Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: VoLFqr/pDAqJRTJ35xH3GSvljshMPgGRGWUvxqAfALc=
Subject key identifier: E3:41:A3:A2:14:00:8B:1F:3B:59:E8:32:5D:28:C6:40:08:FF:92:C7
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 0198D5BC19DECE15CE254E80DDA9AAA08F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 10D4
Signing time: Sat 23 Aug 2025 07:02:11 +0000
Manifest this update: Sat 23 Aug 2025 07:02:11 +0000
Manifest next update: Sun 24 Aug 2025 07:02:11 +0000
Files and hashes: 1: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: 1RxmWrxlSriWqRDbBOuWqQTnMrbq0Kz7HFUjslCpG6Y=)
2: ff-qexzHEUD1WgOGjo1dcXlM5zw.roa (hash: okd5E/DUi3wr0dkKGYnxuoMgYENizBl6tX2uR1KatU4=)
3: o-JKFkGOw7b9iS81cGqL_sPqhTE.roa (hash: LeiOclwc6FMh1dAwDJxgRxawRJ1HHtp5FtwQRdIanPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:19:de:ce:15:ce:25:4e:80:dd:a9:aa:a0:8f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Aug 23 07:02:11 2025 GMT
Not After : Aug 24 07:02:11 2025 GMT
Subject: CN=e341a3a214008b1f3b59e8325d28c64008ff92c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:75:8e:9d:68:84:63:d5:9b:05:bc:e9:54:
11:5d:25:41:eb:57:9d:3e:35:61:16:11:8b:fd:13:
5e:2b:18:e2:ec:a7:91:1e:2d:35:4a:8d:66:46:65:
22:1c:ae:bd:6e:f9:81:01:2a:06:ee:ca:40:9b:15:
f8:92:bb:b2:a1:f7:4a:9d:9d:aa:d0:ff:fa:40:b5:
8a:e8:31:c7:78:34:79:e6:49:cd:7e:35:12:0c:d3:
bb:cf:d8:c2:61:72:ae:3a:df:6f:e9:56:1b:82:b5:
b9:60:d4:f6:15:48:6d:67:f0:cd:0f:cf:8d:4e:93:
5f:08:12:e7:6e:28:57:b2:b0:c5:5e:0e:74:fb:e4:
14:e1:15:4b:b9:21:36:75:3e:bd:91:db:80:c8:ec:
16:b5:b9:57:87:fa:63:e7:9d:66:fb:82:80:b5:96:
26:40:5e:d8:50:83:53:41:ff:39:36:74:e6:56:bc:
d3:58:f3:b5:cd:43:2a:cb:84:5d:88:72:59:f8:ab:
71:cd:e7:63:1a:cd:fb:33:05:3f:57:f9:41:d5:8f:
7e:0b:69:aa:69:83:16:96:27:a7:ba:c9:01:0f:b2:
30:83:ae:20:f8:d9:c1:d8:fa:f4:0f:88:c1:1a:42:
5d:ae:f6:1a:6d:4e:ac:ec:29:87:f4:c9:80:4f:f0:
7f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:41:A3:A2:14:00:8B:1F:3B:59:E8:32:5D:28:C6:40:08:FF:92:C7
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:81:e8:26:42:9e:fb:67:88:7c:79:a7:ba:80:a1:b4:1c:32:
e8:81:83:5b:09:2c:30:3d:bf:bd:db:23:84:d4:38:6d:19:24:
21:ca:67:63:a9:6c:8b:01:a3:21:cf:0d:2b:e1:4e:9b:02:56:
08:b3:95:ef:cb:87:26:df:06:1b:a2:e1:e0:53:c7:c9:67:98:
dd:a0:54:d0:df:16:02:00:54:56:6f:f1:0d:e2:58:9d:ad:3d:
74:05:03:16:f1:8e:9c:d7:fd:af:a0:59:3f:63:85:09:3c:d4:
66:e1:c2:39:42:0f:1e:2e:21:d3:cb:8f:7c:3b:3f:ca:1a:41:
be:14:f8:ea:ce:20:44:c6:af:9e:eb:86:4b:41:60:c3:a0:87:
d9:df:1e:37:60:5f:72:8b:7b:b6:83:f4:b0:67:21:f1:88:70:
76:e2:ce:01:9e:e6:87:90:78:65:af:d9:61:76:81:8a:d4:6c:
3c:e5:ad:14:fd:24:14:a4:bf:de:08:7f:69:84:65:28:9f:23:
5a:47:d4:e7:2a:84:67:88:38:ef:43:5a:2e:a1:c5:02:ea:a5:
61:fa:b4:5b:61:6b:26:9a:2e:87:0f:df:e1:a1:39:85:33:5f:
d7:d3:13:f2:dc:0a:a6:f1:42:06:f9:d9:ee:79:25:40:9a:4b:
7a:0c:66:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvBnezhXOJU6A3amqoI8EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZWViMjQyZmIwYWZhYTAzN2Q5Y2FmNTYwNGM2NTg3ZTQw
ZGUzYjUwHhcNMjUwODIzMDcwMjExWhcNMjUwODI0MDcwMjExWjAzMTEwLwYDVQQD
EyhlMzQxYTNhMjE0MDA4YjFmM2I1OWU4MzI1ZDI4YzY0MDA4ZmY5MmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGt1jp1ohGPVmwW86VQRXSVB61ed
PjVhFhGL/RNeKxji7KeRHi01So1mRmUiHK69bvmBASoG7spAmxX4kruyofdKnZ2q
0P/6QLWK6DHHeDR55knNfjUSDNO7z9jCYXKuOt9v6VYbgrW5YNT2FUhtZ/DND8+N
TpNfCBLnbihXsrDFXg50++QU4RVLuSE2dT69kduAyOwWtblXh/pj551m+4KAtZYm
QF7YUINTQf85NnTmVrzTWPO1zUMqy4RdiHJZ+KtxzedjGs37MwU/V/lB1Y9+C2mq
aYMWlienuskBD7Iwg64g+NnB2Pr0D4jBGkJdrvYabU6s7CmH9MmAT/B/dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONBo6IUAIsfO1noMl0oxkAI/5LHMB8GA1UdIwQY
MBaAFCLuskL7CvqgN9nK9WBMZYfkDeO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYt
MjUxNTYyZjAwZmM1LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYtMjUxNTYyZjAwZmM1
LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoHoJkKe
+2eIfHmnuoChtBwy6IGDWwksMD2/vdsjhNQ4bRkkIcpnY6lsiwGjIc8NK+FOmwJW
CLOV78uHJt8GG6Lh4FPHyWeY3aBU0N8WAgBUVm/xDeJYna09dAUDFvGOnNf9r6BZ
P2OFCTzUZuHCOUIPHi4h08uPfDs/yhpBvhT46s4gRMavnuuGS0Fgw6CH2d8eN2Bf
cot7toP0sGch8YhwduLOAZ7mh5B4Za/ZYXaBitRsPOWtFP0kFKS/3gh/aYRlKJ8j
WkfU5yqEZ4g470NaLqHFAuqlYfq0W2FrJpouhw/f4aE5hTNf19MT8twKpvFCBvnZ
7nklQJpLegxmUw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:11 2025 by rpki-client