Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
File: iqR9CPyFIT30_aLPlWG45ovCc9w.mft (raw, json)
Hash identifier: 4ZDFbwFCrez0Ip7/SDSx1Ms/8th52HwgHBVT/bfIzxY=
Subject key identifier: B1:A7:CD:E4:97:40:8B:B4:DF:00:76:0C:63:19:98:A6:FA:46:FC:FE
Authority key identifier: 8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
Certificate issuer: /CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Certificate serial: 01976D74789DF04AA97ED49B890DC95EB18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
Manifest number: 0A1F
Signing time: Sat 14 Jun 2025 08:00:38 +0000
Manifest this update: Sat 14 Jun 2025 08:00:38 +0000
Manifest next update: Sun 15 Jun 2025 08:00:38 +0000
Files and hashes: 1: iqR9CPyFIT30_aLPlWG45ovCc9w.crl (hash: o6x/MHN0VTeLEGdScOSqG0GSEAWeFYP4bKtW3kDmffo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:78:9d:f0:4a:a9:7e:d4:9b:89:0d:c9:5e:b1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Validity
Not Before: Jun 14 08:00:38 2025 GMT
Not After : Jun 15 08:00:38 2025 GMT
Subject: CN=b1a7cde497408bb4df00760c631998a6fa46fcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:5c:9e:0e:25:e8:9d:f5:ad:3f:bd:dc:4c:
57:43:8b:50:02:9b:3f:83:75:c1:ee:71:d7:ad:a0:
a8:e6:c9:30:1e:1c:cb:0a:82:52:89:2f:58:fa:df:
9f:0f:d0:63:01:a0:3a:05:f0:2e:1d:39:5c:2e:5b:
a1:41:15:d5:24:d7:66:a5:d7:f3:a0:b2:44:02:c3:
7e:00:d3:8f:7a:c7:6c:64:52:d6:71:94:7d:98:9d:
1c:0e:5f:ef:e9:44:f6:2b:87:6a:24:e8:61:9c:8f:
23:a2:bb:1f:41:f2:0d:dd:79:ca:d1:ef:28:fa:7a:
47:94:01:a4:f0:35:36:47:76:1f:31:32:36:ef:89:
07:50:12:bf:5f:4b:1b:97:51:3c:bf:62:94:46:35:
f5:61:9a:a9:a2:fc:dc:91:22:d8:ab:b0:f4:95:dc:
c9:8b:6b:ca:7a:c0:93:d3:5b:e5:fc:b3:9f:2d:b1:
a9:0c:1a:a7:0d:5b:e5:f8:02:c6:55:15:21:e4:40:
35:e1:09:70:41:a5:d9:23:f0:18:8d:b0:2c:ba:26:
70:70:e9:96:a1:3b:70:8d:09:dc:5f:5d:a4:15:b6:
df:c9:82:84:ea:51:32:66:0b:52:1e:7e:4b:8f:23:
7b:6b:3f:af:12:21:3a:2d:21:43:2b:01:50:45:63:
c8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:CD:E4:97:40:8B:B4:DF:00:76:0C:63:19:98:A6:FA:46:FC:FE
X509v3 Authority Key Identifier:
keyid:8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3e:2d:30:7e:86:09:f2:74:22:e2:26:16:05:eb:16:e1:f9:
e8:6b:3a:95:07:34:3a:7f:cc:84:32:cf:50:b9:47:3e:66:b9:
04:ef:eb:20:fa:21:24:95:07:19:f6:33:92:56:e7:8a:bf:8e:
