Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
File: 0IpNevM5v1JVcjk3VdHPszzdta0.mft (raw, json)
Hash identifier: k0iDuIfIttTrevjyLhoTQ9ry+TMlfaTIKs4j/CrfIXA=
Subject key identifier: 76:A8:D9:96:69:DE:D9:AD:B3:7D:DE:5D:AE:2C:88:E9:2E:78:01:0F
Authority key identifier: D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
Certificate issuer: /CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Certificate serial: 0198D5BBF4B179E0BFF25281D59107D6980B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: 0IpNevM5v1JVcjk3VdHPszzdta0.crl (hash: XWo/nOKGCBetOOwxLLnhakzhAvLXd/9kpveEiXGI4Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f4:b1:79:e0:bf:f2:52:81:d5:91:07:d6:98:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=76a8d99669ded9adb37dde5dae2c88e92e78010f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b2:2b:a3:9f:e3:f8:a7:24:29:cb:ee:35:f7:
50:5b:c9:5a:f5:d5:25:2a:15:04:87:a6:ff:9b:b6:
39:82:a1:3e:c3:fd:61:f3:81:09:c5:12:fc:52:92:
28:3f:3a:d0:ec:3e:57:53:d1:ad:46:69:69:86:25:
47:87:58:77:fa:ec:b5:7b:20:35:db:19:ea:bd:11:
e2:35:3f:52:01:bd:18:bb:89:2a:42:04:bb:93:bb:
1a:9b:e6:01:c3:f9:b2:5f:6e:67:b7:5a:0d:75:99:
18:44:66:7b:cd:70:6c:2b:13:84:b1:45:0a:87:40:
fa:30:66:c0:69:78:f8:f2:de:2e:b6:2d:4b:09:76:
ce:34:36:ca:fd:6a:36:2a:41:20:62:e5:5d:37:9f:
95:c4:6b:80:c6:c1:5a:39:3a:58:5b:34:71:86:04:
ac:6b:79:78:fd:d8:4d:dd:57:d2:26:6d:f2:96:d3:
32:83:dc:03:42:9c:84:db:df:60:d3:de:9a:e8:b3:
94:9e:18:17:61:9a:f7:74:5f:1a:44:90:62:5b:21:
d3:30:98:07:fb:49:fb:06:7b:a9:81:cb:0b:6a:d8:
e1:f1:bd:eb:44:b2:58:d8:73:8b:95:f9:62:87:7c:
99:4a:54:f1:9a:70:36:da:f4:22:7d:40:6e:14:30:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A8:D9:96:69:DE:D9:AD:B3:7D:DE:5D:AE:2C:88:E9:2E:78:01:0F
X509v3 Authority Key Identifier:
keyid:D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b6:8f:cf:1d:af:22:7d:61:f1:0e:c1:02:fe:bb:03:80:7b:
8e:d3:ee:a7:c2:34:38:65:6a:86:6b:0b:90:cc:7e:d5:0a:2c:
a9:f0:11:32:0f:dd:82:77:2d:85:38:bb:88:79:70:b5:56:47:
b8:42:b3:74:f5:7e:82:49:9c:5b:13:73:ff:a0:51:c9:1b:d5:
ca:6f:78:12:14:b3:5e:bf:15:4c:fe:3c:91:81:01:bf:c9:81:
cc:fe:c7:7d:54:78:cd:53:19:c8:3a:0b:05:e3:a1:fe:73:10:
a0:6c:32:50:10:b9:3c:89:f5:f8:b1:7c:1c:e5:4a:23:e8:3b:
a3:ae:42:bd:71:a3:5e:c3:a0:6c:6c:9d:e5:27:e4:df:03:f3:
57:0d:19:c6:65:54:32:b1:03:36:eb:6e:0a:5f:a3:6d:90:79:
00:30:14:29:20:f9:01:b7:58:6e:fb:a6:46:1d:1a:3c:53:ff:
26:e2:96:fa:b8:84:52:67:eb:6f:87:d8:f2:bd:09:e0:84:97:
37:05:cc:c3:75:e1:4e:f2:a6:b1:b8:42:a9:85:d3:a2:dd:29:
80:6b:9b:14:df:d8:64:e4:14:98:32:4e:0b:ba:aa:2b:a6:a8:
dc:3d:4c:41:5d:79:0c:b1:ed:08:85:87:af:c1:ac:29:d4:9e:
53:39:40:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu/SxeeC/8lKB1ZEH1pgLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGE0ZDdhZjMzOWJmNTI1NTcyMzkzNzU1ZDFjZmIzM2Nk
ZGI1YWQwHhcNMjUwODIzMDcwMjAxWhcNMjUwODI0MDcwMjAxWjAzMTEwLwYDVQQD
Eyg3NmE4ZDk5NjY5ZGVkOWFkYjM3ZGRlNWRhZTJjODhlOTJlNzgwMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrIro5/j+KckKcvuNfdQW8la9dUl
KhUEh6b/m7Y5gqE+w/1h84EJxRL8UpIoPzrQ7D5XU9GtRmlphiVHh1h3+uy1eyA1
2xnqvRHiNT9SAb0Yu4kqQgS7k7sam+YBw/myX25nt1oNdZkYRGZ7zXBsKxOEsUUK
h0D6MGbAaXj48t4uti1LCXbONDbK/Wo2KkEgYuVdN5+VxGuAxsFaOTpYWzRxhgSs
a3l4/dhN3VfSJm3yltMyg9wDQpyE299g096a6LOUnhgXYZr3dF8aRJBiWyHTMJgH
+0n7BnupgcsLatjh8b3rRLJY2HOLlflih3yZSlTxmnA22vQifUBuFDCs4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHao2ZZp3tmts33eXa4siOkueAEPMB8GA1UdIwQY
MBaAFNCKTXrzOb9SVXI5N1XRz7M83bWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xNWZiOGEtOTI2MS00NjJkLWE1YWMt
ZDVhMWVhOWVkYjA4LzEvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8xNWZiOGEtOTI2MS00NjJkLWE1YWMtZDVhMWVhOWVkYjA4
LzEvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASraPzx2v
In1h8Q7BAv67A4B7jtPup8I0OGVqhmsLkMx+1QosqfARMg/dgncthTi7iHlwtVZH
uEKzdPV+gkmcWxNz/6BRyRvVym94EhSzXr8VTP48kYEBv8mBzP7HfVR4zVMZyDoL
BeOh/nMQoGwyUBC5PIn1+LF8HOVKI+g7o65CvXGjXsOgbGyd5Sfk3wPzVw0ZxmVU
MrEDNutuCl+jbZB5ADAUKSD5AbdYbvumRh0aPFP/JuKW+riEUmfrb4fY8r0J4ISX
NwXMw3XhTvKmsbhCqYXTot0pgGubFN/YZOQUmDJOC7qqK6ao3D1MQV15DLHtCIWH
r8GsKdSeUzlA5Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:41 2025 by rpki-client