Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
File: iaQ4np9NXMjEhtaCK-8fRO987UI.mft (raw, json)
Hash identifier: TrMxyuUjFI7ouPyp90pU49uTGTXcnkTrK6SCudnR61w=
Subject key identifier: 1C:0F:AE:E3:B3:02:2C:48:92:0B:85:59:47:6B:B6:01:E5:11:D9:37
Authority key identifier: 89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
Certificate issuer: /CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Certificate serial: 01976BBCE8C7C57782E6A4D0FA66BBC39C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
Manifest number: 9C
Signing time: Sat 14 Jun 2025 00:00:31 +0000
Manifest this update: Sat 14 Jun 2025 00:00:31 +0000
Manifest next update: Sun 15 Jun 2025 00:00:31 +0000
Files and hashes: 1: 8ZpplWrhbVda_aSYHx2pbbAdBWI.roa (hash: KC0Osg8WEd8lVzUhmWMq6YDl/x9/ZL2h5Pd6qvq9PbE=)
2: iaQ4np9NXMjEhtaCK-8fRO987UI.crl (hash: 3VfXrPe3w66dg1thLt+hI2xWFw7+C7x6g8gV6M4g/Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:e8:c7:c5:77:82:e6:a4:d0:fa:66:bb:c3:9c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Validity
Not Before: Jun 14 00:00:31 2025 GMT
Not After : Jun 15 00:00:31 2025 GMT
Subject: CN=1c0faee3b3022c48920b8559476bb601e511d937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:8a:70:28:98:61:73:54:82:d2:20:a3:8c:
cf:ef:15:cb:57:0d:fe:c2:1f:a4:7a:b8:ee:88:56:
b8:9f:ac:b8:cb:2e:c0:e7:7a:85:73:5f:bd:fe:98:
b1:47:2e:77:c3:3f:29:48:3e:f6:d5:06:3e:b0:4a:
f3:c6:9a:e8:05:ae:50:9d:f3:f3:81:28:09:10:22:
dc:fd:3e:7f:78:3e:aa:88:b3:04:6d:83:7f:12:ff:
a4:f0:c7:b5:a4:cc:6f:06:18:be:8e:a9:f5:b0:3e:
c8:b5:2f:e0:19:1e:f5:22:a0:45:ae:43:bb:fe:3b:
e4:e3:f2:d2:6e:8e:4b:20:40:66:b3:38:c3:d0:62:
aa:6f:20:af:3e:10:02:24:ac:55:04:dd:7d:20:f4:
cb:7d:54:b2:f9:58:ed:1b:b9:60:14:4c:24:ed:7b:
98:29:e8:4b:19:ff:20:4a:a5:20:e2:88:f6:19:62:
01:4d:f8:75:f2:76:b4:58:8b:dd:c2:2b:ca:cb:6e:
f7:3d:03:84:74:e0:f5:e8:d4:9b:d2:58:64:bb:34:
5b:3b:d4:ff:38:e5:4f:03:34:ca:8d:51:f4:26:f8:
05:30:ea:ef:e9:2e:a7:77:e1:0a:d4:4b:16:7c:ff:
c0:d7:b5:27:b4:b6:6c:0d:ef:34:e1:42:78:c2:f5:
62:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0F:AE:E3:B3:02:2C:48:92:0B:85:59:47:6B:B6:01:E5:11:D9:37
X509v3 Authority Key Identifier:
keyid:89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c7:a4:c8:d3:05:1c:b9:59:16:5f:19:15:58:00:0e:55:c4:
56:d2:59:8e:a6:b0:b0:85:32:fd:ca:2d:13:34:32:90:7a:86:
