Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: 4zngEH/G3+P7GGjsJzNMe6f2r5an1Us8cq5dfRoAggs=
Subject key identifier: C4:F2:9E:4E:25:E5:76:35:3B:1F:75:82:11:85:37:E1:6D:0B:64:63
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 0198D54DF40CEC86919FF123AE9AE71F0DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:01:52 +0000
Manifest this update: Sat 23 Aug 2025 05:01:52 +0000
Manifest next update: Sun 24 Aug 2025 05:01:52 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: 10Ww9Z6YcXHJdledGbd9DxU2qgTGXv8YZLVRk8MfLyM=)
2: ZaqC_eqAOQjtM4jTMkAtfUr_HnA.roa (hash: qyBeXguoUs9hwnrHmonqUvuWFW9pHnQHNdEGLzV2NBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f4:0c:ec:86:91:9f:f1:23:ae:9a:e7:1f:0d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Aug 23 05:01:52 2025 GMT
Not After : Aug 24 05:01:52 2025 GMT
Subject: CN=c4f29e4e25e576353b1f7582118537e16d0b6463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:d9:23:87:1e:33:e5:ea:41:f1:b2:b5:93:
1b:af:ad:f9:79:2c:2b:06:66:65:81:6b:28:d3:ad:
6c:d6:71:32:86:dc:54:16:2c:c9:74:69:08:e7:30:
43:e8:5f:e3:ef:d9:03:0a:f2:4f:94:c5:6f:ba:27:
f1:5c:4c:b9:21:84:1f:e2:5c:ee:39:9f:da:c0:e5:
5d:9b:b1:06:f3:d4:11:9b:28:d2:9b:2c:ca:05:59:
31:fa:5e:de:3c:2b:3b:21:72:61:8a:5f:f7:4b:ff:
72:87:ee:26:6a:bb:18:f0:52:ed:19:ce:8a:85:ab:
51:c1:6d:45:66:61:e5:3f:f0:68:46:ab:ba:04:84:
08:d4:6a:fb:bb:a9:89:d0:40:1e:01:eb:f9:8c:29:
b5:0c:6e:bb:52:fa:bb:6e:51:9e:0c:27:62:e2:68:
2a:be:be:33:e0:2d:f2:e5:d4:e3:32:51:82:0d:64:
a8:be:dd:fd:4d:9c:cb:99:d5:3d:87:2f:87:85:86:
bd:86:38:b2:1e:46:88:6b:e0:74:9d:a7:0e:28:ea:
ba:cf:bc:9f:4c:97:70:33:2b:fa:5c:1d:91:0a:5c:
3b:0e:fb:f0:0f:1e:ff:a6:17:7c:85:77:89:69:19:
01:29:2e:1f:ae:23:39:78:76:38:f4:98:f6:7b:95:
ee:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F2:9E:4E:25:E5:76:35:3B:1F:75:82:11:85:37:E1:6D:0B:64:63
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e4:62:e9:bd:0a:6b:f1:8b:81:2b:d9:cb:ed:3a:db:4b:94:
35:ad:a4:32:98:11:89:1f:51:25:c2:0c:73:77:26:e1:4a:54:
52:66:1f:79:42:92:1f:13:6e:01:06:ae:d1:10:45:10:b1:3c:
ba:e1:24:f6:9d:88:28:6c:0c:05:3c:91:b4:89:c8:4e:26:a2:
6e:e0:05:60:91:0a:05:cb:65:f7:c2:49:0f:0c:f6:f4:cd:f3:
45:38:b3:96:72:a0:b5:a9:d4:e3:82:b6:31:52:27:c9:f0:cd:
89:15:5f:90:04:ab:40:13:bf:e4:57:8b:f9:2e:9e:5f:30:82:
e4:fa:21:82:15:04:b5:ac:ba:bd:fe:02:22:89:01:e4:1b:cb:
f8:40:64:86:15:1b:8c:c3:54:34:b9:ae:47:30:3a:4f:3d:cd:
18:3f:3f:88:06:cc:83:f8:6e:96:22:14:a5:11:4b:13:d7:4b:
10:f8:35:cb:89:f4:c3:1c:a6:e7:02:0f:da:50:1e:17:dd:90:
ac:06:6a:df:c7:df:9d:40:b2:e4:91:43:eb:b5:20:38:f5:ff:
3c:db:f1:e6:81:54:a6:44:bd:90:79:33:c3:33:77:45:71:94:
95:62:37:50:10:c2:27:20:63:3f:44:6b:05:7c:25:54:cd:46:
51:69:5c:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTfQM7IaRn/EjrprnHw3HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOTdhMzExN2NhMWMxZDYyOTJhZTUyOTExYjRmMGNhNGY4
ZTkwMTkwHhcNMjUwODIzMDUwMTUyWhcNMjUwODI0MDUwMTUyWjAzMTEwLwYDVQQD
EyhjNGYyOWU0ZTI1ZTU3NjM1M2IxZjc1ODIxMTg1MzdlMTZkMGI2NDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pfZI4ceM+XqQfGytZMbr635eSwr
BmZlgWso061s1nEyhtxUFizJdGkI5zBD6F/j79kDCvJPlMVvuifxXEy5IYQf4lzu
OZ/awOVdm7EG89QRmyjSmyzKBVkx+l7ePCs7IXJhil/3S/9yh+4marsY8FLtGc6K
hatRwW1FZmHlP/BoRqu6BIQI1Gr7u6mJ0EAeAev5jCm1DG67Uvq7blGeDCdi4mgq
vr4z4C3y5dTjMlGCDWSovt39TZzLmdU9hy+HhYa9hjiyHkaIa+B0nacOKOq6z7yf
TJdwMyv6XB2RClw7DvvwDx7/phd8hXeJaRkBKS4friM5eHY49Jj2e5XubQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTynk4l5XY1Ox91ghGFN+FtC2RjMB8GA1UdIwQY
MBaAFCCXoxF8ocHWKSrlKRG08MpPjpAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzkt
NzU1ZTNiOTZkNWVkLzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzktNzU1ZTNiOTZkNWVk
LzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+Ri6b0K
a/GLgSvZy+0620uUNa2kMpgRiR9RJcIMc3cm4UpUUmYfeUKSHxNuAQau0RBFELE8
uuEk9p2IKGwMBTyRtInITiaibuAFYJEKBctl98JJDwz29M3zRTizlnKgtanU44K2
MVInyfDNiRVfkASrQBO/5FeL+S6eXzCC5PohghUEtay6vf4CIokB5BvL+EBkhhUb
jMNUNLmuRzA6Tz3NGD8/iAbMg/huliIUpRFLE9dLEPg1y4n0wxym5wIP2lAeF92Q
rAZq38ffnUCy5JFD67UgOPX/PNvx5oFUpkS9kHkzwzN3RXGUlWI3UBDCJyBjP0Rr
BXwlVM1GUWlcxg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:10 2025 by rpki-client