Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
File: iwjmq-L-QyImUc6Z780Sr2DmT1s.mft (raw, json)
Hash identifier: 1DMxurEDL1V8SxT7gAEGh5ksTTqHlELox8x5a5tNShk=
Subject key identifier: 59:7A:B1:60:CA:58:6F:BC:C5:5A:AA:DF:39:B6:BE:66:A7:E3:6D:6B
Authority key identifier: 8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
Certificate issuer: /CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Certificate serial: 0196741ED18968C92686A30498B78B3EF4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
Manifest number: 04FB
Signing time: Sat 26 Apr 2025 22:01:38 +0000
Manifest this update: Sat 26 Apr 2025 22:01:38 +0000
Manifest next update: Sun 27 Apr 2025 22:01:38 +0000
Files and hashes: 1: iwjmq-L-QyImUc6Z780Sr2DmT1s.crl (hash: g4gnEELoP+DKm2eGmCZhvFiOT7cv0PwdccIfbyL03JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:d1:89:68:c9:26:86:a3:04:98:b7:8b:3e:f4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Validity
Not Before: Apr 26 22:01:38 2025 GMT
Not After : Apr 27 22:01:38 2025 GMT
Subject: CN=597ab160ca586fbcc55aaadf39b6be66a7e36d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:66:c7:20:63:b3:7a:0e:07:19:a3:05:de:
bc:8e:14:b0:5c:9b:e8:ab:52:2b:83:77:b4:6b:94:
da:19:b7:d3:3b:e4:dc:77:cd:1c:58:a7:61:72:29:
5b:b4:f6:74:46:83:00:f2:4d:35:1b:8e:70:fd:ed:
35:5e:c1:89:a2:ad:71:09:09:0b:de:3c:93:53:d4:
39:26:21:4f:cd:9b:96:d4:d8:87:61:82:4b:6e:40:
b8:a9:33:1d:ac:c2:92:26:2e:c2:d4:20:fe:8e:5b:
88:49:06:54:70:02:ba:1c:8a:64:b3:57:a6:f5:4e:
b8:c8:c0:4a:0f:3b:8a:e4:ce:77:7b:1a:7e:5d:52:
65:0e:84:64:7b:7f:60:a7:7f:b3:54:06:ec:ce:cf:
25:43:59:8c:e6:1a:59:48:cd:09:55:42:7f:71:2a:
35:89:fc:8b:8a:88:90:c3:d0:6d:e7:83:c2:3c:51:
1b:a6:9e:09:46:0f:00:7b:2f:ef:bd:f8:a4:f4:5e:
4d:01:34:f6:38:33:05:f8:96:77:c8:5c:b8:7c:69:
04:8c:24:4c:11:ca:6e:e7:b1:21:09:dd:42:65:ec:
d0:ad:2d:95:36:3d:a3:ed:2e:53:de:c0:d4:cf:dc:
d5:ef:c7:ee:f5:fb:7e:24:ba:df:3d:62:dd:23:45:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7A:B1:60:CA:58:6F:BC:C5:5A:AA:DF:39:B6:BE:66:A7:E3:6D:6B
X509v3 Authority Key Identifier:
keyid:8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:60:c0:b6:7d:f7:e5:ef:56:68:b9:6f:b8:a3:eb:21:1e:f2:
4f:c5:43:91:45:0d:4b:de:20:c2:f9:22:ee:2a:f1:c9:d3:34:
0b:91:61:06:52:ea:a2:fe:42:ee:ec:0d:3d:3e:04:49:60:40:
