJOpPBMeYi3
rkhswWlu0TbEG5G7hf1BKDcfzB+6nV1ep5kZCzvG0Iublyeisclv7cU4a2pwB2qb
VinqGeU5xTzR4Ut5143/3kHApoTWZKKUI3xusiGd3RTLYl6NKMg3kstvLkpFcSDw
FRvh4KfANDLQSWr35EkxpKTmYgb46jRLPjsbV8MWQr7c+LIcsEG/QVOnBj9xxPqq
9hIG0JsKr0bKmm7AfQcyVOSwTIa519UcI6wFWPTOYpFDlOWKTzmtfA/K+BdhUCfo
7KquVQ1lRm1EgA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:11 2025 by rpki-client