Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier: M38gx71Nwoq04u6fsg+FSr4N+6mC5n5baNPDaNgW7uY=
Subject key identifier: C4:00:A7:DA:3C:51:05:B1:4F:89:FE:65:F8:27:BA:D7:B9:5B:C2:A2
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 019773AD795941A0148943E99F48C94B75FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number: 0645
Signing time: Sun 15 Jun 2025 13:00:37 +0000
Manifest this update: Sun 15 Jun 2025 13:00:37 +0000
Manifest next update: Mon 16 Jun 2025 13:00:37 +0000
Files and hashes: 1: 0Td-ytKd7IQkV6ppvSRDV5Vu3uc.roa (hash: vadykyjqf/87L2UrE0dzG3fnpUitaYJ3rncrWvmznpA=)
2: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: V0QzMIzvXuDquV3jYuygvFVWHKKL/TnHEne0jVOeE8Q=)
3: klqt66FL_fbr6-S9maCaJ71u_2M.roa (hash: veL+ZGa8+a7DgdnASURYCHEXm47JFKP1LXkF9cJkBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:ad:79:59:41:a0:14:89:43:e9:9f:48:c9:4b:75:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: Jun 15 13:00:37 2025 GMT
Not After : Jun 16 13:00:37 2025 GMT
Subject: CN=c400a7da3c5105b14f89fe65f827bad7b95bc2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:d5:bf:89:b7:8f:30:9f:48:fd:db:a5:a5:
75:c8:5f:ef:af:8c:0d:17:64:e0:56:e8:95:43:3c:
a1:3a:df:70:2e:51:a5:ec:82:62:a7:10:27:cb:a4:
81:a0:f1:67:52:27:d5:35:f4:3c:12:58:2d:34:c6:
bf:a8:b9:52:23:5e:6e:87:e7:4f:26:f2:1e:c6:0a:
0b:a8:d6:a3:58:9f:c4:b4:71:84:34:ed:f8:8c:fa:
4a:25:ec:73:89:6c:f0:c4:3e:4e:dd:84:e1:ab:41:
7d:5d:2e:33:fa:9b:10:11:a7:01:85:30:68:2b:4b:
e7:b9:63:3d:34:2f:45:29:22:3d:9a:b4:8d:9e:bf:
0b:61:e7:13:37:15:06:2e:37:68:a2:8e:61:de:84:
44:6f:1f:50:62:19:99:59:cd:37:7f:0b:dd:66:b4:
60:8d:51:07:52:50:19:ad:ef:1a:cd:84:78:5b:d5:
7d:e1:ef:ed:e5:37:7a:ee:9a:f2:f0:81:78:24:93:
bb:98:54:5a:37:97:1a:73:f9:a3:b2:11:43:d8:1b:
67:ca:06:a4:52:e3:63:cd:f2:84:c2:ad:13:e5:48:
94:da:65:52:ff:4d:b1:3d:7f:42:53:ef:8c:34:09:
37:9b:d6:4d:a9:a7:be:7b:1e:00:58:56:86:3f:d9:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:00:A7:DA:3C:51:05:B1:4F:89:FE:65:F8:27:BA:D7:B9:5B:C2:A2
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:19:73:b8:0c:0d:70:4c:0f:3e:89:2b:d1:9d:b2:07:c4:f0:
f2:a1:10:ec:fd:a1:cf:fc:1c:8b:c7:18:51:94:2b:d9:97:57:
34:7d:14:76:38:4f:45:90:08:24:3c:52:bb:56:0f:6d:1c:4d:
07:e0:71:d0:05:0d:36:1d:89:bc:56:f5:18:69:0d:e7:9a:40:
3e:6c:c2:b5:3e:35:f7:dd:67:e4:3c:4a:5d:8e:3a:d1:4e:d8:
08:cd:bb:b0:75:f4:86:fa:8c:dc:20:13:18:4a:70:b3:6f:e2:
ac:99:7c:f2:ea:18:4e:f8:8f:d1:11:b3:4a:ca:23:3d:de:af:
92:ab:b0:e5:c5:7a:9b:e9:30:f1:2c:7e:93:b7:a1:9d:94:38:
ea:4a:d8:60:fb:cc:79:c3:9e:27:2c:cc:6e:ec:90:ba:90:73:
f6:91:a7:4e:7b:76:9a:fe:07:86:fd:cc:df:94:ad:44:f5:f5:
c9:a4:c8:d4:1d:d2:c3:32:db:5b:64:76:65:62:34:fd:e5:03:
91:65:8b:ce:65:d8:8d:f3:79:6e:d8:b2:4f:ed:56:1a:59:84:
36:20:e9:03:6d:38:1f:be:40:3f:d5:e4:f7:c8:1c:e7:fb:82:
98:3e:b3:a0:00:06:56:f9:48:7a:43:d3:0f:63:1d:11:b8:50:
5c:e3:d7:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdzrXlZQaAUiUPpn0jJS3X8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMTFmMDQwM2U5NzQ2NWEwMWRkMTQ1YmMxNTA3YmU1NjU3
MTBkNGUwHhcNMjUwNjE1MTMwMDM3WhcNMjUwNjE2MTMwMDM3WjAzMTEwLwYDVQQD
EyhjNDAwYTdkYTNjNTEwNWIxNGY4OWZlNjVmODI3YmFkN2I5NWJjMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvITVv4m3jzCfSP3bpaV1yF/vr4wN
F2TgVuiVQzyhOt9wLlGl7IJipxAny6SBoPFnUifVNfQ8ElgtNMa/qLlSI15uh+dP
JvIexgoLqNajWJ/EtHGENO34jPpKJexziWzwxD5O3YThq0F9XS4z+psQEacBhTBo
K0vnuWM9NC9FKSI9mrSNnr8LYecTNxUGLjdooo5h3oREbx9QYhmZWc03fwvdZrRg
jVEHUlAZre8azYR4W9V94e/t5Td67pry8IF4JJO7mFRaN5cac/mjshFD2Btnygak
UuNjzfKEwq0T5UiU2mVS/02xPX9CU++MNAk3m9ZNqae+ex4AWFaGP9k0NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQAp9o8UQWxT4n+Zfgnute5W8KiMB8GA1UdIwQY
MBaAFCIR8EA+l0ZaAd0UW8FQe+VlcQ1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWhId1FENlhSbG9CM1JSYndWQjc1V1Z4RFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NWI0MGQtZTkwMC00ZDlmLWFmMDUt
MzE2YzdhOWNkNmI2LzEvSWhId1FENlhSbG9CM1JSYndWQjc1V1Z4RFU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS84NWI0MGQtZTkwMC00ZDlmLWFmMDUtMzE2YzdhOWNkNmI2
LzEvSWhId1FENlhSbG9CM1JSYndWQjc1V1Z4RFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhlzuAwN
cEwPPokr0Z2yB8Tw8qEQ7P2hz/wci8cYUZQr2ZdXNH0UdjhPRZAIJDxSu1YPbRxN
B+Bx0AUNNh2JvFb1GGkN55pAPmzCtT41991n5DxKXY460U7YCM27sHX0hvqM3CAT
GEpws2/irJl88uoYTviP0RGzSsojPd6vkquw5cV6m+kw8Sx+k7ehnZQ46krYYPvM
ecOeJyzMbuyQupBz9pGnTnt2mv4Hhv3M35StRPX1yaTI1B3SwzLbW2R2ZWI0/eUD
kWWLzmXYjfN5btiyT+1WGlmENiDpA204H75AP9Xk98gc5/uCmD6zoAAGVvlIekPT
D2MdEbhQXOPXrg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:40 2025 by rpki-client