
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier: 7byu1FfRRrro+tzEugUoynHYnxYwL4Dm+OPIX5eLF+w=
Subject key identifier: C2:EA:5A:63:07:87:D5:35:7E:1F:27:FB:49:E6:7E:33:B0:BA:DE:0C
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 0196778CC207042286FAC91FF256EE7F0233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 14:00:35 +0000
Manifest this update: Sun 27 Apr 2025 14:00:35 +0000
Manifest next update: Mon 28 Apr 2025 14:00:35 +0000
Files and hashes: 1: C3a8w3EA0yZf6c0xKrOAJTxFR18.roa (hash: LNpEHJw7nSfysWTvnjy399UaYBj+VVtM2qrA/gSp1Ss=)
2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: 9dmQfBAielp4ew32tE2mp4MG8HoINTJIoy9P5GLdXhQ=)
3: ODeZnWNl5WX6QJG7docdS6N0Lh0.roa (hash: /UPoSxqJgEbJd9A+t+po1hpjOf0Zwwvb5Sbep9uGpqM=)
4: sWPuB2_JaQ5IbfWV6TRjwzAEtmo.roa (hash: 2MwXerlOGNKciqFr23+HmocPZA4iLoGvibtwd5TaAxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:c2:07:04:22:86:fa:c9:1f:f2:56:ee:7f:02:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Apr 27 14:00:35 2025 GMT
Not After : Apr 28 14:00:35 2025 GMT
Subject: CN=c2ea5a630787d5357e1f27fb49e67e33b0bade0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1d:82:71:bd:e7:e4:f6:c4:64:cd:f8:a2:86:
bb:93:2a:68:ff:2e:e3:81:d0:99:09:50:7c:2c:c4:
ae:16:4d:30:40:f6:a5:16:2a:aa:e2:21:fd:16:96:
20:6c:58:2a:17:12:2a:bb:a1:da:2c:c0:81:de:a6:
8e:21:d1:eb:e8:28:f9:2f:f8:63:91:a9:01:04:2e:
13:12:e5:90:61:74:04:91:3a:96:dc:85:58:0c:9e:
5b:96:06:b7:bd:1e:30:61:cc:9a:c8:35:19:e7:91:
fe:af:2f:b1:fb:2b:54:1c:53:b6:17:9d:6f:f5:0a:
42:ee:13:f3:2b:cf:3c:71:48:5b:95:1c:b2:d4:cf:
dc:5f:73:14:4b:d6:84:59:99:e5:2d:c2:44:0e:b8:
f3:f7:04:ce:d6:00:ec:ae:93:d8:92:a5:17:61:0f:
60:ea:c7:68:60:9a:0d:1c:3b:ad:22:bb:07:88:c0:
75:52:4c:65:fb:6a:da:31:6f:2a:b2:60:59:3b:19:
53:40:34:05:8d:f0:7b:8f:0c:65:09:d9:3c:04:bc:
7b:de:35:b1:d9:d3:67:ca:f9:a6:cb:35:53:83:e2:
d1:f9:20:08:91:7a:03:38:a0:c7:73:f3:7b:24:c5:
e3:b2:c0:35:76:e6:06:38:6f:b8:30:5f:55:c2:68:
e5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EA:5A:63:07:87:D5:35:7E:1F:27:FB:49:E6:7E:33:B0:BA:DE:0C
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5b:c3:94:59:d3:1a:a4:58:8e:2e:09:a8:5d:b7:29:0d:00:
2d:95:f3:7a:99:60:be:4f:13:7e:34:00:b4:da:6e:48:35:d4:
8d:34:c7:ad:72:13:fa:6a:9c:b3:df:f3:fe:19:c5:5d:0a:d8:
21:12:18:08:27:69:87:95:70:55:c0:8a:d2:d8:b9:5f:5a:5a:
69:67:a4:73:4e:c4:d8:4c:60:64:f7:d8:86:c4:c8:61:e0:3f:
5a:4c:17:1d:6d:3e:60:1e:3a:75:89:a5:e8:12:ca:3c:b1:4c:
b9:0b:fb:f7:c3:48:27:0b:8b:97:aa:66:bb:84:21:03:bb:2b:
5f:8d:b9:f4:ad:0e:e0:bf:01:29:9f:87:b6:4f:9e:7f:4b:5c:
a0:5d:60:b7:b1:5e:90:28:05:a3:fc:ff:03:c5:19:a9:ab:bf:
97:ad:99:a1:b4:84:43:1b:be:05:e7:77:41:cd:60:82:e3:28:
72:07:4e:a2:5e:96:59:f5:59:c9:aa:01:d1:92:ab:67:d2:07:
ad:4d:d9:d6:a3:6c:42:52:2e:12:e6:e8:26:9e:b5:bb:60:92:
8f:1f:fb:64:f4:d3:dc:d8:16:02:4c:58:09:1b:b0:6c:b7:ac:
d1:f0:e5:59:25:1b:d6:86:00:c4:d7:2d:ab:15:60:fe:5a:09:
07:91:4f:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3jMIHBCKG+skf8lbufwIzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNjYyYzlhOTgwYWQ3NTg0NjUwYWJhYTM1NDViOWVhOTFk
M2UzNWUwHhcNMjUwNDI3MTQwMDM1WhcNMjUwNDI4MTQwMDM1WjAzMTEwLwYDVQQD
EyhjMmVhNWE2MzA3ODdkNTM1N2UxZjI3ZmI0OWU2N2UzM2IwYmFkZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h2Ccb3n5PbEZM34ooa7kypo/y7j
gdCZCVB8LMSuFk0wQPalFiqq4iH9FpYgbFgqFxIqu6HaLMCB3qaOIdHr6Cj5L/hj
kakBBC4TEuWQYXQEkTqW3IVYDJ5blga3vR4wYcyayDUZ55H+ry+x+ytUHFO2F51v
9QpC7hPzK888cUhblRyy1M/cX3MUS9aEWZnlLcJEDrjz9wTO1gDsrpPYkqUXYQ9g
6sdoYJoNHDutIrsHiMB1Ukxl+2raMW8qsmBZOxlTQDQFjfB7jwxlCdk8BLx73jWx
2dNnyvmmyzVTg+LR+SAIkXoDOKDHc/N7JMXjssA1duYGOG+4MF9VwmjlGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLqWmMHh9U1fh8n+0nmfjOwut4MMB8GA1UdIwQY
MBaAFCNmLJqYCtdYRlCrqjVFueqR0+NeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEt
ODIzMmUzNTBkNDU4LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEtODIzMmUzNTBkNDU4
LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlvDlFnT
GqRYji4JqF23KQ0ALZXzeplgvk8TfjQAtNpuSDXUjTTHrXIT+mqcs9/z/hnFXQrY
IRIYCCdph5VwVcCK0ti5X1paaWekc07E2ExgZPfYhsTIYeA/WkwXHW0+YB46dYml
6BLKPLFMuQv798NIJwuLl6pmu4QhA7srX4259K0O4L8BKZ+Htk+ef0tcoF1gt7Fe
kCgFo/z/A8UZqau/l62ZobSEQxu+Bed3Qc1gguMocgdOol6WWfVZyaoB0ZKrZ9IH
rU3Z1qNsQlIuEuboJp61u2CSjx/7ZPTT3NgWAkxYCRuwbLes0fDlWSUb1oYAxNct
qxVg/loJB5FP1w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:22:25 2025 by rpki-client