Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: d/agVrwEU73oVV/3LFbMvbNFGAl5UCuEjnQUxtj972w=
Subject key identifier: 97:DF:7B:30:C5:65:04:21:BA:4F:C1:2B:0B:72:ED:D5:53:6F:37:08
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 01978B1136AAC83639B97BC583CB4DE4910E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 06D1
Signing time: Fri 20 Jun 2025 02:00:50 +0000
Manifest this update: Fri 20 Jun 2025 02:00:50 +0000
Manifest next update: Sat 21 Jun 2025 02:00:50 +0000
Files and hashes: 1: HbRQpBgObvXEU2PlNrEx4IzYigA.roa (hash: Zv7kNMXOsdDw3zZwNDMjdGrZy1Nvjep0YaEbodwv3Qw=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: mJhj392jwLXYdjwcdGR4+tDU7F6MKF1ik5LlILQ8dWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:11:36:aa:c8:36:39:b9:7b:c5:83:cb:4d:e4:91:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Jun 20 02:00:50 2025 GMT
Not After : Jun 21 02:00:50 2025 GMT
Subject: CN=97df7b30c5650421ba4fc12b0b72edd5536f3708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:16:a4:22:24:8f:34:1c:fa:23:16:3a:a2:
64:33:a3:bf:cf:b8:ba:bb:27:b5:bc:bd:3f:96:e8:
c8:31:72:6c:f1:fd:2c:1b:23:6e:e1:89:06:83:88:
08:79:97:98:05:ff:c2:0f:62:3b:d0:dd:40:fc:7d:
f5:85:09:42:d5:9a:1a:4e:47:15:a9:91:d0:6f:3f:
9e:25:33:fa:ed:0b:d9:2f:75:f2:fe:3f:f0:27:aa:
8e:4d:e8:b5:55:f0:57:01:4f:93:fe:1e:5b:4b:67:
41:d6:d6:fb:27:df:08:fe:9c:01:69:41:e0:93:01:
3b:39:09:0e:a0:39:a9:44:54:ce:93:a5:47:ea:4a:
f0:2b:aa:c2:17:71:cf:91:b3:c4:68:ff:3f:c3:9d:
84:51:d1:37:3c:8e:33:94:3e:0d:12:74:ba:d4:c3:
6e:b1:51:eb:cc:ba:b2:19:f6:38:21:f9:37:cc:7d:
f9:f4:23:7d:82:04:17:65:e8:5d:3b:07:fd:27:fb:
b5:6a:ba:11:55:5b:35:bf:33:22:6f:4a:87:3e:61:
08:de:c8:3b:f9:02:24:c2:93:16:7e:b3:c5:ae:20:
d8:d5:d4:34:73:e8:59:8d:04:ad:d0:a5:3f:41:61:
5a:b1:68:7d:25:99:59:d1:cd:81:4d:3b:7b:4d:4b:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DF:7B:30:C5:65:04:21:BA:4F:C1:2B:0B:72:ED:D5:53:6F:37:08
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8e:4d:b6:54:0e:e4:2c:49:94:fc:18:cd:86:e0:f8:9e:09:
b3:36:aa:6e:5f:d8:92:81:3e:40:34:f6:09:d4:16:e7:72:49:
65:71:10:6d:3b:b3:82:3f:df:99:fb:31:57:c0:cf:f9:fe:82:
5f:56:a3:8e:ac:23:3a:91:61:a1:59:e5:b7:bc:e9:2a:26:c6:
9e:8b:1b:7f:fd:c8:06:e6:82:b0:7a:14:09:8a:58:c6:cd:31:
93:1d:fd:8d:03:32:48:3d:83:51:a0:b5:2e:fa:37:f2:e6:60:
ee:a9:48:70:ec:15:44:f8:c4:28:8f:61:25:d7:72:3d:7b:24:
04:08:15:b1:8a:fd:9b:a5:49:47:a8:67:ef:ce:78:60:08:bc:
43:9c:18:b6:4e:f4:5f:74:38:76:e8:6f:de:2b:be:0e:89:d1:
2a:df:4f:bf:1a:db:9d:02:8c:27:b8:f6:3b:25:c3:60:40:e0:
08:ca:fc:ff:dc:8c:c2:52:5c:e8:31:5d:5b:6d:65:ee:3b:ac:
57:26:29:bc:cf:07:9b:f8:33:fb:57:69:a0:2b:4d:22:c7:1a:
50:45:92:58:4a:67:f9:cc:d9:5d:7d:51:5a:fb:28:1d:47:65:
71:76:cb:54:5b:88:66:21:d5:7c:25:47:a8:1d:bd:2d:a5:6b:
f0:69:71:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeLETaqyDY5uXvFg8tN5JEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMDU4NTM2MWQ1MWE3MmU3YmE2MzA4YzBjZWIxNjAyNDQ4
MzExNzgwHhcNMjUwNjIwMDIwMDUwWhcNMjUwNjIxMDIwMDUwWjAzMTEwLwYDVQQD
Eyg5N2RmN2IzMGM1NjUwNDIxYmE0ZmMxMmIwYjcyZWRkNTUzNmYzNzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VEWpCIkjzQc+iMWOqJkM6O/z7i6
uye1vL0/lujIMXJs8f0sGyNu4YkGg4gIeZeYBf/CD2I70N1A/H31hQlC1ZoaTkcV
qZHQbz+eJTP67QvZL3Xy/j/wJ6qOTei1VfBXAU+T/h5bS2dB1tb7J98I/pwBaUHg
kwE7OQkOoDmpRFTOk6VH6krwK6rCF3HPkbPEaP8/w52EUdE3PI4zlD4NEnS61MNu
sVHrzLqyGfY4Ifk3zH359CN9ggQXZehdOwf9J/u1aroRVVs1vzMib0qHPmEI3sg7
+QIkwpMWfrPFriDY1dQ0c+hZjQSt0KU/QWFasWh9JZlZ0c2BTTt7TUu+bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJffezDFZQQhuk/BKwty7dVTbzcIMB8GA1UdIwQY
MBaAFCAFhTYdUacue6YwjAzrFgJEgxF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEt
MzE3Nzk4NzViNGZhLzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEtMzE3Nzk4NzViNGZh
LzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK45NtlQO
5CxJlPwYzYbg+J4Jszaqbl/YkoE+QDT2CdQW53JJZXEQbTuzgj/fmfsxV8DP+f6C
X1ajjqwjOpFhoVnlt7zpKibGnosbf/3IBuaCsHoUCYpYxs0xkx39jQMySD2DUaC1
Lvo38uZg7qlIcOwVRPjEKI9hJddyPXskBAgVsYr9m6VJR6hn7854YAi8Q5wYtk70
X3Q4duhv3iu+DonRKt9PvxrbnQKMJ7j2OyXDYEDgCMr8/9yMwlJc6DFdW21l7jus
VyYpvM8Hm/gz+1dpoCtNIscaUEWSWEpn+czZXX1RWvsoHUdlcXbLVFuIZiHVfCVH
qB29LaVr8Glx4w==
-----END CERTIFICATE-----
Generated at Fri Jun 20 07:18:13 2025 by rpki-client