Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: wzvbFrnctFq82kZsc0ruwj381g1Dcg/yKbGyK3bYT4A=
Subject key identifier: 96:FB:D3:DA:55:46:F7:E0:69:2C:C4:6B:9F:30:12:E1:27:62:C4:7F
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 01976BBCD11D7CC82F4C17601E1A8B629A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 00:00:25 +0000
Manifest this update: Sat 14 Jun 2025 00:00:25 +0000
Manifest next update: Sun 15 Jun 2025 00:00:25 +0000
Files and hashes: 1: ThUJ8aSmMtP4aHcJCzzypfLa8ic.roa (hash: dNkVlGDZVTIktuBX7rmx/RdrVxwALHhLlc8K3va90zE=)
2: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: isuSFodnPMF3Fc//pWkPqcdrnqdpYm2rHX3yurW5TPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:d1:1d:7c:c8:2f:4c:17:60:1e:1a:8b:62:9a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Jun 14 00:00:25 2025 GMT
Not After : Jun 15 00:00:25 2025 GMT
Subject: CN=96fbd3da5546f7e0692cc46b9f3012e12762c47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:bf:1f:8b:eb:ab:df:8b:f6:22:9f:72:1c:
b5:64:02:c5:6a:ab:02:10:25:56:2b:a8:54:40:e3:
4b:c2:14:08:d9:27:13:f7:c6:23:ae:19:cd:7a:ba:
98:58:f2:7b:86:77:f9:61:55:20:60:c4:a6:50:8d:
7c:53:aa:eb:21:fa:04:35:91:f8:7e:ab:f2:90:22:
87:a1:6f:88:30:0a:4e:c6:2e:5d:bc:ad:c7:a1:db:
ec:f6:3e:87:5a:02:93:4c:3d:e2:54:39:16:c9:57:
de:61:fb:23:03:45:4c:4f:5a:2e:a6:34:7e:cf:27:
c3:8e:cb:98:74:0e:55:aa:7a:82:8f:b0:a0:53:5c:
c7:68:44:32:c5:1a:78:d7:8a:c0:67:9b:5a:c6:fc:
16:5a:15:8c:d1:76:33:d9:c7:e8:fd:b3:e3:fa:45:
b3:5b:02:67:cf:d3:cf:3f:0b:c5:4b:fd:b0:df:ac:
85:16:da:6d:9b:63:ad:c9:95:14:bc:48:42:38:20:
3a:41:01:09:5c:12:c4:84:b8:8b:70:4f:a8:e4:7d:
1d:5a:ed:10:b2:ec:52:b5:e4:67:7f:5a:7b:e3:42:
dc:bb:37:b8:43:b9:0c:0d:d3:14:0b:f9:b3:ad:b0:
90:29:cf:ed:95:f6:13:43:03:32:fe:c3:e8:dd:49:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FB:D3:DA:55:46:F7:E0:69:2C:C4:6B:9F:30:12:E1:27:62:C4:7F
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:99:17:22:5a:24:2d:cf:cf:be:a1:a8:7e:72:6f:72:ef:05:
c4:82:16:e1:b9:20:78:b4:59:68:93:6c:c8:7e:15:a4:88:04:
5c:6d:a6:ea:52:7d:48:a2:4e:6e:eb:0c:4c:6f:68:05:cd:da:
7a:d7:3e:2b:6a:4c:cd:0c:a9:03:3c:ff:de:0b:d7:b5:6a:79:
25:1d:9f:41:d3:b0:80:2b:f2:77:83:75:54:48:ac:27:bd:09:
82:01:40:29:fc:17:67:77:d2:9a:51:46:a8:e7:55:e4:39:42:
de:73:5c:1c:1e:d5:9a:c4:fa:45:38:3f:b0:1c:49:8b:85:fa:
78:0c:82:73:c8:32:e0:8a:eb:4a:45:b0:13:86:d6:d2:33:15:
a4:cc:06:dd:07:f1:1a:44:be:0c:ca:9d:ac:17:1b:93:27:7b:
4f:cc:44:25:a4:d2:c0:e2:53:61:9e:c3:57:3c:d8:15:d7:46:
f5:9d:a4:ab:b1:92:d6:06:cc:0d:2e:84:87:28:86:34:6f:24:
5c:2e:86:98:d3:8e:74:83:21:75:d9:f3:c1:f1:97:a0:e7:0e:
af:d0:f2:2c:5d:6e:47:a5:07:bc:d0:7f:04:b7:01:cc:55:0b:
76:d7:70:c3:5c:8e:43:d1:0b:66:60:bd:4c:2c:7d:e9:a5:ce:
34:bf:61:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvNEdfMgvTBdgHhqLYpobMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MWFmODVmODFkZDNmM2IyNGFiMTRlZDFmNDJjN2NjNDY2
NTAyZjAwHhcNMjUwNjE0MDAwMDI1WhcNMjUwNjE1MDAwMDI1WjAzMTEwLwYDVQQD
Eyg5NmZiZDNkYTU1NDZmN2UwNjkyY2M0NmI5ZjMwMTJlMTI3NjJjNDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi2/H4vrq9+L9iKfchy1ZALFaqsC
ECVWK6hUQONLwhQI2ScT98YjrhnNerqYWPJ7hnf5YVUgYMSmUI18U6rrIfoENZH4
fqvykCKHoW+IMApOxi5dvK3Hodvs9j6HWgKTTD3iVDkWyVfeYfsjA0VMT1oupjR+
zyfDjsuYdA5VqnqCj7CgU1zHaEQyxRp414rAZ5taxvwWWhWM0XYz2cfo/bPj+kWz
WwJnz9PPPwvFS/2w36yFFtptm2OtyZUUvEhCOCA6QQEJXBLEhLiLcE+o5H0dWu0Q
suxSteRnf1p740Lcuze4Q7kMDdMUC/mzrbCQKc/tlfYTQwMy/sPo3UnkxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb709pVRvfgaSzEa58wEuEnYsR/MB8GA1UdIwQY
MBaAFIga+F+B3T87JKsU7R9Cx8xGZQLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUt
ZjI1NTY1OGJiODgxLzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUtZjI1NTY1OGJiODgx
LzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5kXIlok
Lc/PvqGofnJvcu8FxIIW4bkgeLRZaJNsyH4VpIgEXG2m6lJ9SKJObusMTG9oBc3a
etc+K2pMzQypAzz/3gvXtWp5JR2fQdOwgCvyd4N1VEisJ70JggFAKfwXZ3fSmlFG
qOdV5DlC3nNcHB7VmsT6RTg/sBxJi4X6eAyCc8gy4IrrSkWwE4bW0jMVpMwG3Qfx
GkS+DMqdrBcbkyd7T8xEJaTSwOJTYZ7DVzzYFddG9Z2kq7GS1gbMDS6EhyiGNG8k
XC6GmNOOdIMhddnzwfGXoOcOr9DyLF1uR6UHvNB/BLcBzFULdtdww1yOQ9ELZmC9
TCx96aXONL9htw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:32:20 2025 by rpki-client