12:61:e5:fd:39:c8:92:7a:35:52:36:c4:fc:73:4e:b7:4f:3f:
cc:06:f5:ac:5c:0f:d9:5d:07:25:4e:6e:67:61:b7:39:4c:82:
7c:eb:69:d3:25:d8:3f:9d:b2:9d:28:f3:e8:84:60:78:0a:b7:
87:db:86:fa:f5:f7:53:93:c1:41:28:b4:eb:ac:17:2c:88:5a:
b1:e7:bb:21:9f:f8:f7:66:3e:10:c5:bd:58:3b:fe:53:39:2d:
4f:0f:9e:fb:b7:1f:50:b9:66:9a:09:9c:26:eb:4d:6c:60:9b:
d2:7e:2c:49:75:49:fe:b0:b8:fd:ff:c6:9d:af:95:97:b4:b6:
1d:29:8a:a2:11:91:55:f9:4c:56:c0:b5:10:ad:9f:6a:81:4d:
fe:e3:a5:ef:ad:10:c2:6a:e1:fb:0c:ca:65:4c:0f:ec:5b:41:
e7:ed:8d:33:28:55:95:9a:5f:6e:f5:8e:2c:28:02:60:5a:b8:
8d:4e:11:f7:36:26:09:0c:65:0f:d2:c6:80:a7:c2:4f:ec:c3:
eb:76:b3:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HtGJaMkmhqMEmLeLPvTGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMDhlNmFiZTJmZTQzMjIyNjUxY2U5OWVmY2QxMmFmNjBl
NjRmNWIwHhcNMjUwNDI2MjIwMTM4WhcNMjUwNDI3MjIwMTM4WjAzMTEwLwYDVQQD
Eyg1OTdhYjE2MGNhNTg2ZmJjYzU1YWFhZGYzOWI2YmU2NmE3ZTM2ZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV5mxyBjs3oOBxmjBd68jhSwXJvo
q1Irg3e0a5TaGbfTO+Tcd80cWKdhcilbtPZ0RoMA8k01G45w/e01XsGJoq1xCQkL
3jyTU9Q5JiFPzZuW1NiHYYJLbkC4qTMdrMKSJi7C1CD+jluISQZUcAK6HIpks1em
9U64yMBKDzuK5M53exp+XVJlDoRke39gp3+zVAbszs8lQ1mM5hpZSM0JVUJ/cSo1
ifyLioiQw9Bt54PCPFEbpp4JRg8Aey/vvfik9F5NATT2ODMF+JZ3yFy4fGkEjCRM
Ecpu57EhCd1CZezQrS2VNj2j7S5T3sDUz9zV78fu9ft+JLrfPWLdI0W1oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFl6sWDKWG+8xVqq3zm2vman421rMB8GA1UdIwQY
MBaAFIsI5qvi/kMiJlHOme/NEq9g5k9bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXdqbXEtTC1ReUltVWM2Wjc4MFNyMkRtVDFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82NzU2YTQtNDBkZS00MmQ1LWI0NzQt
Y2I2YjgwYzllM2Y4LzEvaXdqbXEtTC1ReUltVWM2Wjc4MFNyMkRtVDFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS82NzU2YTQtNDBkZS00MmQ1LWI0NzQtY2I2YjgwYzllM2Y4
LzEvaXdqbXEtTC1ReUltVWM2Wjc4MFNyMkRtVDFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWDAtn33
5e9WaLlvuKPrIR7yT8VDkUUNS94gwvki7irxydM0C5FhBlLqov5C7uwNPT4ESWBA
EmHl/TnIkno1UjbE/HNOt08/zAb1rFwP2V0HJU5uZ2G3OUyCfOtp0yXYP52ynSjz
6IRgeAq3h9uG+vX3U5PBQSi066wXLIhasee7IZ/492Y+EMW9WDv+UzktTw+e+7cf
ULlmmgmcJutNbGCb0n4sSXVJ/rC4/f/Gna+Vl7S2HSmKohGRVflMVsC1EK2faoFN
/uOl760Qwmrh+wzKZUwP7FtB5+2NMyhVlZpfbvWOLCgCYFq4jU4R9zYmCQxlD9LG
gKfCT+zD63azvw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:30 2025 by rpki-client