Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: uLWv9yCsNMn1omTgPmLV1gcyxCeYOqpgZ0xa39BjIpY=
Subject key identifier: F1:87:E0:A7:A9:99:71:08:50:51:47:98:DB:DA:10:1F:35:3F:9C:E7
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 0198D5F12DED60807D2D34A937F3B88DFDAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:09 +0000
Manifest this update: Sat 23 Aug 2025 08:00:09 +0000
Manifest next update: Sun 24 Aug 2025 08:00:09 +0000
Files and hashes: 1: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: MPY80emFzM1ytuNUIYiTwpvE/Wt7LHQWSEJeckQEB50=)
2: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (hash: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:2d:ed:60:80:7d:2d:34:a9:37:f3:b8:8d:fd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Aug 23 08:00:09 2025 GMT
Not After : Aug 24 08:00:09 2025 GMT
Subject: CN=f187e0a7a999710850514798dbda101f353f9ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:c0:bc:a0:3a:a5:38:f4:c7:02:c7:11:13:
ee:8c:0f:2e:af:3d:aa:c1:90:ac:64:e4:9e:5d:a7:
0b:a4:a0:14:eb:2d:60:bd:d3:f2:d6:a5:af:63:59:
15:28:ba:f8:ca:eb:de:2c:49:bc:b6:1e:89:86:af:
6f:1d:86:0d:42:6e:35:fa:9d:fa:48:7e:24:ca:a6:
c0:8a:49:c4:00:52:84:ef:00:8e:48:28:41:2b:ce:
70:44:ea:c8:96:95:2d:77:2f:3f:ee:e7:75:e3:6d:
09:73:ea:25:d8:96:35:7a:a8:b7:1e:1a:fc:f4:71:
b5:37:5b:2e:cc:f6:29:b7:3f:10:28:d9:f1:2a:13:
c4:a7:85:cf:41:17:08:37:4b:05:f2:2c:8d:55:21:
75:cb:b9:68:5d:5a:a5:dd:9c:38:25:77:0b:fd:23:
7f:9f:91:d2:6d:90:fe:bc:84:eb:b7:26:37:6f:d4:
d9:9c:d7:a6:32:cc:75:70:e2:2e:a5:ea:90:70:8d:
11:45:9b:5a:c5:ee:6d:54:19:b1:de:1a:7a:1e:2b:
6f:a1:e9:f0:1d:66:64:81:0e:8d:ac:e3:07:2c:d9:
61:0d:8c:c4:79:1b:ec:0c:a4:10:20:de:5a:a0:84:
48:85:1d:38:c7:7e:72:4c:63:70:48:92:c3:8e:52:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:87:E0:A7:A9:99:71:08:50:51:47:98:DB:DA:10:1F:35:3F:9C:E7
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:21:2c:ea:8a:0b:cd:7d:fe:ac:ec:79:c1:6b:dc:76:ef:bb:
21:c0:3a:59:f4:72:ca:3f:0c:95:bc:e3:5c:c9:86:20:49:b9:
09:ff:ec:5f:93:83:fe:e8:c4:c5:78:57:9b:c0:d1:10:98:5b:
3b:5f:a1:a4:65:cd:88:9d:25:2a:33:d7:3f:f9:f1:ae:e1:0c:
bb:50:fa:19:28:8e:fa:42:a6:ff:1d:da:c3:80:50:39:93:15:
1a:99:93:4d:63:38:4c:41:a6:f4:48:32:9b:5b:f2:39:eb:81:
a9:d2:5a:a1:ae:6b:a7:2b:12:0f:df:f3:b0:e1:90:e6:18:1e:
77:86:2d:a7:ad:a9:b5:f2:7b:bb:d7:a7:1f:a3:84:72:8e:97:
00:60:d9:5a:2e:82:89:f8:e7:40:81:72:11:d8:40:d5:18:f6:
66:f2:5e:7c:9c:e4:cd:1c:56:34:8a:43:07:4d:06:4e:83:a8:
df:d6:02:76:bb:ef:22:a0:dc:ba:96:53:cf:f3:e3:02:18:da:
2c:60:3b:91:37:42:5f:86:eb:cb:84:01:77:3a:34:78:59:6c:
70:ca:2d:57:f4:9d:0d:5c:fa:ca:19:02:f5:ce:bc:9a:c9:06:
4f:a8:a6:5d:1d:79:86:52:d3:95:7d:5a:ce:81:3e:ac:e6:31:
2a:3b:93:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8S3tYIB9LTSpN/O4jf2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNDQ0NzJkMTY5NzM2OWQ4MzJiYTEyNmU1ZTE3MjMyYWNk
NWY1ZjMwHhcNMjUwODIzMDgwMDA5WhcNMjUwODI0MDgwMDA5WjAzMTEwLwYDVQQD
EyhmMTg3ZTBhN2E5OTk3MTA4NTA1MTQ3OThkYmRhMTAxZjM1M2Y5Y2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3rAvKA6pTj0xwLHERPujA8urz2q
wZCsZOSeXacLpKAU6y1gvdPy1qWvY1kVKLr4yuveLEm8th6Jhq9vHYYNQm41+p36
SH4kyqbAiknEAFKE7wCOSChBK85wROrIlpUtdy8/7ud1420Jc+ol2JY1eqi3Hhr8
9HG1N1suzPYptz8QKNnxKhPEp4XPQRcIN0sF8iyNVSF1y7loXVql3Zw4JXcL/SN/
n5HSbZD+vITrtyY3b9TZnNemMsx1cOIupeqQcI0RRZtaxe5tVBmx3hp6Hitvoenw
HWZkgQ6NrOMHLNlhDYzEeRvsDKQQIN5aoIRIhR04x35yTGNwSJLDjlLi2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGH4KepmXEIUFFHmNvaEB81P5znMB8GA1UdIwQY
MBaAFCFERy0WlzadgyuhJuXhcjKs1fXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEt
ODc3ZDMxYzE2MWMzLzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEtODc3ZDMxYzE2MWMz
LzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyEs6ooL
zX3+rOx5wWvcdu+7IcA6WfRyyj8MlbzjXMmGIEm5Cf/sX5OD/ujExXhXm8DREJhb
O1+hpGXNiJ0lKjPXP/nxruEMu1D6GSiO+kKm/x3aw4BQOZMVGpmTTWM4TEGm9Egy
m1vyOeuBqdJaoa5rpysSD9/zsOGQ5hged4Ytp62ptfJ7u9enH6OEco6XAGDZWi6C
ifjnQIFyEdhA1Rj2ZvJefJzkzRxWNIpDB00GToOo39YCdrvvIqDcupZTz/PjAhja
LGA7kTdCX4bry4QBdzo0eFlscMotV/SdDVz6yhkC9c68mskGT6imXR15hlLTlX1a
zoE+rOYxKjuTeQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:34 2025 by rpki-client