Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File: iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier: zSzpsQDol3ctJO5NL/GXGKoRhO5kgwaNis0RLeVQ9NU=
Subject key identifier: BF:AF:71:84:B1:F8:40:69:92:F2:81:C3:71:C3:3C:A6:55:A7:24:0F
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer: /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial: 01968359D5E34BD44FF4FB24D1A130146881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number: 0403
Signing time: Tue 29 Apr 2025 21:00:24 +0000
Manifest this update: Tue 29 Apr 2025 21:00:24 +0000
Manifest next update: Wed 30 Apr 2025 21:00:24 +0000
Files and hashes: 1: KhBBIepWkUpug0B64mqgsDLFPZc.roa (hash: NekHITh7qbvUL5cT5x1+6spbZNG/DddMxPVXVZ3dQb8=)
2: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: iMcMzSR+eUHPlDWFKKAkSe+IZSzliOGbfBqwWft3Je4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:d5:e3:4b:d4:4f:f4:fb:24:d1:a1:30:14:68:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
Validity
Not Before: Apr 29 21:00:24 2025 GMT
Not After : Apr 30 21:00:24 2025 GMT
Subject: CN=bfaf7184b1f8406992f281c371c33ca655a7240f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:31:61:44:cb:26:6b:50:76:32:57:fc:78:
4a:31:e0:1e:58:47:7e:11:cb:4f:35:99:c5:55:d3:
1c:30:5c:6e:3d:f9:5b:50:e1:87:ed:2d:f3:46:15:
34:94:f4:56:6c:dc:70:06:a8:05:2a:26:e8:ff:bb:
68:98:53:8d:8c:c5:00:fd:a0:32:8e:a5:6a:90:20:
de:15:2f:fe:44:81:1a:00:1e:62:db:16:25:20:74:
10:be:1b:12:92:ea:41:39:a7:81:37:4f:d4:f3:90:
2d:62:a0:39:f9:2f:2c:1c:35:52:2d:ba:ac:5d:2d:
b4:7f:ed:06:5b:9e:00:69:7d:b2:ff:66:eb:0b:e1:
7f:80:88:3e:76:73:d9:36:e8:d7:c1:7a:f6:86:cb:
dc:ce:3e:b4:63:ec:ec:f3:75:c4:47:e9:af:25:b6:
0e:30:18:62:2a:23:34:79:0a:31:ee:e0:10:44:aa:
aa:1e:47:07:e1:1a:b0:3a:d1:47:51:a3:2e:12:e8:
57:6f:98:08:62:c0:42:e0:aa:bd:f4:54:08:ff:5a:
28:72:7f:7a:d9:50:3a:e5:f1:68:a3:fe:f6:99:b8:
9a:70:8b:aa:05:48:45:c3:9f:9a:a8:0c:b7:bf:f1:
47:09:a3:d9:f8:ee:16:de:5c:d5:58:48:86:29:a3:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AF:71:84:B1:F8:40:69:92:F2:81:C3:71:C3:3C:A6:55:A7:24:0F
X509v3 Authority Key Identifier:
keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d2:a9:3e:1c:4f:46:a9:ac:1f:83:89:f4:d7:69:10:13:96:
71:f2:1e:46:aa:aa:91:43:ab:dd:45:46:b7:74:b2:bd:24:2d:
7d:53:99:74:67:37:1b:30:63:e4:fa:c7:7d:9b:a9:8a:e1:88:
fd:2e:67:32:36:97:55:55:cd:60:15:54:a0:c4:56:c7:a9:48:
6a:db:40:26:88:5c:2c:74:42:c1:b5:e7:b0:a0:2d:43:ae:e2:
b4:3e:4c:91:3e:f4:0f:b4:9e:db:81:8c:c5:28:97:b1:8a:56:
dd:a3:e9:16:50:0f:1e:59:22:a1:9d:52:64:9b:99:da:56:27:
98:18:9c:27:b3:fd:8a:4f:73:17:34:ca:fb:1e:8e:d1:2a:36:
e4:88:06:76:5a:c4:c7:c9:b9:ba:fa:48:b8:3e:9e:9b:e2:45:
90:f5:a7:fb:7e:a2:4e:50:da:c9:c8:a5:cc:80:ab:47:55:29:
3a:c3:95:6a:ff:f5:6b:65:a1:a9:10:f1:73:7c:fb:8d:ae:de:
b2:23:57:0c:49:c4:48:63:cc:8d:e6:2a:db:76:5c:48:5f:65:
11:ae:03:58:df:d4:dd:d6:ba:15:58:75:b7:59:b2:43:ec:a1:
59:0b:b3:f1:9e:ed:56:4b:f1:17:87:d3:1f:7b:01:ab:0a:ad:
1d:a4:39:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDWdXjS9RP9Psk0aEwFGiBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MWFiMTgwY2IzNTE3MTg2MjIxYjM5OTliMDhiODNhZjRm
NjY5NDUwHhcNMjUwNDI5MjEwMDI0WhcNMjUwNDMwMjEwMDI0WjAzMTEwLwYDVQQD
EyhiZmFmNzE4NGIxZjg0MDY5OTJmMjgxYzM3MWMzM2NhNjU1YTcyNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmYxYUTLJmtQdjJX/HhKMeAeWEd+
EctPNZnFVdMcMFxuPflbUOGH7S3zRhU0lPRWbNxwBqgFKibo/7tomFONjMUA/aAy
jqVqkCDeFS/+RIEaAB5i2xYlIHQQvhsSkupBOaeBN0/U85AtYqA5+S8sHDVSLbqs
XS20f+0GW54AaX2y/2brC+F/gIg+dnPZNujXwXr2hsvczj60Y+zs83XER+mvJbYO
MBhiKiM0eQox7uAQRKqqHkcH4RqwOtFHUaMuEuhXb5gIYsBC4Kq99FQI/1oocn96
2VA65fFoo/72mbiacIuqBUhFw5+aqAy3v/FHCaPZ+O4W3lzVWEiGKaPU7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+vcYSx+EBpkvKBw3HDPKZVpyQPMB8GA1UdIwQY
MBaAFIgasYDLNRcYYiGzmZsIuDr09mlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jN2Y2MDEtM2ZhMi00ZGI2LWEwM2Qt
M2E2M2JmNzYzMGY1LzEvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jN2Y2MDEtM2ZhMi00ZGI2LWEwM2QtM2E2M2JmNzYzMGY1
LzEvaUJxeGdNczFGeGhpSWJPWm13aTRPdlQyYVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdKpPhxP
RqmsH4OJ9NdpEBOWcfIeRqqqkUOr3UVGt3SyvSQtfVOZdGc3GzBj5PrHfZupiuGI
/S5nMjaXVVXNYBVUoMRWx6lIattAJohcLHRCwbXnsKAtQ67itD5MkT70D7Se24GM
xSiXsYpW3aPpFlAPHlkioZ1SZJuZ2lYnmBicJ7P9ik9zFzTK+x6O0So25IgGdlrE
x8m5uvpIuD6em+JFkPWn+36iTlDaycilzICrR1UpOsOVav/1a2WhqRDxc3z7ja7e
siNXDEnESGPMjeYq23ZcSF9lEa4DWN/U3da6FVh1t1myQ+yhWQuz8Z7tVkvxF4fT
H3sBqwqtHaQ5cA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:28:42 2025 by rpki-client