Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
File: iIx7lGQtLku_uVg62UH1HrjEVkA.mft (raw, json)
Hash identifier: kCJsSyiGb71spSc0YeiPu+umprNKL1wVGO0Q1hEbarw=
Subject key identifier: 78:C5:8D:0D:17:F5:55:8E:8A:A9:92:69:E2:87:F6:95:46:C8:56:4B
Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
Certificate issuer: /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Certificate serial: 01967C45185339A270D435D14A1DDA034AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
Manifest number: 0F0D
Signing time: Mon 28 Apr 2025 12:00:25 +0000
Manifest this update: Mon 28 Apr 2025 12:00:25 +0000
Manifest next update: Tue 29 Apr 2025 12:00:25 +0000
Files and hashes: 1: cuExqJqxDerCAtylcJmCrVbgef4.roa (hash: 598WR0Sv6MZYZg5mTZECmrWO2D4wIr/fUZ49xt8Yu9Q=)
2: iIx7lGQtLku_uVg62UH1HrjEVkA.crl (hash: GJxWHI6bi/UXNiWy6QJwh0i9T8U7KD/rmz87xxMwPu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:18:53:39:a2:70:d4:35:d1:4a:1d:da:03:4a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Validity
Not Before: Apr 28 12:00:25 2025 GMT
Not After : Apr 29 12:00:25 2025 GMT
Subject: CN=78c58d0d17f5558e8aa99269e287f69546c8564b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:83:65:da:86:6c:5d:47:c2:04:d2:48:b0:72:
ee:2f:e4:29:e0:18:03:98:15:96:b0:f6:9d:9c:71:
a2:16:a6:75:11:0c:d0:b0:fc:aa:58:7b:1e:55:43:
01:15:b9:e1:f7:17:ed:b9:1c:be:1c:8a:2a:e6:2f:
69:16:46:f3:00:ce:ef:32:50:23:e8:6e:20:a2:26:
8e:b9:ed:04:1d:d2:18:a6:57:bc:16:c0:1e:4f:e2:
13:05:e9:fd:2e:40:15:11:7f:96:0a:57:4d:66:d4:
86:9f:79:e8:31:5a:5e:b8:9f:09:08:98:31:8e:da:
53:d8:40:fe:ac:91:d0:47:78:87:65:d4:48:a5:71:
3b:ae:3b:ee:36:b0:3f:08:ce:84:c8:c7:63:f9:33:
a8:fb:37:e4:cf:6d:2a:d1:b7:c7:dd:72:8a:77:a3:
2e:06:6c:29:45:0c:fe:99:98:23:51:78:14:94:80:
39:d8:e7:26:3d:d0:86:a2:07:0b:49:65:51:6a:22:
fe:cb:87:de:76:b4:7b:b5:9f:70:e9:bf:37:ee:81:
39:d2:60:56:1b:b4:38:dd:99:cb:a6:b7:ca:33:47:
2a:10:24:2d:89:d1:73:8b:94:94:1e:4f:8e:ec:53:
af:0d:10:03:06:37:90:78:cd:c9:00:38:e1:07:c3:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C5:8D:0D:17:F5:55:8E:8A:A9:92:69:E2:87:F6:95:46:C8:56:4B
X509v3 Authority Key Identifier:
keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:28:0a:05:0b:9a:4d:09:7d:fa:03:7b:fe:ff:4d:4d:2d:10:
66:4c:2d:e3:7e:34:6a:de:c8:10:af:cc:f6:9c:d2:37:5a:5b:
29:25:51:d0:90:37:82:fa:b5:10:61:f5:57:4a:78:09:02:ee:
72:05:47:8f:6b:29:35:b8:7b:cc:76:9e:c0:12:61:25:8f:34:
69:ba:9a:93:93:6b:fd:9c:29:d1:9d:06:ce:e4:20:98:ff:4a:
84:7b:86:5e:35:50:fc:95:e8:53:e3:3d:de:f1:43:f4:0a:cd:
3f:9f:10:77:36:88:b0:21:a0:fc:a9:f3:23:4c:31:e7:c9:63:
b4:a0:19:ba:8e:f6:b3:1c:85:8f:1a:1b:32:f4:15:6a:3c:06:
64:12:4d:45:41:7e:24:5d:22:85:11:e0:51:e2:d9:0b:59:c7:
0c:32:17:e4:14:30:ab:c0:dd:20:7f:a4:2b:5e:e7:0d:f4:1f:
a9:97:a2:77:bb:0a:6b:9f:f3:95:40:6d:67:0e:2b:52:e8:1a:
2e:2e:2b:75:ec:c1:05:50:07:05:d6:e6:0f:ee:01:85:61:24:
b6:33:20:89:78:6f:a9:ee:3b:48:47:4c:1f:41:c3:54:83:05:
a0:f2:6c:59:71:03:c5:1f:9d:24:78:ff:9b:09:33:4f:5a:22:
f4:e1:4e:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8RRhTOaJw1DXRSh3aA0rQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4OGM3Yjk0NjQyZDJlNGJiZmI5NTgzYWQ5NDFmNTFlYjhj
NDU2NDAwHhcNMjUwNDI4MTIwMDI1WhcNMjUwNDI5MTIwMDI1WjAzMTEwLwYDVQQD
Eyg3OGM1OGQwZDE3ZjU1NThlOGFhOTkyNjllMjg3ZjY5NTQ2Yzg1NjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioNl2oZsXUfCBNJIsHLuL+Qp4BgD
mBWWsPadnHGiFqZ1EQzQsPyqWHseVUMBFbnh9xftuRy+HIoq5i9pFkbzAM7vMlAj
6G4goiaOue0EHdIYple8FsAeT+ITBen9LkAVEX+WCldNZtSGn3noMVpeuJ8JCJgx
jtpT2ED+rJHQR3iHZdRIpXE7rjvuNrA/CM6EyMdj+TOo+zfkz20q0bfH3XKKd6Mu
BmwpRQz+mZgjUXgUlIA52OcmPdCGogcLSWVRaiL+y4fedrR7tZ9w6b837oE50mBW
G7Q43ZnLprfKM0cqECQtidFzi5SUHk+O7FOvDRADBjeQeM3JADjhB8N0AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjFjQ0X9VWOiqmSaeKH9pVGyFZLMB8GA1UdIwQY
MBaAFIiMe5RkLS5Lv7lYOtlB9R64xFZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jY2JmN2EtZWMzOC00NGU2LWIyZWIt
NzE4Nzk3N2UwNTdlLzEvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jY2JmN2EtZWMzOC00NGU2LWIyZWItNzE4Nzk3N2UwNTdl
LzEvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhigKBQua
TQl9+gN7/v9NTS0QZkwt4340at7IEK/M9pzSN1pbKSVR0JA3gvq1EGH1V0p4CQLu
cgVHj2spNbh7zHaewBJhJY80abqak5Nr/Zwp0Z0GzuQgmP9KhHuGXjVQ/JXoU+M9
3vFD9ArNP58QdzaIsCGg/KnzI0wx58ljtKAZuo72sxyFjxobMvQVajwGZBJNRUF+
JF0ihRHgUeLZC1nHDDIX5BQwq8DdIH+kK17nDfQfqZeid7sKa5/zlUBtZw4rUuga
Li4rdezBBVAHBdbmD+4BhWEktjMgiXhvqe47SEdMH0HDVIMFoPJsWXEDxR+dJHj/
mwkzT1oi9OFOCw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:30:52 2025 by rpki-client