8e:52:8d:0c:e4:ef:76:d2:36:8d:83:92:58:6e:c1:0c:be:cc:
ac:66:1f:2c:a5:c6:e8:0f:95:d6:16:47:f2:06:d2:dc:7d:91:
d8:35:2b:6a:bb:a7:f0:66:93:96:11:ba:fe:98:86:f6:b4:4a:
16:c2:f9:62:7d:d5:9e:3c:39:46:b6:a4:82:72:09:3f:b1:3b:
ed:93:f7:e7:62:8e:aa:71:b8:a9:a7:5f:ae:32:86:09:2f:77:
d1:ea:92:43:21:41:3e:b3:e8:54:1f:c4:8b:4f:48:ac:a9:67:
60:6b:c5:8d:c4:c2:51:82:a7:31:c0:0b:09:ad:44:31:67:2a:
f5:79:e7:b4:88:3c:a8:19:71:48:ff:3d:3c:ad:c3:83:e5:94:
d2:ec:c3:c0:fd:b0:cb:8c:74:b3:96:22:d7:f1:aa:6b:81:ed:
a1:9d:ae:4e:b3:df:14:0a:95:d9:82:6b:46:4f:10:00:b2:46:
0c:90:80:9d:44:31:68:2f:88:cd:dd:f9:d5:2b:83:15:96:16:
d2:ac:4d:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdHid8EqpftSbiQ3JXrGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYTQ3ZDA4ZmM4NTIxM2RmNGZkYTJjZjk1NjFiOGU2OGJj
MjczZGMwHhcNMjUwNjE0MDgwMDM4WhcNMjUwNjE1MDgwMDM4WjAzMTEwLwYDVQQD
EyhiMWE3Y2RlNDk3NDA4YmI0ZGYwMDc2MGM2MzE5OThhNmZhNDZmY2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsZcng4l6J31rT+93ExXQ4tQAps/
g3XB7nHXraCo5skwHhzLCoJSiS9Y+t+fD9BjAaA6BfAuHTlcLluhQRXVJNdmpdfz
oLJEAsN+ANOPesdsZFLWcZR9mJ0cDl/v6UT2K4dqJOhhnI8jorsfQfIN3XnK0e8o
+npHlAGk8DU2R3YfMTI274kHUBK/X0sbl1E8v2KURjX1YZqpovzckSLYq7D0ldzJ
i2vKesCT01vl/LOfLbGpDBqnDVvl+ALGVRUh5EA14QlwQaXZI/AYjbAsuiZwcOmW
oTtwjQncX12kFbbfyYKE6lEyZgtSHn5LjyN7az+vEiE6LSFDKwFQRWPI8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGnzeSXQIu03wB2DGMZmKb6Rvz+MB8GA1UdIwQY
MBaAFIqkfQj8hSE99P2iz5VhuOaLwnPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXFSOUNQeUZJVDMwX2FMUGxXRzQ1b3ZDYzl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hMWYwYTAtNDM5ZC00MjY2LWEzZGIt
ZTZiMWU5ODZmOTVmLzEvaXFSOUNQeUZJVDMwX2FMUGxXRzQ1b3ZDYzl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9hMWYwYTAtNDM5ZC00MjY2LWEzZGItZTZiMWU5ODZmOTVm
LzEvaXFSOUNQeUZJVDMwX2FMUGxXRzQ1b3ZDYzl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAT4tMH6G
CfJ0IuImFgXrFuH56Gs6lQc0On/MhDLPULlHPma5BO/rIPohJJUHGfYzklbnir+O
jlKNDOTvdtI2jYOSWG7BDL7MrGYfLKXG6A+V1hZH8gbS3H2R2DUrarun8GaTlhG6
/piG9rRKFsL5Yn3Vnjw5RrakgnIJP7E77ZP352KOqnG4qadfrjKGCS930eqSQyFB
PrPoVB/Ei09IrKlnYGvFjcTCUYKnMcALCa1EMWcq9XnntIg8qBlxSP89PK3Dg+WU
0uzDwP2wy4x0s5Yi1/Gqa4HtoZ2uTrPfFAqV2YJrRk8QALJGDJCAnUQxaC+Izd35
1SuDFZYW0qxNhw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:03:14 2025 by rpki-client