Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
File: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json)
Hash identifier: Z5ZV5cEfzQ7z4hBP899iljTboZYxofR1gYyOOj95Gvw=
Subject key identifier: 64:A5:23:6C:D0:36:CD:94:57:08:4D:F3:CF:1A:E4:C1:41:2A:63:5D
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 01978661D11B76A79CBFF315C11E6540F75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
Manifest number: 159B
Signing time: Thu 19 Jun 2025 04:10:46 +0000
Manifest this update: Thu 19 Jun 2025 04:10:46 +0000
Manifest next update: Fri 20 Jun 2025 04:10:46 +0000
Files and hashes: 1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: soKrYT6uTho8wetdqIyunISiiSy+yQxFRhfYA+b2Dyc=)
2: d-g1g1WIQH2eW5zQOoLECyf2CbU.roa (hash: 4hlHKC2roVEpNMRQA5ne6l615543DSp4qxsP/od40+A=)
3: kHVwAjV50K04XcEC52VZ9Z8xRlA.roa (hash: 2Boh063HYNHe4qTfS7TAeZC6aTKdY96/vHBa+9B6mso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 04:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:61:d1:1b:76:a7:9c:bf:f3:15:c1:1e:65:40:f7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: Jun 19 04:10:46 2025 GMT
Not After : Jun 20 04:10:46 2025 GMT
Subject: CN=64a5236cd036cd9457084df3cf1ae4c1412a635d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:2b:ba:1f:c7:28:25:2b:17:59:63:b9:b0:
6b:fe:4b:f8:a6:d7:7b:f1:06:0a:c5:13:c2:45:f4:
45:27:36:26:f6:dc:cd:cf:6f:6b:04:d9:ea:98:c2:
fc:90:25:a9:a7:c7:b6:52:dd:f5:d4:ad:67:6d:7e:
96:b4:76:97:9e:69:0c:15:3c:4c:3c:23:5a:82:37:
67:98:55:30:8b:40:a9:17:37:b7:40:6a:be:30:65:
9b:ac:8f:0b:dc:a5:ce:29:b6:14:3e:29:47:51:ab:
66:88:a9:0f:de:02:86:f4:3b:1e:cf:8e:54:43:94:
4c:dd:b4:ca:17:36:3b:3e:d6:90:6e:a2:af:d1:33:
55:f2:f1:0b:e9:6d:d8:8a:be:ac:10:b3:93:16:e1:
14:f9:9d:85:23:82:c1:06:22:e6:62:d7:48:02:92:
6f:65:c4:72:ff:0b:9c:86:6e:e3:fa:30:b4:67:f6:
d6:33:c0:27:74:62:7c:19:9d:c7:dc:a4:44:6d:c9:
11:25:66:9b:b9:76:83:51:44:79:56:05:6b:b2:0f:
55:25:34:13:4b:76:27:22:56:7d:ab:8b:60:f4:90:
d5:d9:58:50:e3:02:1e:fa:3f:00:a0:a9:b6:5e:1b:
c7:19:a9:e4:72:d4:54:cb:e4:98:2d:66:79:e6:47:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A5:23:6C:D0:36:CD:94:57:08:4D:F3:CF:1A:E4:C1:41:2A:63:5D
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:63:ae:b1:44:7e:6c:c3:eb:af:27:66:12:fc:90:e7:e7:38:
2d:b7:a7:cd:3d:ba:85:63:9f:0b:51:0a:4f:be:a0:61:77:9d:
