Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
File: I6NILh1m2H9bml7rnIr9a17CMiQ.mft (raw, json)
Hash identifier: zqQ87EBFOIrj3l4MYyZB8a3i4x/CGf729Uo0yDOYnJE=
Subject key identifier: 18:C9:5F:52:9D:16:8E:BA:1E:7E:FE:22:9B:FA:3C:BA:CC:E1:EA:F6
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
Certificate issuer: /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Certificate serial: 0196914C4AD949D79AB4BF57DEF0673298BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 14:00:18 +0000
Manifest this update: Fri 02 May 2025 14:00:18 +0000
Manifest next update: Sat 03 May 2025 14:00:18 +0000
Files and hashes: 1: I6NILh1m2H9bml7rnIr9a17CMiQ.crl (hash: 2pyvyjiFbMZ6sV6Vuov7hccHp5mnJW/qj8MGKXqLUuU=)
2: IQwej1LnyY7ETYPMzr0MBaKMJYU.roa (hash: m2Od1UXry84TfojxLTlOoi+R13MMd4A7opflyOM6uR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:4a:d9:49:d7:9a:b4:bf:57:de:f0:67:32:98:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Validity
Not Before: May 2 14:00:18 2025 GMT
Not After : May 3 14:00:18 2025 GMT
Subject: CN=18c95f529d168eba1e7efe229bfa3cbacce1eaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a2:91:3d:d7:9a:04:7f:46:64:78:0d:d2:ee:
c8:18:4a:ca:a0:55:6b:49:74:6b:52:3f:de:59:28:
7c:23:36:a6:9e:15:9b:78:43:37:cf:54:cb:06:bd:
91:fe:c0:00:de:43:17:b4:d0:1c:bb:25:a2:1d:40:
b3:5e:21:2b:f6:69:8a:9f:ee:00:09:18:ca:3f:0c:
0b:55:1e:3d:b8:95:62:36:41:bf:3d:3f:d9:04:16:
37:2a:15:87:69:b7:00:2b:13:11:b8:9c:3b:6e:08:
7e:f6:6a:87:7f:86:2c:13:a3:24:4b:a4:d8:a1:f7:
68:d3:3d:9b:79:b8:6b:0d:35:be:d4:04:42:7f:e6:
8b:b3:4f:21:4a:c9:79:ee:66:2b:22:8a:24:6e:e8:
b7:8d:6c:05:df:b9:da:25:ee:2a:b1:bd:4e:6b:bc:
4e:ad:7a:c5:cf:de:f4:6f:71:47:ca:a0:d1:14:d0:
7b:cf:7e:9c:49:e8:0b:b7:64:f8:3f:ad:04:fb:47:
68:d3:d4:06:ea:6a:76:df:ce:02:56:f5:c6:6f:80:
65:7d:76:ca:13:54:9a:65:f1:b2:9a:8f:d7:c1:fa:
9c:5f:9b:57:20:94:d3:68:84:61:d7:46:44:3f:94:
87:ff:e6:df:76:86:07:a5:72:20:15:90:34:6f:d0:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C9:5F:52:9D:16:8E:BA:1E:7E:FE:22:9B:FA:3C:BA:CC:E1:EA:F6
X509v3 Authority Key Identifier:
keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fe:e9:f2:08:70:d5:80:d1:11:52:07:3d:1a:6f:eb:9e:72:
a9:c1:af:e4:13:40:ff:64:42:5e:ac:19:aa:32:eb:db:3c:43:
f4:4d:72:d5:8e:e2:37:0e:06:e5:9a:b4:74:d3:ad:70:eb:bb:
2c:9a:13:29:de:b9:b3:c5:4d:f4:ca:87:9e:3e:8c:fc:4e:54:
24:0c:a6:a4:46:30:4b:fa:ec:59:1d:a9:bf:11:60:bc:56:0a:
2e:0f:66:e0:8a:dc:80:54:c7:1a:af:06:2e:5f:1e:ef:01:c9:
ee:12:81:a5:84:b0:32:13:25:02:09:ab:4a:b5:bd:76:07:d4:
40:84:1b:a2:75:01:8b:aa:7c:bb:ab:84:fa:b6:cb:cd:fd:4c:
69:d9:83:24:b6:5f:0e:ad:ff:5a:ff:0f:55:6f:95:7b:20:50:
34:0a:6a:ba:98:9c:9a:0b:58:5a:4a:d1:ac:9a:9b:f8:ec:a4:
dd:ab:66:08:78:05:47:35:54:05:a9:06:be:42:9f:ba:f3:1b:
68:2a:92:26:d9:2e:17:d1:5d:37:41:7f:d8:bc:a4:1f:e3:dc:
bf:55:bc:20:a2:e8:ac:f2:ea:c9:cb:24:11:32:61:34:7b:0d:
a8:37:7b:45:c2:de:db:a5:5d:5d:76:4d:cd:a3:45:eb:59:43:
54:cf:f3:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRTErZSdeatL9X3vBnMpi/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTM0ODJlMWQ2NmQ4N2Y1YjlhNWVlYjljOGFmZDZiNWVj
MjMyMjQwHhcNMjUwNTAyMTQwMDE4WhcNMjUwNTAzMTQwMDE4WjAzMTEwLwYDVQQD
EygxOGM5NWY1MjlkMTY4ZWJhMWU3ZWZlMjI5YmZhM2NiYWNjZTFlYWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qKRPdeaBH9GZHgN0u7IGErKoFVr
SXRrUj/eWSh8IzamnhWbeEM3z1TLBr2R/sAA3kMXtNAcuyWiHUCzXiEr9mmKn+4A
CRjKPwwLVR49uJViNkG/PT/ZBBY3KhWHabcAKxMRuJw7bgh+9mqHf4YsE6MkS6TY
ofdo0z2bebhrDTW+1ARCf+aLs08hSsl57mYrIookbui3jWwF37naJe4qsb1Oa7xO
rXrFz970b3FHyqDRFNB7z36cSegLt2T4P60E+0do09QG6mp2384CVvXGb4BlfXbK
E1SaZfGymo/XwfqcX5tXIJTTaIRh10ZEP5SH/+bfdoYHpXIgFZA0b9Df+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjJX1KdFo66Hn7+Ipv6PLrM4er2MB8GA1UdIwQY
MBaAFCOjSC4dZth/W5pe65yK/WtewjIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81MDJlY2QtZTZmZS00Mjk4LTgwNTQt
MTM4NTg3MWE5MDlkLzEvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC81MDJlY2QtZTZmZS00Mjk4LTgwNTQtMTM4NTg3MWE5MDlk
LzEvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaf7p8ghw
1YDREVIHPRpv655yqcGv5BNA/2RCXqwZqjLr2zxD9E1y1Y7iNw4G5Zq0dNOtcOu7
LJoTKd65s8VN9MqHnj6M/E5UJAympEYwS/rsWR2pvxFgvFYKLg9m4IrcgFTHGq8G
Ll8e7wHJ7hKBpYSwMhMlAgmrSrW9dgfUQIQbonUBi6p8u6uE+rbLzf1MadmDJLZf
Dq3/Wv8PVW+VeyBQNApqupicmgtYWkrRrJqb+Oyk3atmCHgFRzVUBakGvkKfuvMb
aCqSJtkuF9FdN0F/2LykH+Pcv1W8IKLorPLqycskETJhNHsNqDd7RcLe26VdXXZN
zaNF61lDVM/zXw==
-----END CERTIFICATE-----
Generated at Fri May 2 18:11:58 2025 by rpki-client