
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File: IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier: 48p+2W6GCWqERHyUH+qNAqRuHxGZ5YaYt0YDKoA2hoE=
Subject key identifier: 50:04:20:46:9F:07:97:22:A9:01:20:61:E5:5C:E2:58:D4:63:7C:08
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial: 019875D05BC4460B41D3C79761D9BF2C874A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number: 1307
Signing time: Mon 04 Aug 2025 16:00:45 +0000
Manifest this update: Mon 04 Aug 2025 16:00:45 +0000
Manifest next update: Tue 05 Aug 2025 16:00:45 +0000
Files and hashes: 1: 1-BW4odJAyxl12AYDgfFuFOqGWeE.roa (hash: qq64q7wVgL8AHerH5wdm8XW+pg0/VDQN8uM/uUKTeDM=)
2: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: WY+Yu5/QPvYMtQrjhhgIDfXwnOQ7s9rekYhKqbtm4zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:5b:c4:46:0b:41:d3:c7:97:61:d9:bf:2c:87:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Validity
Not Before: Aug 4 16:00:45 2025 GMT
Not After : Aug 5 16:00:45 2025 GMT
Subject: CN=500420469f079722a9012061e55ce258d4637c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:08:9e:0f:1a:f4:fc:65:38:df:1b:f4:e9:
3a:e1:e9:f7:9c:60:a1:55:1c:65:40:89:21:f2:a3:
3b:c5:fc:0b:f9:27:b5:aa:5d:2f:c2:83:69:de:00:
8d:f3:1f:e8:54:46:96:23:c0:04:82:e2:87:83:d8:
1b:e2:ac:79:53:6e:fa:d7:b2:7d:c7:b4:95:76:16:
8f:9f:1d:27:a4:0d:65:e8:14:9b:ae:70:26:bf:ca:
8f:74:0a:0f:be:16:e4:5c:43:ef:a1:ba:0e:87:ea:
31:e3:0f:a7:70:a9:f7:7c:fb:44:ac:be:05:ec:89:
aa:d1:12:31:6b:13:ee:b7:59:05:23:7f:45:a6:fd:
b0:7b:67:c8:f5:eb:7d:02:4b:c8:b9:a1:3c:c3:9d:
65:67:72:ef:fc:9e:b2:10:c8:4c:5e:4b:18:22:b4:
14:b4:21:be:e2:12:f3:01:2d:44:63:3e:74:96:f6:
c3:a1:9e:75:ff:49:dd:e5:18:cf:02:56:34:c9:cd:
17:83:1b:86:c8:5e:32:22:06:17:61:c0:1f:c2:bd:
09:c3:78:72:7e:15:f9:d8:0a:6a:18:9d:41:83:c1:
51:05:6b:67:9a:c2:e5:0a:4d:b4:36:b9:32:23:af:
3d:b5:bb:fe:b4:b2:0c:ca:37:a6:03:11:6d:b7:f8:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:04:20:46:9F:07:97:22:A9:01:20:61:E5:5C:E2:58:D4:63:7C:08
X509v3 Authority Key Identifier:
keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c2:57:45:4d:5c:25:71:20:e0:b5:59:38:7e:26:63:91:3c:
60:51:99:08:5e:f3:83:87:6c:42:6e:69:90:3b:fd:d9:16:87:
5b:7d:5c:e4:90:a0:78:b8:c3:df:8c:44:00:cd:c5:dd:83:9a:
f0:bf:7a:c1:2b:f1:a3:f1:b0:61:f0:df:42:a5:22:40:7d:9c:
b6:87:0a:e3:19:f7:d7:69:6d:b7:1e:df:70:55:ba:3b:55:45:
ff:2d:bb:45:56:b9:c1:e5:6c:c1:cb:1e:f7:f6:05:52:c3:64:
5f:99:29:90:ff:7a:5e:e7:b3:00:78:e7:4c:d0:5d:01:d1:b9:
b6:5c:20:49:f9:ec:01:08:26:a5:9e:b4:92:a2:95:29:67:0d:
18:a0:c5:a8:f0:68:84:13:a0:54:06:7f:66:81:fa:0a:a7:5d:
e6:35:44:ae:23:37:b5:11:e1:b1:29:20:93:ef:af:25:37:52:
f4:ef:1b:1c:ad:91:44:54:a2:09:e3:68:da:39:c0:8e:c8:30:
f1:09:76:8e:e1:a2:65:43:01:57:71:e5:82:b4:52:14:4f:52:
02:9c:0e:8f:9e:83:d8:c3:a6:55:7a:af:ee:a0:41:38:14:b8:
f1:d9:44:bc:8f:fc:7a:ba:40:1a:bd:67:11:e6:cc:34:85:19:
11:69:6a:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10FvERgtB08eXYdm/LIdKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjQ2MmM4YzAwNjVhMGE2Y2VhZjI0Mzk4NWI2OTdjZjEz
NTdiZmIwHhcNMjUwODA0MTYwMDQ1WhcNMjUwODA1MTYwMDQ1WjAzMTEwLwYDVQQD
Eyg1MDA0MjA0NjlmMDc5NzIyYTkwMTIwNjFlNTVjZTI1OGQ0NjM3YzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphgIng8a9PxlON8b9Ok64en3nGCh
VRxlQIkh8qM7xfwL+Se1ql0vwoNp3gCN8x/oVEaWI8AEguKHg9gb4qx5U27617J9
x7SVdhaPnx0npA1l6BSbrnAmv8qPdAoPvhbkXEPvoboOh+ox4w+ncKn3fPtErL4F
7Imq0RIxaxPut1kFI39Fpv2we2fI9et9AkvIuaE8w51lZ3Lv/J6yEMhMXksYIrQU
tCG+4hLzAS1EYz50lvbDoZ51/0nd5RjPAlY0yc0XgxuGyF4yIgYXYcAfwr0Jw3hy
fhX52ApqGJ1Bg8FRBWtnmsLlCk20NrkyI689tbv+tLIMyjemAxFtt/i6nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAEIEafB5ciqQEgYeVc4ljUY3wIMB8GA1UdIwQY
MBaAFCFkYsjABloKbOryQ5hbaXzxNXv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mZDkwYzUtMTgzYy00ZDY5LTkyZjEt
NTZiYzcwOTY3ODg1LzEvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9mZDkwYzUtMTgzYy00ZDY5LTkyZjEtNTZiYzcwOTY3ODg1
LzEvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMJXRU1c
JXEg4LVZOH4mY5E8YFGZCF7zg4dsQm5pkDv92RaHW31c5JCgeLjD34xEAM3F3YOa
8L96wSvxo/GwYfDfQqUiQH2ctocK4xn312lttx7fcFW6O1VF/y27RVa5weVswcse
9/YFUsNkX5kpkP96XuezAHjnTNBdAdG5tlwgSfnsAQgmpZ60kqKVKWcNGKDFqPBo
hBOgVAZ/ZoH6Cqdd5jVEriM3tRHhsSkgk++vJTdS9O8bHK2RRFSiCeNo2jnAjsgw
8Ql2juGiZUMBV3HlgrRSFE9SApwOj56D2MOmVXqv7qBBOBS48dlEvI/8erpAGr1n
EebMNIUZEWlqWg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:22:57 2025 by rpki-client