Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: XtzP+kVKgCHwB3bjy3NvlA9xzH2jXOI871TLYvgZUCQ=
Subject key identifier: 79:DB:43:FA:5D:74:2B:E8:B3:E2:1C:EB:B7:DA:FE:9D:F2:0B:A6:46
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 01976961A5C559CC4155C40C407597A1AD38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 151F
Signing time: Fri 13 Jun 2025 13:01:36 +0000
Manifest this update: Fri 13 Jun 2025 13:01:36 +0000
Manifest next update: Sat 14 Jun 2025 13:01:36 +0000
Files and hashes: 1: KbHSaDitknf_vw2Y0vNPZiG2-WU.roa (hash: vniSFXySv0YzFNsEhCVOvtXFilzUNKpEfWkX3Qio2Lg=)
2: WU24XorRtjD4J7y5MHzTmh_a7sU.roa (hash: IX430pDMzb+z+kWkDQJg9gwBTJRqIpyiieKSVe0HAtQ=)
3: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: L/cM+Q2tkMVzf9tope+qAUf0YtTqPJM3OyKxTSpLAOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:a5:c5:59:cc:41:55:c4:0c:40:75:97:a1:ad:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Jun 13 13:01:36 2025 GMT
Not After : Jun 14 13:01:36 2025 GMT
Subject: CN=79db43fa5d742be8b3e21cebb7dafe9df20ba646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:92:39:4a:31:23:a8:22:c8:67:44:7a:10:f9:
96:ee:aa:c2:04:2b:43:6c:b3:c9:80:36:22:1c:3c:
e5:21:a1:f7:f5:64:b0:db:61:af:6e:74:f9:a6:56:
e2:d3:6e:81:53:ca:5e:96:1d:b4:3c:64:27:93:ab:
97:38:aa:59:33:9c:c7:af:bb:31:2b:f0:03:40:ef:
bb:48:4b:7b:49:6a:49:4d:75:be:43:8c:59:2a:ca:
93:a1:93:3c:98:d4:c9:aa:6a:60:55:7e:63:d4:77:
5e:30:76:c9:3b:d3:5b:9d:ed:13:87:90:3c:c1:da:
9f:d2:3b:3e:49:45:52:54:de:e9:29:bb:6d:ac:7e:
2b:8c:e3:c6:e9:84:13:69:7c:d7:25:f7:ef:92:c8:
fc:1f:96:1b:c4:59:fe:8f:5d:ef:d2:f9:3a:ec:66:
2e:dd:bd:94:25:ad:0e:2f:ce:43:5c:7a:a8:08:47:
53:be:33:6e:d0:3a:b4:bc:6a:d5:ee:b5:f5:45:ca:
fe:92:96:fa:7f:0e:92:fd:49:91:b7:57:2d:ff:25:
86:6f:7a:af:a0:57:97:cc:dc:7b:1e:9d:85:b7:34:
54:8b:4b:89:98:04:22:e9:fc:98:f8:3f:71:d6:0e:
6a:d7:38:e6:bb:fb:0b:b9:f9:19:e0:82:f1:c6:70:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DB:43:FA:5D:74:2B:E8:B3:E2:1C:EB:B7:DA:FE:9D:F2:0B:A6:46
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:69:3e:92:aa:4a:31:ae:75:36:7c:b7:80:82:0b:99:1f:a4:
5e:65:0f:40:98:b8:fc:60:71:fb:aa:dd:d5:f9:5c:83:5b:f2:
7b:0a:49:6e:79:28:e3:8c:e8:56:2c:0f:e2:a8:00:f1:e3:1e:
6b:e1:11:92:bd:3d:8e:c4:c9:a7:2b:8c:bd:d5:39:d9:38:cb:
25:d5:79:05:3b:1e:fa:b7:c4:4f:ea:56:2d:fc:6d:69:74:b4:
58:5a:93:e1:25:c1:60:e1:25:97:79:e7:a7:52:41:ba:50:cb:
f9:c4:55:76:ef:96:3a:ba:ef:f1:6a:0f:72:2c:8c:98:d4:e2:
09:ea:90:10:70:8d:e5:a7:a9:8b:79:5f:d8:98:f9:a3:5c:3b:
99:41:b4:2b:d1:b9:1d:bf:39:10:43:f6:ab:0b:05:99:80:36:
a9:8c:a7:a5:0d:3d:c9:47:04:80:ff:05:40:d8:ac:5a:4d:39:
88:e9:88:22:81:5e:48:74:aa:56:c8:dd:49:21:72:83:3b:8f:
7a:b5:31:fd:34:60:1c:8e:75:f9:ec:b7:48:a5:2b:2c:1a:03:
56:0b:b2:31:3b:0f:63:3c:52:97:d8:1b:a1:68:a5:76:19:f6:
ee:2e:39:ec:fd:ce:28:67:f9:22:8a:0e:09:9f:eb:7c:fe:40:
3b:84:0e:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYaXFWcxBVcQMQHWXoa04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMGNkNjk2YWRhODkxMTMwMjU2M2JhNGU0NDJlNmNmYTZh
MjhmZmIwHhcNMjUwNjEzMTMwMTM2WhcNMjUwNjE0MTMwMTM2WjAzMTEwLwYDVQQD
Eyg3OWRiNDNmYTVkNzQyYmU4YjNlMjFjZWJiN2RhZmU5ZGYyMGJhNjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pI5SjEjqCLIZ0R6EPmW7qrCBCtD
bLPJgDYiHDzlIaH39WSw22GvbnT5plbi026BU8pelh20PGQnk6uXOKpZM5zHr7sx
K/ADQO+7SEt7SWpJTXW+Q4xZKsqToZM8mNTJqmpgVX5j1HdeMHbJO9Nbne0Th5A8
wdqf0js+SUVSVN7pKbttrH4rjOPG6YQTaXzXJffvksj8H5YbxFn+j13v0vk67GYu
3b2UJa0OL85DXHqoCEdTvjNu0Dq0vGrV7rX1Rcr+kpb6fw6S/UmRt1ct/yWGb3qv
oFeXzNx7Hp2FtzRUi0uJmAQi6fyY+D9x1g5q1zjmu/sLufkZ4ILxxnA5uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnbQ/pddCvos+Ic67fa/p3yC6ZGMB8GA1UdIwQY
MBaAFIsM1patqJETAlY7pORC5s+moo/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2M0NDMtYjE5OS00MDQxLTgyNDct
YjQwM2QxMGMzZTkxLzEvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9iM2M0NDMtYjE5OS00MDQxLTgyNDctYjQwM2QxMGMzZTkx
LzEvaXd6V2xxMm9rUk1DVmp1azVFTG16NmFpal9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWk+kqpK
Ma51Nny3gIILmR+kXmUPQJi4/GBx+6rd1flcg1vyewpJbnko44zoViwP4qgA8eMe
a+ERkr09jsTJpyuMvdU52TjLJdV5BTse+rfET+pWLfxtaXS0WFqT4SXBYOEll3nn
p1JBulDL+cRVdu+WOrrv8WoPciyMmNTiCeqQEHCN5aepi3lf2Jj5o1w7mUG0K9G5
Hb85EEP2qwsFmYA2qYynpQ09yUcEgP8FQNisWk05iOmIIoFeSHSqVsjdSSFygzuP
erUx/TRgHI51+ey3SKUrLBoDVguyMTsPYzxSl9gboWildhn27i457P3OKGf5IooO
CZ/rfP5AO4QOAQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:38:40 2025 by rpki-client