fb:a1:72:47:6a:32:be:ff:e8:ac:86:99:66:bf:85:92:f9:48:
a9:41:a3:dc:e5:8b:bb:96:5e:b0:a0:ca:2b:64:a9:df:8f:55:
c9:2a:18:3c:f4:fc:4e:32:97:9a:78:26:29:df:b5:24:9b:84:
15:d8:18:ac:fb:98:9c:e2:bf:5e:0b:6c:a2:ef:1c:f5:39:e6:
f5:b0:f0:e7:b0:d7:9d:9d:22:34:0a:b6:12:66:66:10:95:27:
88:6e:e7:7c:d6:3e:6b:23:2a:fe:3c:b1:79:83:77:b9:5a:21:
e3:f8:d5:8b:f3:40:c1:a9:1f:2c:a6:b0:5b:6f:73:a3:5c:c2:
37:4d:06:47:00:04:85:aa:70:9a:da:11:5d:c9:45:3a:f3:45:
ed:a4:e0:42:e6:28:ef:f9:28:e5:0d:46:a8:73:ff:04:ea:a4:
48:18:cd:70:95:e3:d1:e7:b4:dc:95:c1:1e:44:8f:d2:1b:b0:
26:08:d0:fd:87:87:76:b8:c1:f6:d8:a0:ae:2d:4b:4b:9a:10:
2e:04:7a:bd:ab:62:b2:1a:e2:87:4a:27:08:4e:7d:fc:e4:87:
71:0e:5e:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeGYdEbdqecv/MVwR5lQPddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMmJlZDNmMzdjZDcyODI2NTExYzU3NDU2MGRlYjU1NTQy
NTUwZTQwHhcNMjUwNjE5MDQxMDQ2WhcNMjUwNjIwMDQxMDQ2WjAzMTEwLwYDVQQD
Eyg2NGE1MjM2Y2QwMzZjZDk0NTcwODRkZjNjZjFhZTRjMTQxMmE2MzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnforuh/HKCUrF1ljubBr/kv4ptd7
8QYKxRPCRfRFJzYm9tzNz29rBNnqmML8kCWpp8e2Ut311K1nbX6WtHaXnmkMFTxM
PCNagjdnmFUwi0CpFze3QGq+MGWbrI8L3KXOKbYUPilHUatmiKkP3gKG9Dsez45U
Q5RM3bTKFzY7PtaQbqKv0TNV8vEL6W3Yir6sELOTFuEU+Z2FI4LBBiLmYtdIApJv
ZcRy/wuchm7j+jC0Z/bWM8AndGJ8GZ3H3KREbckRJWabuXaDUUR5VgVrsg9VJTQT
S3YnIlZ9q4tg9JDV2VhQ4wIe+j8AoKm2XhvHGankctRUy+SYLWZ55kdMpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSlI2zQNs2UVwhN888a5MFBKmNdMB8GA1UdIwQY
MBaAFPIr7T83zXKCZRHFdFYN61VUJVDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGl2dFB6Zk5jb0psRWNWMFZnM3JWVlFsVU9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yOTRmYTEtZTkzOC00Y2QyLTlhODkt
MjkwNjJlODcwYjY0LzEvOGl2dFB6Zk5jb0psRWNWMFZnM3JWVlFsVU9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8yOTRmYTEtZTkzOC00Y2QyLTlhODktMjkwNjJlODcwYjY0
LzEvOGl2dFB6Zk5jb0psRWNWMFZnM3JWVlFsVU9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2OusUR+
bMPrrydmEvyQ5+c4LbenzT26hWOfC1EKT76gYXed+6FyR2oyvv/orIaZZr+FkvlI
qUGj3OWLu5ZesKDKK2Sp349VySoYPPT8TjKXmngmKd+1JJuEFdgYrPuYnOK/Xgts
ou8c9Tnm9bDw57DXnZ0iNAq2EmZmEJUniG7nfNY+ayMq/jyxeYN3uVoh4/jVi/NA
wakfLKawW29zo1zCN00GRwAEhapwmtoRXclFOvNF7aTgQuYo7/ko5Q1GqHP/BOqk
SBjNcJXj0ee03JXBHkSP0huwJgjQ/YeHdrjB9tigri1LS5oQLgR6vatishrih0on
CE59/OSHcQ5eBg==
-----END CERTIFICATE-----
Generated at Thu Jun 19 13:51:35 2025 by rpki-client