da:dd:4f:f5:8b:74:2b:ef:b5:2b:68:5d:bb:36:5d:41:a3:5c:
55:8f:43:c9:93:b1:f4:21:f8:0c:50:08:7c:98:27:33:84:95:
e8:49:7d:51:81:98:4e:81:b8:d5:e2:49:01:f8:19:23:6d:14:
53:ca:77:86:ad:83:34:d8:e0:4d:ed:f6:b8:9d:99:13:9e:2f:
33:0b:0e:54:a8:e4:4c:0d:4b:c6:5e:2b:d4:84:eb:dd:de:ae:
78:d6:7a:1e:ac:ce:62:21:28:a4:72:bb:43:4c:c6:a3:d8:e9:
20:3b:a1:24:96:09:49:5a:9b:60:7e:35:11:a9:51:46:a3:1c:
1f:9a:94:8e:6f:3e:f1:28:10:a7:df:a2:12:d3:46:df:20:a7:
13:52:d9:2b:9b:c7:dc:dd:80:6e:13:e4:0d:cf:44:a2:d0:5e:
2c:09:69:8d:e2:0e:23:5d:63:8e:8d:bc:b6:84:00:b5:40:8a:
83:1c:5b:9f:82:1a:a5:85:a0:65:e4:d0:78:ea:17:d4:9a:7f:
11:cc:63:90:f1:1b:96:35:7a:8a:9f:a6:e2:fd:89:38:df:c1:
2e:3a:90:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvOjHxXeC5qTQ+ma7w5xZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YTQzODllOWY0ZDVjYzhjNDg2ZDY4MjJiZWYxZjQ0ZWY3
Y2VkNDIwHhcNMjUwNjE0MDAwMDMxWhcNMjUwNjE1MDAwMDMxWjAzMTEwLwYDVQQD
EygxYzBmYWVlM2IzMDIyYzQ4OTIwYjg1NTk0NzZiYjYwMWU1MTFkOTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ2KcCiYYXNUgtIgo4zP7xXLVw3+
wh+kerjuiFa4n6y4yy7A53qFc1+9/pixRy53wz8pSD721QY+sErzxproBa5QnfPz
gSgJECLc/T5/eD6qiLMEbYN/Ev+k8Me1pMxvBhi+jqn1sD7ItS/gGR71IqBFrkO7
/jvk4/LSbo5LIEBmszjD0GKqbyCvPhACJKxVBN19IPTLfVSy+VjtG7lgFEwk7XuY
KehLGf8gSqUg4oj2GWIBTfh18na0WIvdwivKy273PQOEdOD16NSb0lhkuzRbO9T/
OOVPAzTKjVH0JvgFMOrv6S6nd+EK1EsWfP/A17UntLZsDe804UJ4wvViFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwPruOzAixIkguFWUdrtgHlEdk3MB8GA1UdIwQY
MBaAFImkOJ6fTVzIxIbWgivvH0TvfO1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWFRNG5wOU5YTWpFaHRhQ0stOGZSTzk4N1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lNjBhMzEtMWQ3Ni00ZDlmLTgwMGEt
MjEzNDg0ODRmZjFiLzEvaWFRNG5wOU5YTWpFaHRhQ0stOGZSTzk4N1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lNjBhMzEtMWQ3Ni00ZDlmLTgwMGEtMjEzNDg0ODRmZjFi
LzEvaWFRNG5wOU5YTWpFaHRhQ0stOGZSTzk4N1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8ekyNMF
HLlZFl8ZFVgADlXEVtJZjqawsIUy/cotEzQykHqG2t1P9Yt0K++1K2hduzZdQaNc
VY9DyZOx9CH4DFAIfJgnM4SV6El9UYGYToG41eJJAfgZI20UU8p3hq2DNNjgTe32
uJ2ZE54vMwsOVKjkTA1Lxl4r1ITr3d6ueNZ6HqzOYiEopHK7Q0zGo9jpIDuhJJYJ
SVqbYH41EalRRqMcH5qUjm8+8SgQp9+iEtNG3yCnE1LZK5vH3N2AbhPkDc9EotBe
LAlpjeIOI11jjo28toQAtUCKgxxbn4IapYWgZeTQeOoX1Jp/EcxjkPEbljV6ip+m
4v2JON/BLjqQHw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:18 2025 by rpki-client