Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
File: ib1U59acFH1rVvjGognT3q6id90.mft (raw, json)
Hash identifier: YLtdw+0dewG0JXrZSieCxSiM1y/WNPd1eIkRgnAwSEI=
Subject key identifier: 47:86:2C:C5:1A:7F:97:95:94:7D:CB:C7:FE:97:77:13:61:87:47:2F
Authority key identifier: 89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
Certificate issuer: /CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Certificate serial: 019671C2440F77BCCE94EB4C45FA8957D2D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
Manifest number: 0FBA
Signing time: Sat 26 Apr 2025 11:01:18 +0000
Manifest this update: Sat 26 Apr 2025 11:01:18 +0000
Manifest next update: Sun 27 Apr 2025 11:01:18 +0000
Files and hashes: 1: 3TtQeJqIixTVaSWBRgJKRyJiMtM.roa (hash: +aaxMIBwckBc+5Nn6sLOaOsjDThvNfT/bDobAmTCJB8=)
2: 8GtdV5vXVwAD_7uzLpWTP9X8Eis.roa (hash: va61wvJzxODdeX2y1RUDtdwQklO+DI+rxflcf0q3NHg=)
3: ib1U59acFH1rVvjGognT3q6id90.crl (hash: LFpQu98uqOcCf+duILwVjCCvgd5n01gzqsgZD6Cq4Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c2:44:0f:77:bc:ce:94:eb:4c:45:fa:89:57:d2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Validity
Not Before: Apr 26 11:01:18 2025 GMT
Not After : Apr 27 11:01:18 2025 GMT
Subject: CN=47862cc51a7f9795947dcbc7fe9777136187472f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8d:86:9b:27:50:e0:9e:c2:5b:34:d7:8f:49:
38:75:9c:24:c8:18:04:fc:68:dd:f2:24:6b:b6:67:
76:3f:ba:93:51:6e:46:29:83:af:ea:4f:46:f8:9a:
85:a8:6f:6d:9c:a0:bb:40:65:64:8b:c7:1a:0e:33:
5b:3d:c6:54:08:62:c5:60:b2:cc:2d:b5:8a:ee:8d:
2f:3d:21:ab:f4:e7:9d:ee:dd:65:c8:1d:40:74:a6:
48:03:19:2b:a9:f9:77:fe:ee:b2:c8:24:1f:00:7d:
b1:2c:6d:a4:81:00:3a:59:c4:d1:ea:b3:a5:e7:5f:
a8:36:7e:7e:e1:46:39:37:d4:90:1f:8d:b9:d9:f9:
b2:29:38:82:c4:4a:34:cc:40:13:fb:87:a0:40:a2:
5b:42:3a:09:88:a0:53:92:ac:97:35:76:81:8e:28:
5b:22:3e:37:5a:35:38:b7:97:ac:bd:4f:6d:00:81:
39:5f:df:86:81:f2:ae:1e:a9:d7:c2:a7:69:d2:67:
bf:df:82:2d:29:5d:02:5e:bf:7f:e0:50:f9:ac:dc:
3e:ab:be:f4:63:35:32:fc:2b:83:55:9c:af:7a:cf:
2f:2a:fe:11:99:61:3f:48:0e:68:0d:b1:6c:ab:0a:
d1:d3:1f:51:a7:50:13:c4:b2:ee:17:2e:f7:01:f2:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:86:2C:C5:1A:7F:97:95:94:7D:CB:C7:FE:97:77:13:61:87:47:2F
X509v3 Authority Key Identifier:
keyid:89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:c1:66:1b:4a:8f:e8:8d:42:13:37:23:9a:85:b0:dd:20:d4:
