Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: 5iC5usF4LMA+aCvUkBThLZImzQ1S4a9s7ZPytayXdJE=
Subject key identifier: CA:2E:FD:57:4A:4C:5C:6E:AB:89:EB:A8:27:C3:69:51:62:C7:03:48
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 0198D4DFCD800395BE08B61AAE1F788E8E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 0181
Signing time: Sat 23 Aug 2025 03:01:33 +0000
Manifest this update: Sat 23 Aug 2025 03:01:33 +0000
Manifest next update: Sun 24 Aug 2025 03:01:33 +0000
Files and hashes: 1: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: DodLuNLCBsGUQNzDQzvq+YkAtrpYLPgKcJ0BH65sKVA=)
2: spqKrZZlSshpL2qYZip0d0WaBBs.roa (hash: nNDCN5SzdqIQPR24IlLa7l1TyfR2hVXqn06sMz/jemo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:cd:80:03:95:be:08:b6:1a:ae:1f:78:8e:8e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Aug 23 03:01:33 2025 GMT
Not After : Aug 24 03:01:33 2025 GMT
Subject: CN=ca2efd574a4c5c6eab89eba827c3695162c70348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:e5:40:49:1f:d5:38:a0:17:ce:66:8a:4c:
3e:fc:bd:56:ba:d9:e0:c4:4d:07:a7:18:5c:27:21:
2b:92:b0:46:78:ea:f2:54:ad:76:5c:a2:d5:cc:ea:
ed:ae:01:f7:c0:ee:39:86:73:57:88:d2:22:93:da:
f3:b7:c4:70:47:96:1b:c0:c2:4b:c1:17:69:7a:8a:
32:40:27:8d:0c:5c:da:5f:c7:ea:97:99:04:d3:4d:
8b:6f:0d:58:24:92:5a:71:4e:d6:6b:14:d0:eb:55:
b5:ec:38:0a:87:ee:66:99:58:ac:3c:13:82:52:60:
aa:51:df:b6:cc:90:5c:26:f3:23:12:5d:83:fb:fa:
bd:d0:2d:26:5e:91:52:28:40:be:d3:c4:d2:9c:cd:
4b:d4:1f:a2:36:48:e5:6b:ac:bd:2f:f2:56:1a:4b:
82:a5:88:ff:ae:44:5f:1d:79:84:72:03:8e:f6:aa:
ff:a8:6d:14:97:68:6b:fe:50:3f:97:58:e1:5d:33:
ae:d2:c7:16:66:68:17:d7:c3:79:d5:9e:b0:db:07:
f9:f3:18:e6:43:af:04:07:98:22:91:e6:ff:21:aa:
b9:a1:4b:97:d9:c6:90:26:84:c1:74:62:63:31:ab:
6a:9e:84:d4:b7:a8:51:b0:03:66:41:a3:55:70:c2:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2E:FD:57:4A:4C:5C:6E:AB:89:EB:A8:27:C3:69:51:62:C7:03:48
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2b:60:f4:8c:76:00:4d:23:6c:24:e8:e9:18:2b:55:9a:7b:
74:3e:07:4a:3d:fa:b7:a2:fd:e1:56:c7:78:dd:5a:ad:c1:18:
87:b5:87:a2:58:5c:b8:2f:17:3a:e9:44:71:89:49:86:6f:67:
6b:fc:5e:a6:65:c9:74:03:54:8a:02:45:69:6d:16:79:98:3d:
f0:be:86:93:22:1c:e6:93:aa:62:06:90:11:15:d5:51:fc:81:
0a:59:be:61:a9:1f:96:ae:9c:08:b5:71:e0:83:9f:82:a4:c8:
57:d6:6b:c1:d0:ce:1e:d7:d0:12:27:7b:40:58:43:02:1d:b6:
54:bf:4d:2d:8b:b6:a0:11:db:7d:07:bb:10:ef:88:2b:3b:61:
f3:ca:84:b9:d9:68:e1:e6:2d:50:6a:3e:f4:66:e2:ca:33:9c:
ef:29:86:61:88:16:dc:36:7b:9a:e3:7d:db:db:23:4c:6a:fa:
64:11:b6:e6:c7:21:8c:bf:ad:96:f5:8b:eb:ae:3f:17:58:7d:
29:5f:0d:4d:3e:cd:a7:c1:72:83:ed:57:6f:d6:e7:41:b2:31:
77:3d:d5:dc:61:9f:f1:48:fe:75:8d:03:f7:9f:aa:29:61:65:
96:6c:87:b0:8d:a3:0e:2c:a5:5a:a7:b2:80:e0:32:50:37:a8:
a9:a5:bc:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU382AA5W+CLYarh94jo6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjljMjE2OGQyZDgyZGRmZDhhNzA2MzdkNDQwMThhZjMw
YjFmOTcwHhcNMjUwODIzMDMwMTMzWhcNMjUwODI0MDMwMTMzWjAzMTEwLwYDVQQD
EyhjYTJlZmQ1NzRhNGM1YzZlYWI4OWViYTgyN2MzNjk1MTYyYzcwMzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2blQEkf1TigF85mikw+/L1Wutng
xE0HpxhcJyErkrBGeOryVK12XKLVzOrtrgH3wO45hnNXiNIik9rzt8RwR5YbwMJL
wRdpeooyQCeNDFzaX8fql5kE002Lbw1YJJJacU7WaxTQ61W17DgKh+5mmVisPBOC
UmCqUd+2zJBcJvMjEl2D+/q90C0mXpFSKEC+08TSnM1L1B+iNkjla6y9L/JWGkuC
pYj/rkRfHXmEcgOO9qr/qG0Ul2hr/lA/l1jhXTOu0scWZmgX18N51Z6w2wf58xjm
Q68EB5gikeb/Iaq5oUuX2caQJoTBdGJjMatqnoTUt6hRsANmQaNVcMIs7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMou/VdKTFxuq4nrqCfDaVFixwNIMB8GA1UdIwQY
MBaAFIn5whaNLYLd/YpwY31EAYrzCx+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTIt
YmFjYWUwMzBlMzc0LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTItYmFjYWUwMzBlMzc0
LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCtg9Ix2
AE0jbCTo6RgrVZp7dD4HSj36t6L94VbHeN1arcEYh7WHolhcuC8XOulEcYlJhm9n
a/xepmXJdANUigJFaW0WeZg98L6GkyIc5pOqYgaQERXVUfyBClm+Yakflq6cCLVx
4IOfgqTIV9ZrwdDOHtfQEid7QFhDAh22VL9NLYu2oBHbfQe7EO+IKzth88qEudlo
4eYtUGo+9GbiyjOc7ymGYYgW3DZ7muN929sjTGr6ZBG25schjL+tlvWL664/F1h9
KV8NTT7Np8Fyg+1Xb9bnQbIxdz3V3GGf8Uj+dY0D95+qKWFllmyHsI2jDiylWqey
gOAyUDeoqaW8VQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:31 2025 by rpki-client