Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json)
Hash identifier: 4sAXsSc5wHfUERviBJlCyTKHeD9kdE7b2y3eeZd5NpY=
Subject key identifier: F5:9A:AC:DE:BE:31:2C:02:80:B9:0B:3F:9A:EB:27:D5:1B:5D:82:FC
Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Certificate serial: 0197B88F10D2B70CD9414D146D49366AA8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
Manifest number: 087D
Signing time: Sat 28 Jun 2025 22:01:12 +0000
Manifest this update: Sat 28 Jun 2025 22:01:12 +0000
Manifest next update: Sun 29 Jun 2025 22:01:12 +0000
Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: jraHsHfIrwRAzWZM4foeKrSQwr+jP6vuzjhfdZLM0RM=)
2: tYexsQdQ-bwy8SQ16CJTCKZPCX8.roa (hash: 4iRrkMtR/RQqmCmFoKMuS1dWTtpIHivuyEUKzRu+I4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:10:d2:b7:0c:d9:41:4d:14:6d:49:36:6a:a8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Validity
Not Before: Jun 28 22:01:12 2025 GMT
Not After : Jun 29 22:01:12 2025 GMT
Subject: CN=f59aacdebe312c0280b90b3f9aeb27d51b5d82fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f3:2f:79:da:d2:47:cb:88:ef:26:93:9b:d7:
26:b5:83:f8:bd:32:75:6c:db:18:5c:d5:b8:2d:4d:
4b:5d:c5:f6:6c:85:c4:eb:7a:9f:b9:52:32:3e:ff:
6a:27:43:2c:d2:5f:e7:96:c1:92:b7:74:89:f2:0f:
42:2a:52:42:39:b8:ec:04:2e:d5:10:08:bc:76:d2:
0d:6d:52:2f:b4:3c:cb:cb:6e:d8:ab:23:eb:ee:03:
d7:ba:b2:c9:46:35:29:c6:b7:33:55:c2:e0:88:b7:
22:5e:c8:61:82:d0:19:6b:a4:cc:53:26:29:21:7f:
dc:12:54:34:c7:e0:dd:57:3e:ad:ce:c7:1d:cb:0a:
c2:cf:bb:70:66:a0:b5:1a:b8:63:6b:88:ef:dc:b0:
1d:01:f2:97:5a:e2:1c:ee:b2:05:e4:f7:95:a9:50:
e5:ea:e5:57:b9:43:2a:a6:ee:ac:6d:7f:4b:94:07:
5d:be:73:de:75:38:2c:dd:b5:fb:a0:bf:a3:ba:d9:
c9:ff:f2:53:b6:15:a5:32:00:67:00:05:07:15:da:
5a:d6:07:fe:6e:42:74:77:c4:c8:0f:4a:e7:bf:d9:
97:c5:67:f9:74:14:40:7f:16:fa:1a:87:cf:a0:4f:
43:03:90:1d:61:c0:ff:7d:9b:c7:76:fb:e8:de:40:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9A:AC:DE:BE:31:2C:02:80:B9:0B:3F:9A:EB:27:D5:1B:5D:82:FC
X509v3 Authority Key Identifier:
keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b0:54:d6:fe:36:81:7a:61:74:bd:bf:bc:bd:dd:90:38:09:
41:cb:3b:3d:62:c4:e5:5d:06:50:00:14:7f:d7:c4:47:a8:cf:
2d:3f:18:0d:4d:e0:27:c0:fd:0b:ef:16:a1:f4:04:59:b4:06:
1a:d1:0d:4f:f7:80:1c:fb:97:2f:98:19:40:dc:dc:f2:48:b7:
cc:84:da:a4:1c:6c:df:30:f6:d6:33:e3:a7:08:2a:2b:ba:0f:
8a:84:72:b6:1a:21:76:de:4d:f5:d7:92:2f:0a:97:80:fd:b3:
c8:77:4b:34:10:22:65:d0:6d:64:8e:10:aa:93:69:45:98:de:
fe:65:7f:94:a6:8c:ea:08:a1:6d:53:22:4a:cb:f8:ab:ad:6a:
70:29:e1:91:b5:09:2f:4d:bb:fd:d2:15:61:d6:81:61:ec:3c:
ac:25:46:dc:88:13:3c:87:9b:38:76:37:af:d4:5d:62:53:63:
dc:f5:b1:19:2b:e3:a3:dd:ec:56:a1:c8:7f:74:ed:48:cf:84:
50:10:53:30:ef:52:20:b4:33:49:d0:f1:10:c6:76:08:78:ab:
26:08:4e:f2:ff:1e:e0:90:f7:50:dc:f8:f4:23:fa:d3:80:de:
2f:01:1d:b5:53:ab:97:c7:8b:24:b5:7c:65:b8:74:42:4d:9e:
33:97:b1:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jxDStwzZQU0UbUk2aqirMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNjdmMzBhMGQ5MGQyZDE3Mjk5MmU5YWVhNmY3MzlkMDFi
Mjg3OTIwHhcNMjUwNjI4MjIwMTEyWhcNMjUwNjI5MjIwMTEyWjAzMTEwLwYDVQQD
EyhmNTlhYWNkZWJlMzEyYzAyODBiOTBiM2Y5YWViMjdkNTFiNWQ4MmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfMvedrSR8uI7yaTm9cmtYP4vTJ1
bNsYXNW4LU1LXcX2bIXE63qfuVIyPv9qJ0Ms0l/nlsGSt3SJ8g9CKlJCObjsBC7V
EAi8dtINbVIvtDzLy27YqyPr7gPXurLJRjUpxrczVcLgiLciXshhgtAZa6TMUyYp
IX/cElQ0x+DdVz6tzscdywrCz7twZqC1Grhja4jv3LAdAfKXWuIc7rIF5PeVqVDl
6uVXuUMqpu6sbX9LlAddvnPedTgs3bX7oL+jutnJ//JTthWlMgBnAAUHFdpa1gf+
bkJ0d8TID0rnv9mXxWf5dBRAfxb6GofPoE9DA5AdYcD/fZvHdvvo3kAXAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWarN6+MSwCgLkLP5rrJ9UbXYL8MB8GA1UdIwQY
MBaAFCBn8woNkNLRcpkumupvc50BsoeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUdmekNnMlEwdEZ5bVM2YTZtOXpuUUd5aDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mNDViZGEtNzg2ZS00MWU5LTgzMjMt
YmE0OTI2ZTk2NWU4LzEvSUdmekNnMlEwdEZ5bVM2YTZtOXpuUUd5aDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9mNDViZGEtNzg2ZS00MWU5LTgzMjMtYmE0OTI2ZTk2NWU4
LzEvSUdmekNnMlEwdEZ5bVM2YTZtOXpuUUd5aDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbBU1v42
gXphdL2/vL3dkDgJQcs7PWLE5V0GUAAUf9fER6jPLT8YDU3gJ8D9C+8WofQEWbQG
GtENT/eAHPuXL5gZQNzc8ki3zITapBxs3zD21jPjpwgqK7oPioRythohdt5N9deS
LwqXgP2zyHdLNBAiZdBtZI4QqpNpRZje/mV/lKaM6gihbVMiSsv4q61qcCnhkbUJ
L027/dIVYdaBYew8rCVG3IgTPIebOHY3r9RdYlNj3PWxGSvjo93sVqHIf3TtSM+E
UBBTMO9SILQzSdDxEMZ2CHirJghO8v8e4JD3UNz49CP604DeLwEdtVOrl8eLJLV8
Zbh0Qk2eM5ex/g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:55 2025 by rpki-client