e9:c9:5a:c1:5b:04:24:a4:ec:68:a4:5d:4d:e8:88:ac:50:a1:
3a:f5:23:65:59:eb:77:f4:e8:2f:b0:77:92:79:0b:69:6f:b8:
21:67:35:c5:42:1f:cd:bb:83:f8:b8:c7:09:14:b4:2f:ae:f8:
34:36:ea:b8:a5:df:95:41:28:75:98:94:8b:d5:39:74:76:ef:
cd:31:c1:ab:27:b3:d1:67:c6:76:72:d4:a2:fc:e0:41:15:09:
53:eb:03:38:d4:4c:c7:6e:a7:15:90:5c:f3:40:81:fe:d4:ab:
25:0a:4b:ae:9a:38:97:1f:3e:3e:e7:5b:2e:f0:da:88:d4:2d:
d0:10:ea:18:23:bf:31:5b:a2:be:4c:68:90:f3:29:80:c2:c3:
21:95:fc:13:83:98:77:f2:e1:99:ff:0a:f7:db:48:e5:56:90:
ab:65:8a:10:49:57:64:41:48:9e:46:40:e0:41:85:b0:60:fd:
db:2f:5f:60:20:f4:f8:3e:60:da:ec:0a:e3:cc:ea:49:a5:02:
21:50:f0:23:ec:42:f6:cf:99:67:08:f5:d6:dc:a8:84:1d:ff:
15:c1:ac:fc:e9:04:e5:93:2c:2e:ec:ae:ff:bf:33:aa:34:e7:
f0:46:d0:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxwkQPd7zOlOtMRfqJV9LTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YmQ1NGU3ZDY5YzE0N2Q2YjU2ZjhjNmEyMDlkM2RlYWVh
Mjc3ZGQwHhcNMjUwNDI2MTEwMTE4WhcNMjUwNDI3MTEwMTE4WjAzMTEwLwYDVQQD
Eyg0Nzg2MmNjNTFhN2Y5Nzk1OTQ3ZGNiYzdmZTk3NzcxMzYxODc0NzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA742GmydQ4J7CWzTXj0k4dZwkyBgE
/Gjd8iRrtmd2P7qTUW5GKYOv6k9G+JqFqG9tnKC7QGVki8caDjNbPcZUCGLFYLLM
LbWK7o0vPSGr9Oed7t1lyB1AdKZIAxkrqfl3/u6yyCQfAH2xLG2kgQA6WcTR6rOl
51+oNn5+4UY5N9SQH4252fmyKTiCxEo0zEAT+4egQKJbQjoJiKBTkqyXNXaBjihb
Ij43WjU4t5esvU9tAIE5X9+GgfKuHqnXwqdp0me/34ItKV0CXr9/4FD5rNw+q770
YzUy/CuDVZyves8vKv4RmWE/SA5oDbFsqwrR0x9Rp1ATxLLuFy73AfILIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeGLMUaf5eVlH3Lx/6XdxNhh0cvMB8GA1UdIwQY
MBaAFIm9VOfWnBR9a1b4xqIJ096uonfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWIxVTU5YWNGSDFyVnZqR29nblQzcTZpZDkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kODAwYmUtNGFjZi00OWYyLTk2OWQt
ZGIyMjdjNDk2ODA0LzEvaWIxVTU5YWNGSDFyVnZqR29nblQzcTZpZDkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kODAwYmUtNGFjZi00OWYyLTk2OWQtZGIyMjdjNDk2ODA0
LzEvaWIxVTU5YWNGSDFyVnZqR29nblQzcTZpZDkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3cFmG0qP
6I1CEzcjmoWw3SDU6clawVsEJKTsaKRdTeiIrFChOvUjZVnrd/ToL7B3knkLaW+4
IWc1xUIfzbuD+LjHCRS0L674NDbquKXflUEodZiUi9U5dHbvzTHBqyez0WfGdnLU
ovzgQRUJU+sDONRMx26nFZBc80CB/tSrJQpLrpo4lx8+PudbLvDaiNQt0BDqGCO/
MVuivkxokPMpgMLDIZX8E4OYd/Lhmf8K99tI5VaQq2WKEElXZEFInkZA4EGFsGD9
2y9fYCD0+D5g2uwK48zqSaUCIVDwI+xC9s+ZZwj11tyohB3/FcGs/OkE5ZMsLuyu
/78zqjTn8EbQbw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:25:09 2025 by rpki-client