Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
File: Iavg4GkA17lgdsALtQ1PncA5L1k.mft (raw, json)
Hash identifier: 3VtAUvYOMmycGSZjIclZ4mExq9lln9TGYd4cOlw6E1w=
Subject key identifier: F9:B6:78:F1:FB:DD:C3:25:92:D2:7E:CD:F1:45:D5:A1:27:30:D9:D3
Authority key identifier: 21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
Certificate issuer: /CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Certificate serial: 019768BC1FD0C0D3B3BDCBF9533C2D47BB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
Manifest number: 04F0
Signing time: Fri 13 Jun 2025 10:00:48 +0000
Manifest this update: Fri 13 Jun 2025 10:00:48 +0000
Manifest next update: Sat 14 Jun 2025 10:00:48 +0000
Files and hashes: 1: Iavg4GkA17lgdsALtQ1PncA5L1k.crl (hash: tKkQSly7ip9BmMOkWArEKAN9YuK5/1kYO3P+hD0H0GE=)
2: mCYGvJbl1Fw6jPx9Itl4lHAe01g.roa (hash: jGLZYe0wekh1PvAGDaIi7Ir4CmCU/JjboXXovtVFOe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:1f:d0:c0:d3:b3:bd:cb:f9:53:3c:2d:47:bb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Validity
Not Before: Jun 13 10:00:48 2025 GMT
Not After : Jun 14 10:00:48 2025 GMT
Subject: CN=f9b678f1fbddc32592d27ecdf145d5a12730d9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:88:ff:17:c5:22:03:35:75:a0:2a:3d:a7:fe:
f2:9a:65:c1:be:35:54:e5:17:73:a6:54:5f:7b:e2:
55:d8:a7:0d:17:69:8b:60:cc:c2:3d:a8:90:28:68:
42:ec:92:f1:dc:e9:ca:61:33:a9:23:f5:b2:5c:54:
3f:83:45:76:7d:a1:b7:5a:b7:43:ad:ed:c7:c5:07:
a8:00:6d:33:92:3a:e8:90:df:3d:71:ec:cc:3f:ad:
79:ce:e5:9c:78:95:bd:cd:50:fa:96:a7:38:08:a9:
57:38:05:ad:3e:e6:a5:3a:9a:44:06:9f:e4:4b:76:
55:8f:d0:80:c5:c6:c9:e8:0a:55:f6:15:d4:62:96:
40:53:a7:21:0c:c6:50:9e:25:df:1e:79:b8:3c:48:
62:95:db:81:21:39:de:23:40:3c:ed:30:f1:75:80:
7d:ff:47:f6:a6:70:cd:47:73:9c:6f:80:ec:2c:78:
db:d7:64:e0:12:bb:ef:a6:0d:db:39:22:56:68:7a:
44:7d:0b:5f:43:8e:4c:98:7a:c5:cd:28:a8:32:bb:
18:ec:22:6b:39:cc:c2:b1:93:c7:43:a8:4e:8b:d1:
1a:e3:98:2e:65:14:a1:02:d0:6e:bc:ac:60:40:54:
97:ef:63:a1:fe:0a:bc:61:33:71:e9:3e:40:35:6d:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B6:78:F1:FB:DD:C3:25:92:D2:7E:CD:F1:45:D5:A1:27:30:D9:D3
X509v3 Authority Key Identifier:
keyid:21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d3:1f:36:37:2e:8b:f0:10:6e:82:d5:eb:30:2d:2a:3b:bb:
c7:66:04:cc:61:92:13:d8:1e:4f:f6:d8:a9:34:ef:f9:32:19:
