Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
File: ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft (raw, json)
Hash identifier: 3izttEbM/NBFhsf+bwXStEFKliH5xbqDzdS24hXRocM=
Subject key identifier: 72:99:ED:DB:83:95:C4:97:B3:8C:70:76:E0:E2:74:DE:DA:E0:40:8F
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Certificate issuer: /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial: 019680229CF0D8AA7866EF48A174C885CD81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
Manifest number: 0658
Signing time: Tue 29 Apr 2025 06:01:14 +0000
Manifest this update: Tue 29 Apr 2025 06:01:14 +0000
Manifest next update: Wed 30 Apr 2025 06:01:14 +0000
Files and hashes: 1: 46cUFKURmF9XnPH8sSx3t3pgjTo.roa (hash: 0QimrSPj6EgGm2B8/lr6EDBnOBJIibCqv64JLqj1ceI=)
2: ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl (hash: 8E0QlANfqcmm6JMKJaNGd15oU0gloSeeYoLEnFx2684=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:9c:f0:d8:aa:78:66:ef:48:a1:74:c8:85:cd:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Validity
Not Before: Apr 29 06:01:14 2025 GMT
Not After : Apr 30 06:01:14 2025 GMT
Subject: CN=7299eddb8395c497b38c7076e0e274dedae0408f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:2e:eb:76:6f:74:7a:f9:6b:cd:bd:b3:52:
fe:d0:68:f0:12:03:07:82:b1:15:60:4b:54:85:08:
3e:7b:7b:7a:e7:98:0d:76:72:e4:e4:22:1f:e9:84:
6b:35:03:ae:f2:88:1e:67:d2:87:c6:52:69:80:dc:
3c:6a:5b:a2:7c:08:3a:af:05:42:b5:0e:8a:74:68:
bb:cc:3e:e6:c7:a3:3f:ce:9b:26:92:da:04:43:a8:
43:69:63:4a:be:09:a9:d4:47:16:50:ed:17:86:6a:
80:06:cd:f9:a1:44:d7:c9:d9:18:f2:25:4d:a3:d6:
4d:6a:41:11:77:dd:a0:24:22:74:47:d1:f9:ea:be:
42:5e:3c:6d:53:1d:90:00:d4:03:5f:e9:a9:42:f9:
ff:7b:24:d3:67:66:01:6f:b6:82:03:1f:01:1a:a4:
80:69:ff:d4:13:03:3c:d3:95:6c:a9:f1:43:31:b1:
bb:94:3f:dd:9e:6d:e6:56:69:06:8b:4f:66:43:e2:
75:90:71:c4:bc:34:af:3b:1f:8c:3b:c2:a0:96:ba:
d9:4c:36:b5:d4:3e:36:35:84:94:6a:fd:1e:1c:40:
0e:5e:0e:c0:92:67:09:17:66:49:35:1d:c2:eb:d1:
77:03:5d:cf:c0:bf:1d:ce:ee:aa:fd:32:c5:48:5f:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:99:ED:DB:83:95:C4:97:B3:8C:70:76:E0:E2:74:DE:DA:E0:40:8F
X509v3 Authority Key Identifier:
keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a0:2c:35:f4:77:ef:64:29:b5:05:2a:33:ad:f2:ff:0a:9e:
a7:f9:a0:17:33:95:51:34:ff:72:91:93:b5:66:0b:fc:6c:c9:
c5:4c:eb:1f:0d:71:48:a5:88:fb:79:2d:7c:ef:30:4a:bb:8d:
7f:22:d2:c4:40:d4:e9:cc:f3:3b:76:7e:4f:82:a8:40:7b:03:
9f:58:cb:f3:61:d5:13:e0:f0:45:fc:40:80:f5:72:77:3c:a2:
21:21:18:58:58:2e:e2:18:c1:89:4f:e2:fc:e3:21:96:67:33:
72:e1:a5:7f:61:b1:f0:d1:11:63:a7:c5:89:23:0d:71:0a:31:
75:61:ae:60:a6:8f:52:25:d3:8e:5e:f9:40:aa:54:a0:a2:89:
2e:6a:b4:8a:b6:d6:a8:2b:ad:43:b1:d0:cd:94:9e:da:b1:d1:
3f:04:fd:13:a9:5e:47:f8:72:26:fc:b3:8c:bd:8b:a8:7f:2c:
c1:b7:2d:49:0c:40:7b:22:61:be:a0:68:08:54:17:2e:12:87:
68:82:28:3a:fc:3f:68:aa:1c:cd:75:06:58:24:79:47:b6:68:
8f:bc:16:f2:1a:b1:5f:3f:69:d8:15:8a:2d:3f:95:12:de:44:
82:5f:e3:9a:f3:ec:4e:af:5e:03:57:8d:33:8b:81:44:ec:ae:
d0:90:da:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAIpzw2Kp4Zu9IoXTIhc2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYjZiZDY1ZmUyYTg2ZmQ0MmY5YzRmNTA0ZTFlZWQ1ODU3
MGY5M2QwHhcNMjUwNDI5MDYwMTE0WhcNMjUwNDMwMDYwMTE0WjAzMTEwLwYDVQQD
Eyg3Mjk5ZWRkYjgzOTVjNDk3YjM4YzcwNzZlMGUyNzRkZWRhZTA0MDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCou63ZvdHr5a829s1L+0GjwEgMH
grEVYEtUhQg+e3t655gNdnLk5CIf6YRrNQOu8ogeZ9KHxlJpgNw8aluifAg6rwVC
tQ6KdGi7zD7mx6M/zpsmktoEQ6hDaWNKvgmp1EcWUO0XhmqABs35oUTXydkY8iVN
o9ZNakERd92gJCJ0R9H56r5CXjxtUx2QANQDX+mpQvn/eyTTZ2YBb7aCAx8BGqSA
af/UEwM805VsqfFDMbG7lD/dnm3mVmkGi09mQ+J1kHHEvDSvOx+MO8KglrrZTDa1
1D42NYSUav0eHEAOXg7AkmcJF2ZJNR3C69F3A13PwL8dzu6q/TLFSF9T5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKZ7duDlcSXs4xwduDidN7a4ECPMB8GA1UdIwQY
MBaAFIq2vWX+Kob9QvnE9QTh7tWFcPk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJhOVpmNHFodjFDLWNUMUJPSHUxWVZ3LVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80NWE5YzUtMmNjMS00ZjQ1LWJhODAt
YWQ1ODE4OWRlNzU0LzEvaXJhOVpmNHFodjFDLWNUMUJPSHUxWVZ3LVQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80NWE5YzUtMmNjMS00ZjQ1LWJhODAtYWQ1ODE4OWRlNzU0
LzEvaXJhOVpmNHFodjFDLWNUMUJPSHUxWVZ3LVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6AsNfR3
72QptQUqM63y/wqep/mgFzOVUTT/cpGTtWYL/GzJxUzrHw1xSKWI+3ktfO8wSruN
fyLSxEDU6czzO3Z+T4KoQHsDn1jL82HVE+DwRfxAgPVydzyiISEYWFgu4hjBiU/i
/OMhlmczcuGlf2Gx8NERY6fFiSMNcQoxdWGuYKaPUiXTjl75QKpUoKKJLmq0irbW
qCutQ7HQzZSe2rHRPwT9E6leR/hyJvyzjL2LqH8swbctSQxAeyJhvqBoCFQXLhKH
aIIoOvw/aKoczXUGWCR5R7Zoj7wW8hqxXz9p2BWKLT+VEt5Egl/jmvPsTq9eA1eN
M4uBROyu0JDa+g==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:42:06 2025 by rpki-client