Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
File: Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json)
Hash identifier: GjGxhZ3Y1a6zQ4AAORQrkGkYcccjgI47sXLFxeRiUks=
Subject key identifier: B9:F3:B2:4C:42:DC:A2:0B:AC:E7:7E:4D:28:19:D7:46:FB:00:AE:24
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 0198D6987C88F44BA95AEC42266FC1553CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
Manifest number: 15A6
Signing time: Sat 23 Aug 2025 11:02:54 +0000
Manifest this update: Sat 23 Aug 2025 11:02:54 +0000
Manifest next update: Sun 24 Aug 2025 11:02:54 +0000
Files and hashes: 1: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: 3K5seDTlr+hiUS+F6LsYjfg2RYskbdU0SfuxuZdNV04=)
2: UVEBG1ExZGcscljMEXZmdhHPbmo.roa (hash: OGY1ZCPh4kqtkS+2sWG7TSBefV4b/lqw2cPXHz2iP6A=)
3: l7ZphxTNLdfz3s0c0sr67IQOn_Q.roa (hash: 7qT5TEH8UgfN71QCeNJwaAV6tPLOUHK85hJIN/udCok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:7c:88:f4:4b:a9:5a:ec:42:26:6f:c1:55:3c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Aug 23 11:02:54 2025 GMT
Not After : Aug 24 11:02:54 2025 GMT
Subject: CN=b9f3b24c42dca20bace77e4d2819d746fb00ae24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bd:ff:d1:d4:be:3e:2e:a3:11:80:e9:35:61:
54:eb:a4:a8:c0:e8:f1:b0:30:e6:75:9b:ff:99:28:
68:70:7e:f9:06:10:68:b2:e6:9c:c6:56:87:55:de:
c4:5f:e1:d9:fd:e5:72:45:d8:bd:47:3d:44:c0:a5:
06:be:0d:d8:93:c3:54:43:a7:ec:a2:0c:af:50:bf:
e3:ea:f5:31:ad:67:5d:dd:69:eb:94:b3:6a:0b:46:
43:68:bc:2d:b5:69:07:56:ab:81:86:fc:50:bb:00:
78:10:10:e7:e0:2a:09:19:56:8c:89:de:ef:80:58:
8a:12:81:25:ca:ab:2e:97:ec:87:39:86:e0:ac:d6:
35:55:44:c2:11:a9:f5:a6:9d:8b:dc:75:90:6e:ec:
c8:76:3e:0b:c5:aa:6d:cd:4b:1c:d0:8b:87:be:77:
92:16:53:f0:d5:17:6a:26:31:85:bc:85:79:e0:80:
e1:61:17:52:a2:a5:fd:3d:2c:ae:2a:c6:a7:1e:c3:
2d:26:f2:ab:c2:c9:25:2d:cd:04:22:14:31:d5:32:
30:11:8a:3b:64:ef:c4:65:0e:9e:a9:54:fc:6a:c1:
9b:fa:b7:3c:ee:06:37:31:21:a3:2b:02:d8:77:a0:
fb:7b:81:b2:0c:8d:d1:f7:a8:af:f2:08:0d:fa:7f:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F3:B2:4C:42:DC:A2:0B:AC:E7:7E:4D:28:19:D7:46:FB:00:AE:24
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:60:12:0a:1d:ef:19:da:37:d7:72:1e:6b:9f:06:bb:ac:27:
ba:23:6f:47:06:3b:95:78:75:bf:b3:27:64:b2:8a:b6:cc:c3:
1e:3d:1b:51:3d:d5:6e:c0:fd:ed:76:d5:2f:95:da:82:a4:5d:
46:96:ac:67:01:69:ff:54:63:04:59:35:cd:e8:62:e7:3c:7a:
19:5b:2c:b1:87:da:27:01:23:f6:14:c9:01:8f:98:7e:72:ff:
61:d1:ca:f9:e9:d8:92:2b:3a:ab:e2:c4:5a:e6:a8:36:28:fa:
4b:9e:ae:87:62:9a:de:60:e6:a1:8b:93:03:2d:99:a3:a0:ed:
0c:5c:7d:d9:b9:4d:95:5f:78:84:f7:36:76:1a:1c:2e:bb:a5:
9a:da:3d:f9:cd:0a:33:64:c1:bc:da:76:f6:95:57:84:2f:79:
c6:d8:24:b7:19:5a:c5:9c:6e:05:6c:3c:1c:07:86:57:22:b2:
84:5d:0d:fa:00:c3:fd:aa:42:28:5b:4a:8a:98:6e:76:38:a8:
84:e1:1b:72:4e:d5:b2:e4:e6:cd:f6:9f:59:58:a0:6b:46:95:
78:03:fd:4f:b7:84:9b:3b:47:01:12:98:03:04:00:2e:dc:32:
94:3f:b5:ae:08:1e:49:26:ea:fe:24:2a:91:f9:e0:67:4e:4a:
c4:48:98:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmHyI9EupWuxCJm/BVTzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYWNmNjZmMDAxOWM1NTYzMzFiZWY5ZWNkOGRmNjUyNzgy
YTYzZjgwHhcNMjUwODIzMTEwMjU0WhcNMjUwODI0MTEwMjU0WjAzMTEwLwYDVQQD
EyhiOWYzYjI0YzQyZGNhMjBiYWNlNzdlNGQyODE5ZDc0NmZiMDBhZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr3/0dS+Pi6jEYDpNWFU66SowOjx
sDDmdZv/mShocH75BhBosuacxlaHVd7EX+HZ/eVyRdi9Rz1EwKUGvg3Yk8NUQ6fs
ogyvUL/j6vUxrWdd3WnrlLNqC0ZDaLwttWkHVquBhvxQuwB4EBDn4CoJGVaMid7v
gFiKEoElyqsul+yHOYbgrNY1VUTCEan1pp2L3HWQbuzIdj4LxaptzUsc0IuHvneS
FlPw1RdqJjGFvIV54IDhYRdSoqX9PSyuKsanHsMtJvKrwsklLc0EIhQx1TIwEYo7
ZO/EZQ6eqVT8asGb+rc87gY3MSGjKwLYd6D7e4GyDI3R96iv8ggN+n+tCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnzskxC3KILrOd+TSgZ10b7AK4kMB8GA1UdIwQY
MBaAFCKs9m8AGcVWMxvvns2N9lJ4KmP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yZTk2NzctYzVkZC00YTMxLWE4ZTct
MTY4ZjIxNTA4Yzc0LzEvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8yZTk2NzctYzVkZC00YTMxLWE4ZTctMTY4ZjIxNTA4Yzc0
LzEvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2ASCh3v
Gdo313Iea58Gu6wnuiNvRwY7lXh1v7MnZLKKtszDHj0bUT3VbsD97XbVL5XagqRd
RpasZwFp/1RjBFk1zehi5zx6GVsssYfaJwEj9hTJAY+YfnL/YdHK+enYkis6q+LE
WuaoNij6S56uh2Ka3mDmoYuTAy2Zo6DtDFx92blNlV94hPc2dhocLrulmto9+c0K
M2TBvNp29pVXhC95xtgktxlaxZxuBWw8HAeGVyKyhF0N+gDD/apCKFtKiphudjio
hOEbck7VsuTmzfafWViga0aVeAP9T7eEmztHARKYAwQALtwylD+1rggeSSbq/iQq
kfngZ05KxEiYbA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:06 2025 by rpki-client