af:33:ed:70:81:66:a0:0b:d3:93:a6:65:e0:f0:27:d4:b6:f9:
f9:89:3c:b3:a8:cd:41:91:a2:c8:65:e3:e3:89:91:15:f8:9f:
22:57:b8:d4:76:88:e5:3d:c9:c8:87:39:9f:e9:2e:42:e6:9d:
b7:71:77:dd:53:74:64:17:d5:c0:c8:02:00:31:63:ed:dc:5c:
63:15:ad:af:19:b5:f8:07:19:b5:44:0c:8a:86:59:c3:b4:b0:
80:a8:05:ca:c3:a1:96:11:48:bc:b4:9f:52:65:c8:2e:99:6f:
61:3b:5e:be:fe:91:18:9b:4f:5a:cd:fc:63:26:3c:94:f9:f0:
97:8d:13:66:49:0b:26:7e:f3:58:c1:c4:2b:f0:19:6b:d4:1d:
9a:d8:1f:6d:d9:c0:e0:89:0a:b7:cc:2e:b6:c1:f5:26:32:2e:
82:fb:fb:57:1f:db:26:6a:09:09:9e:8d:c7:55:c3:19:2c:a5:
e7:40:64:90:cd:a7:93:6a:c4:d2:d3:d7:87:31:31:04:0f:08:
60:8a:36:bf:0a:d4:94:48:a4:2b:88:a3:b7:26:5d:c6:2a:7e:
e9:42:94:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovB/QwNOzvcv5UzwtR7tWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYWJlMGUwNjkwMGQ3Yjk2MDc2YzAwYmI1MGQ0ZjlkYzAz
OTJmNTkwHhcNMjUwNjEzMTAwMDQ4WhcNMjUwNjE0MTAwMDQ4WjAzMTEwLwYDVQQD
EyhmOWI2NzhmMWZiZGRjMzI1OTJkMjdlY2RmMTQ1ZDVhMTI3MzBkOWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Yj/F8UiAzV1oCo9p/7ymmXBvjVU
5RdzplRfe+JV2KcNF2mLYMzCPaiQKGhC7JLx3OnKYTOpI/WyXFQ/g0V2faG3WrdD
re3HxQeoAG0zkjrokN89cezMP615zuWceJW9zVD6lqc4CKlXOAWtPualOppEBp/k
S3ZVj9CAxcbJ6ApV9hXUYpZAU6chDMZQniXfHnm4PEhilduBITneI0A87TDxdYB9
/0f2pnDNR3Ocb4DsLHjb12TgErvvpg3bOSJWaHpEfQtfQ45MmHrFzSioMrsY7CJr
OczCsZPHQ6hOi9Ea45guZRShAtBuvKxgQFSX72Oh/gq8YTNx6T5ANW0HjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPm2ePH73cMlktJ+zfFF1aEnMNnTMB8GA1UdIwQY
MBaAFCGr4OBpANe5YHbAC7UNT53AOS9ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWF2ZzRHa0ExN2xnZHNBTHRRMVBuY0E1TDFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mMmVjMDktNTQ0NS00NGZmLTk5MTUt
ZGVlOWFhZWZmYzlkLzEvSWF2ZzRHa0ExN2xnZHNBTHRRMVBuY0E1TDFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9mMmVjMDktNTQ0NS00NGZmLTk5MTUtZGVlOWFhZWZmYzlk
LzEvSWF2ZzRHa0ExN2xnZHNBTHRRMVBuY0E1TDFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdMfNjcu
i/AQboLV6zAtKju7x2YEzGGSE9geT/bYqTTv+TIZrzPtcIFmoAvTk6Zl4PAn1Lb5
+Yk8s6jNQZGiyGXj44mRFfifIle41HaI5T3JyIc5n+kuQuadt3F33VN0ZBfVwMgC
ADFj7dxcYxWtrxm1+AcZtUQMioZZw7SwgKgFysOhlhFIvLSfUmXILplvYTtevv6R
GJtPWs38YyY8lPnwl40TZkkLJn7zWMHEK/AZa9QdmtgfbdnA4IkKt8wutsH1JjIu
gvv7Vx/bJmoJCZ6Nx1XDGSyl50BkkM2nk2rE0tPXhzExBA8IYIo2vwrUlEikK4ij
tyZdxip+6UKU5w==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:06 2025 by rpki-client