Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: Kqv/7GXu56daNyn2iZV2TBg/MMCDaXTs4HaeoawIGLQ=
Subject key identifier: E2:AF:CA:AE:CE:39:F6:59:72:EA:0C:37:04:C0:F1:53:FB:46:C8:4A
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 019896A542C91CB7AA6E701EB494088BEB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 01:01:09 +0000
Manifest this update: Mon 11 Aug 2025 01:01:09 +0000
Manifest next update: Tue 12 Aug 2025 01:01:09 +0000
Files and hashes: 1: 1--lfY911D4o-n0x13kTzxgPAa1c.roa (hash: 7jYLrsmco67v6YLtE1rUNiJwEOZGyK+AZuLqYtKHcu0=)
2: 1-PLlhObhI2KvU31PH_oGB4eDG5U.roa (hash: h2JQLRGR8RDG0rSKaLT0jUCHodG0PW/TX0LlgI0i4Qc=)
3: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: XcYoZtyEdM9RH6Y2i1bnGo+62Nv70OHGnQN2qw+QYNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:42:c9:1c:b7:aa:6e:70:1e:b4:94:08:8b:eb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Aug 11 01:01:09 2025 GMT
Not After : Aug 12 01:01:09 2025 GMT
Subject: CN=e2afcaaece39f65972ea0c3704c0f153fb46c84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0b:03:6b:9a:26:99:0c:5e:2f:d4:f2:63:05:
91:fa:6f:62:2c:34:9f:2b:89:41:51:d6:75:e5:70:
07:5f:30:68:ee:6a:55:6e:a3:05:89:33:0c:95:3a:
44:a3:2d:23:c3:03:f4:be:e3:44:78:6f:2d:0c:00:
d1:09:48:1f:6d:5a:7a:b8:e4:fa:fd:73:39:6a:ec:
c9:ea:c8:d3:ee:3a:ab:f1:91:e7:34:f4:69:71:18:
60:26:a4:c4:af:7d:75:2e:20:83:bf:a1:47:2d:fc:
26:8a:3d:90:48:7c:35:d5:0f:72:7e:07:8f:b7:40:
d9:e5:4a:f1:5d:2a:ae:6b:a0:f6:94:e2:bc:85:7e:
9e:da:2a:78:f9:45:12:47:a2:d9:3b:1c:da:6f:e8:
71:76:bc:4b:bd:40:6f:d6:ed:ee:78:ab:41:a8:04:
1f:cc:f7:04:05:65:13:f0:bc:1f:15:24:45:75:64:
4b:0b:b6:49:f5:f7:3f:1b:c8:b4:22:dc:e8:3d:38:
f1:8f:b4:e0:29:30:fa:02:30:35:6b:8c:12:ef:06:
05:e4:11:48:7f:74:ea:02:27:88:24:aa:79:d0:60:
57:15:2c:fe:2f:38:29:fe:8a:a2:70:7d:48:19:08:
06:ed:52:61:03:f7:72:a4:95:f9:f2:1b:50:14:eb:
77:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AF:CA:AE:CE:39:F6:59:72:EA:0C:37:04:C0:F1:53:FB:46:C8:4A
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ec:c7:ea:18:8e:c9:0e:6b:d7:e4:2a:34:a9:ed:a9:fc:b9:
5f:d1:4d:5c:0f:c7:94:e7:29:53:78:75:4a:a4:ee:53:43:53:
58:b8:e0:51:4e:0f:e5:d3:e4:f6:5d:5b:33:93:a6:d5:23:ad:
3c:f4:e2:e3:b2:74:9a:47:9c:e1:98:82:18:41:87:21:9b:e6:
db:97:0c:51:2d:ae:ee:b9:46:aa:e4:c1:e0:5f:d8:d0:7e:86:
0d:82:6e:a5:a5:25:ac:ff:cd:05:df:b4:c6:1b:f7:a2:99:fc:
0d:ce:e2:c8:b9:45:38:2a:11:e7:c3:c3:b1:7d:f7:8d:c5:f1:
34:9e:5f:2b:66:47:93:6a:78:ab:be:8d:4d:6e:85:09:1f:95:
32:b0:8a:6e:13:88:59:f2:9b:45:93:ac:9a:7d:44:10:31:ce:
35:ce:e1:0f:aa:e3:d2:ba:dc:43:f8:17:fd:ab:73:19:dc:16:
5f:b9:bb:47:10:96:b4:50:ae:49:d5:5d:8b:12:4d:20:8a:be:
8c:11:b3:70:03:d5:e2:cb:dd:81:24:29:f0:07:7f:65:26:81:
4d:e6:18:24:77:78:87:bf:11:6c:9f:33:6b:0b:29:86:e3:4b:
50:dc:df:2d:9c:04:df:d3:82:cb:a2:9b:90:dd:ba:31:e8:e6:
47:c2:df:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpULJHLeqbnAetJQIi+tVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMWUyODM1OWMxODBlYTZjNDg4YTk4Y2EzYWY3N2I1YmI3
OTNkZWUwHhcNMjUwODExMDEwMTA5WhcNMjUwODEyMDEwMTA5WjAzMTEwLwYDVQQD
EyhlMmFmY2FhZWNlMzlmNjU5NzJlYTBjMzcwNGMwZjE1M2ZiNDZjODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AsDa5ommQxeL9TyYwWR+m9iLDSf
K4lBUdZ15XAHXzBo7mpVbqMFiTMMlTpEoy0jwwP0vuNEeG8tDADRCUgfbVp6uOT6
/XM5auzJ6sjT7jqr8ZHnNPRpcRhgJqTEr311LiCDv6FHLfwmij2QSHw11Q9yfgeP
t0DZ5UrxXSqua6D2lOK8hX6e2ip4+UUSR6LZOxzab+hxdrxLvUBv1u3ueKtBqAQf
zPcEBWUT8LwfFSRFdWRLC7ZJ9fc/G8i0ItzoPTjxj7TgKTD6AjA1a4wS7wYF5BFI
f3TqAieIJKp50GBXFSz+Lzgp/oqicH1IGQgG7VJhA/dypJX58htQFOt3RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKvyq7OOfZZcuoMNwTA8VP7RshKMB8GA1UdIwQY
MBaAFCMeKDWcGA6mxIipjKOvd7W7eT3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85MjQ2Y2ItZDQ2Yi00MDYyLTk4N2It
NWIzNGJjMzc4NDM2LzEvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85MjQ2Y2ItZDQ2Yi00MDYyLTk4N2ItNWIzNGJjMzc4NDM2
LzEvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+zH6hiO
yQ5r1+QqNKntqfy5X9FNXA/HlOcpU3h1SqTuU0NTWLjgUU4P5dPk9l1bM5Om1SOt
PPTi47J0mkec4ZiCGEGHIZvm25cMUS2u7rlGquTB4F/Y0H6GDYJupaUlrP/NBd+0
xhv3opn8Dc7iyLlFOCoR58PDsX33jcXxNJ5fK2ZHk2p4q76NTW6FCR+VMrCKbhOI
WfKbRZOsmn1EEDHONc7hD6rj0rrcQ/gX/atzGdwWX7m7RxCWtFCuSdVdixJNIIq+
jBGzcAPV4svdgSQp8Ad/ZSaBTeYYJHd4h78RbJ8zawsphuNLUNzfLZwE39OCy6Kb
kN26MejmR8Lf1A==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:45:16 2025 by rpki-client