Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json)
Hash identifier: 7yTbFcQvx2fZcsK729nEZQ9ChvE5ggiJ9cWlZY73mtQ=
Subject key identifier: 1D:B1:60:23:CD:08:E0:06:25:A6:39:5F:4E:3E:FE:D3:FC:EF:E7:32
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 01976F2C91A77CC59F632BC38201FED57365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 16:01:21 +0000
Manifest this update: Sat 14 Jun 2025 16:01:21 +0000
Manifest next update: Sun 15 Jun 2025 16:01:21 +0000
Files and hashes: 1: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=)
2: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: mMQVF5GzI7Luugv+3Gj9qARFj9wiC61VRIVa3GF/GpQ=)
3: S3A1POWiFi4TlajvXsCPIiaaz_4.roa (hash: IXC2iM5ax6sDDcgMKmOBil5L9Ty3tdxbCnAuaFnmWnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:91:a7:7c:c5:9f:63:2b:c3:82:01:fe:d5:73:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Jun 14 16:01:21 2025 GMT
Not After : Jun 15 16:01:21 2025 GMT
Subject: CN=1db16023cd08e00625a6395f4e3efed3fcefe732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7a:31:a6:df:b7:b1:92:fc:e8:cd:dd:6c:ac:
00:88:50:ca:77:5a:22:bb:36:9b:64:f7:2a:dc:a7:
92:2c:be:7d:8c:68:52:52:10:e9:c3:94:73:eb:b9:
74:4c:f5:d8:89:7e:25:cb:d0:2f:79:45:48:a5:1c:
f9:1c:77:92:62:58:9a:b3:25:e5:36:3f:cf:a9:f2:
81:ea:e2:1f:11:61:7a:87:81:69:05:67:0b:aa:d1:
f6:c9:a0:53:ba:32:41:da:8a:c6:85:3a:03:c6:9d:
a0:72:36:df:da:18:cd:0b:cb:7d:db:7b:03:40:94:
b8:0a:be:10:df:53:95:35:f2:d6:b8:9a:dc:4f:fa:
27:d4:9c:48:44:6d:a3:9a:de:02:3c:df:c1:08:c3:
5d:f1:e7:df:17:ac:31:56:67:1d:ac:c8:e1:6b:4a:
ca:7c:82:f8:2c:dd:83:3c:b4:21:fd:6d:31:71:fc:
82:c0:cf:62:6d:ff:48:1c:33:d1:dc:db:08:b5:ea:
8e:3b:cf:a5:d1:33:7f:06:12:7e:b7:9d:f6:9f:d8:
20:42:5e:71:fb:81:66:6d:21:28:26:08:6e:38:87:
b8:89:63:b1:d4:54:2f:8e:3e:82:e9:8b:f8:34:97:
45:3a:b6:60:b8:13:e4:b7:ea:25:fa:55:c2:cd:a8:
f8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B1:60:23:CD:08:E0:06:25:A6:39:5F:4E:3E:FE:D3:FC:EF:E7:32
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f9:ab:54:8f:28:42:9b:67:52:dc:69:31:c7:cd:56:76:ee:
bb:25:aa:d7:84:c2:7f:d2:7c:aa:79:63:a4:ac:30:d1:4d:8c:
e8:06:30:ba:a7:4e:d7:4d:08:5e:45:ef:2b:7e:71:e6:a2:6c:
d8:7f:f8:69:b1:68:23:05:21:fd:46:0d:fd:b1:f2:46:32:84:
1d:2d:e7:aa:53:5e:08:ea:b1:07:60:11:c4:64:3e:23:32:3f:
a6:f1:e9:65:1f:74:59:60:6a:e7:55:04:7b:f8:0e:f6:b2:59:
c4:a9:ed:84:62:f0:0b:79:5c:4d:72:68:28:d4:93:ae:ce:e8:
06:ed:f1:35:41:a2:59:8e:98:1e:55:89:92:31:5a:79:8e:e6:
b6:72:31:30:f3:d9:66:70:a7:51:78:41:65:23:48:8d:a3:5e:
f1:1a:af:84:18:4f:b2:c5:28:ca:a5:da:1b:cb:02:f1:32:2c:
7e:c1:79:9f:74:5c:7b:85:8f:cb:fc:c1:12:ea:e8:7e:ed:1c:
52:9c:08:fe:61:52:44:c7:31:10:5a:8d:7a:c1:0e:7b:f5:1b:
3c:62:e7:6e:08:72:e0:30:a8:2e:5a:40:21:e3:f0:82:37:18:
8f:b3:9d:af:31:f4:7a:b3:60:63:53:33:6d:43:81:72:27:dc:
fb:65:b5:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLJGnfMWfYyvDggH+1XNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj
NGM4ZTgwHhcNMjUwNjE0MTYwMTIxWhcNMjUwNjE1MTYwMTIxWjAzMTEwLwYDVQQD
EygxZGIxNjAyM2NkMDhlMDA2MjVhNjM5NWY0ZTNlZmVkM2ZjZWZlNzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6noxpt+3sZL86M3dbKwAiFDKd1oi
uzabZPcq3KeSLL59jGhSUhDpw5Rz67l0TPXYiX4ly9AveUVIpRz5HHeSYliasyXl
Nj/PqfKB6uIfEWF6h4FpBWcLqtH2yaBTujJB2orGhToDxp2gcjbf2hjNC8t923sD
QJS4Cr4Q31OVNfLWuJrcT/on1JxIRG2jmt4CPN/BCMNd8effF6wxVmcdrMjha0rK
fIL4LN2DPLQh/W0xcfyCwM9ibf9IHDPR3NsIteqOO8+l0TN/BhJ+t532n9ggQl5x
+4FmbSEoJghuOIe4iWOx1FQvjj6C6Yv4NJdFOrZguBPkt+ol+lXCzaj4uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2xYCPNCOAGJaY5X04+/tP87+cyMB8GA1UdIwQY
MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt
ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3
LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfmrVI8o
QptnUtxpMcfNVnbuuyWq14TCf9J8qnljpKww0U2M6AYwuqdO100IXkXvK35x5qJs
2H/4abFoIwUh/UYN/bHyRjKEHS3nqlNeCOqxB2ARxGQ+IzI/pvHpZR90WWBq51UE
e/gO9rJZxKnthGLwC3lcTXJoKNSTrs7oBu3xNUGiWY6YHlWJkjFaeY7mtnIxMPPZ
ZnCnUXhBZSNIjaNe8RqvhBhPssUoyqXaG8sC8TIsfsF5n3Rce4WPy/zBEurofu0c
UpwI/mFSRMcxEFqNesEOe/UbPGLnbghy4DCoLlpAIePwgjcYj7OdrzH0erNgY1Mz
bUOBcifc+2W1Fg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:21:14 2025 by rpki-client