Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: k6J2K2/WQuO1kHyJqgb41qhnKdkLLSM2PUBw0kJ5xhQ=
Subject key identifier: 9C:8B:A5:34:35:25:FC:7F:BC:A7:79:C8:08:0E:85:49:90:FE:1D:04
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 01976DAB8C131FBBE8FD492D96E0D03BEC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 09:00:48 +0000
Manifest this update: Sat 14 Jun 2025 09:00:48 +0000
Manifest next update: Sun 15 Jun 2025 09:00:48 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: 09CxkR6/TJC1/JL6BgJbTBQdWHjeiC3pBE2qjh/y1Gc=)
2: XHfhEGwfsHA5Cy6rVzKyCX0VS7I.roa (hash: r0CY6B9tn8PTb3kJeN+vQ/cBCfQUrTHL37aoDlJepRA=)
3: tcPEvHuX8bqS2YKyM4C5K4tHwxk.roa (hash: rKNoYxngd5L4bRt06ua2/XaA1SqXHMSPI/cKc0JvWoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:8c:13:1f:bb:e8:fd:49:2d:96:e0:d0:3b:ec:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Jun 14 09:00:48 2025 GMT
Not After : Jun 15 09:00:48 2025 GMT
Subject: CN=9c8ba5343525fc7fbca779c8080e854990fe1d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:8f:c7:f2:2d:4f:08:bd:43:c7:51:eb:db:
1c:d9:13:d0:b7:a9:a5:80:d6:58:14:ba:9e:94:d9:
04:df:86:b9:63:42:f1:67:83:1d:89:25:d3:37:06:
e4:52:8e:dd:63:8b:10:0f:74:50:58:22:62:c5:f8:
19:37:b2:5c:68:4c:61:3f:03:80:35:83:17:2d:83:
36:27:ff:bd:32:17:8f:11:54:46:d1:0b:76:31:c4:
8e:3a:e4:0e:a4:86:e2:a6:c3:33:49:d0:35:95:f6:
41:e3:9c:d9:d2:d5:cb:9f:f8:fb:23:06:61:27:c3:
c8:6c:ab:ef:af:6b:db:2f:9f:7a:80:77:47:d2:1c:
cb:e2:e5:9d:59:9a:e4:95:19:4e:29:6e:ca:b8:69:
77:2a:78:e9:f8:b5:e9:71:43:da:3e:b1:fd:50:eb:
e4:2a:a1:2f:6d:6a:8f:b1:c6:39:d6:38:c1:f3:21:
35:08:2b:ac:bc:99:b9:49:ee:2d:21:c5:d7:2f:e9:
a2:2a:d1:fa:52:d5:fd:4f:fb:58:64:2e:fe:62:5d:
a1:df:7b:bf:d6:1a:3c:ad:01:d4:25:2c:75:3b:87:
d2:a3:e4:ca:3c:b1:82:88:63:ca:aa:dc:8e:65:d3:
3d:3d:33:d9:00:87:b7:45:b5:ae:df:a1:5a:d1:d7:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8B:A5:34:35:25:FC:7F:BC:A7:79:C8:08:0E:85:49:90:FE:1D:04
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b6:ef:3c:dd:63:b1:07:64:4b:54:0e:0e:81:b1:e0:cd:4a:
13:6e:de:f7:ef:a2:77:0f:75:2c:3b:76:b6:cd:3d:64:1b:13:
2f:01:79:a8:69:59:47:5a:6b:cc:bd:37:09:65:3b:26:0e:2a:
24:0e:09:8d:38:ae:21:b3:4e:11:c0:f7:ff:55:d8:fb:57:65:
2d:fb:4f:7e:7d:10:81:92:07:f4:ba:67:93:4c:27:5b:79:84:
42:2f:5c:fd:8b:73:ec:a3:2c:66:1c:c1:12:03:58:62:cd:af:
78:8b:c1:de:91:f1:6b:6f:3a:96:ea:72:4a:0f:48:e0:d7:0c:
7a:be:40:c4:a5:f7:ec:6a:16:d0:10:ea:7d:be:57:46:11:84:
06:4d:af:3a:5a:86:b4:fa:30:84:7b:5d:d1:2f:51:1b:15:a5:
e5:a3:82:0f:3d:17:8c:aa:f7:89:5b:7d:9c:95:c8:7f:63:8e:
c4:b5:83:22:05:59:c5:f1:53:ab:4d:1c:f3:e8:8a:81:cd:d8:
0c:d3:1b:54:c2:b6:c5:14:16:db:bb:5d:40:ae:4e:27:c3:ea:
1a:1a:d3:47:6d:05:c4:f4:ea:98:e9:4d:c3:ca:65:57:37:c9:
ac:5e:62:10:16:b2:82:b9:8d:7c:6e:ff:52:39:0e:d7:f1:40:
80:57:21:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq4wTH7vo/UktluDQO+x9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzODg1NzY2MGRjN2ZhNjA4NDZmNzY1Yjk0Y2I2OTU3NjI1
NWFkYjYwHhcNMjUwNjE0MDkwMDQ4WhcNMjUwNjE1MDkwMDQ4WjAzMTEwLwYDVQQD
Eyg5YzhiYTUzNDM1MjVmYzdmYmNhNzc5YzgwODBlODU0OTkwZmUxZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK2Px/ItTwi9Q8dR69sc2RPQt6ml
gNZYFLqelNkE34a5Y0LxZ4MdiSXTNwbkUo7dY4sQD3RQWCJixfgZN7JcaExhPwOA
NYMXLYM2J/+9MhePEVRG0Qt2McSOOuQOpIbipsMzSdA1lfZB45zZ0tXLn/j7IwZh
J8PIbKvvr2vbL596gHdH0hzL4uWdWZrklRlOKW7KuGl3Knjp+LXpcUPaPrH9UOvk
KqEvbWqPscY51jjB8yE1CCusvJm5Se4tIcXXL+miKtH6UtX9T/tYZC7+Yl2h33u/
1ho8rQHUJSx1O4fSo+TKPLGCiGPKqtyOZdM9PTPZAIe3RbWu36Fa0ddjWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyLpTQ1Jfx/vKd5yAgOhUmQ/h0EMB8GA1UdIwQY
MBaAFCOIV2YNx/pghG92W5TLaVdiVa22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEt
MGY4NzZhYmQxZTMwLzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEtMGY4NzZhYmQxZTMw
LzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbbvPN1j
sQdkS1QODoGx4M1KE27e9++idw91LDt2ts09ZBsTLwF5qGlZR1przL03CWU7Jg4q
JA4JjTiuIbNOEcD3/1XY+1dlLftPfn0QgZIH9Lpnk0wnW3mEQi9c/Ytz7KMsZhzB
EgNYYs2veIvB3pHxa286lupySg9I4NcMer5AxKX37GoW0BDqfb5XRhGEBk2vOlqG
tPowhHtd0S9RGxWl5aOCDz0XjKr3iVt9nJXIf2OOxLWDIgVZxfFTq00c8+iKgc3Y
DNMbVMK2xRQW27tdQK5OJ8PqGhrTR20FxPTqmOlNw8plVzfJrF5iEBaygrmNfG7/
UjkO1/FAgFch3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:47:41 2025 by rpki-client