Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
File: iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft (raw, json)
Hash identifier: XOgcWKUwoJRLz1DuPV1yjvY3gH9zLKp43SzudTLAka4=
Subject key identifier: 3F:4B:00:06:C1:85:D2:04:B9:C2:CB:B2:2E:BA:9B:BE:EE:56:64:89
Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
Certificate issuer: /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Certificate serial: 0196760D304EB89769FB92C193614C32E5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
Manifest number: 14A2
Signing time: Sun 27 Apr 2025 07:01:37 +0000
Manifest this update: Sun 27 Apr 2025 07:01:37 +0000
Manifest next update: Mon 28 Apr 2025 07:01:37 +0000
Files and hashes: 1: KYtWtlgqE5B9oPVpa5XtMWrTy2s.roa (hash: S7OWPBmD/em3aOMLq183MKVqtbhQIKvOUTkiCEiDOio=)
2: iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl (hash: VM1CrZHhXmSARweUWdo8Rfitn9eG6+5VEZfHOlBRxjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:30:4e:b8:97:69:fb:92:c1:93:61:4c:32:e5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Validity
Not Before: Apr 27 07:01:37 2025 GMT
Not After : Apr 28 07:01:37 2025 GMT
Subject: CN=3f4b0006c185d204b9c2cbb22eba9bbeee566489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:0a:df:b9:a0:b1:bf:78:dc:89:1e:95:0c:
08:55:ab:35:c9:fa:8d:d9:cc:94:95:55:b8:39:0b:
97:fe:76:50:d9:e5:39:1b:d2:6c:b0:83:a6:4b:b1:
d1:dc:a5:3c:82:b7:0e:94:0d:10:9f:ac:5c:6f:40:
03:66:49:e8:ab:3c:ea:52:df:41:94:0e:69:40:b5:
40:7f:51:59:d4:43:b2:71:8c:23:f8:61:5e:5c:5a:
5f:31:4b:72:60:17:ba:ac:0f:25:4b:29:0d:e3:db:
21:5d:8e:81:25:64:08:65:e8:b0:5c:dd:18:93:98:
5f:0f:cf:8c:25:c9:ef:8d:1c:77:90:11:31:66:5d:
1b:99:b7:2c:67:93:f9:96:44:c2:35:97:b6:aa:95:
5f:63:5d:d2:ae:d3:08:63:cd:fc:ff:57:5c:77:c7:
90:d3:cf:51:3f:01:f5:e4:e1:8a:00:9d:4f:c9:ac:
5b:36:58:47:2a:25:35:f5:94:cc:2d:be:b1:bc:e8:
ea:aa:a7:7a:51:4a:b5:4f:e1:f0:34:b4:35:99:45:
0c:1b:f8:10:b6:4d:1b:1b:5e:bb:f7:47:5a:e6:7f:
77:7d:51:48:7e:40:7b:48:a8:3f:e0:54:ec:0e:60:
e5:66:a6:e7:36:a4:54:9a:2f:a7:fd:b5:65:4c:00:
b2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:00:06:C1:85:D2:04:B9:C2:CB:B2:2E:BA:9B:BE:EE:56:64:89
X509v3 Authority Key Identifier:
keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:52:a4:ac:9e:cd:b7:f1:37:d0:3c:99:2a:f7:f7:5a:45:4f:
3b:b5:53:5f:86:04:0a:33:60:4b:cf:00:7a:d5:69:94:47:0d:
d9:23:66:59:3e:d9:88:32:fc:c2:97:5c:44:f7:80:38:5c:f3:
9d:55:c8:ef:f9:4b:91:24:fa:1a:40:e5:6b:58:b2:a4:7f:5a:
c9:23:1b:df:6f:24:c2:6d:4f:d4:26:d3:f6:20:58:1b:f7:d9:
98:45:25:3f:43:54:87:78:2b:6f:75:32:c1:11:45:10:19:4c:
09:e9:78:c4:f1:f4:47:14:6e:10:17:85:ed:3b:92:00:c2:e5:
5e:8d:fd:ae:7a:5d:dd:e6:b9:ba:f9:94:de:ae:6d:e1:7c:8d:
d3:5c:a4:28:42:42:d8:e9:81:e0:59:8b:9c:83:be:ad:70:2e:
a9:e9:59:d5:55:9f:12:c9:3c:8a:1a:97:fd:2d:72:88:7e:03:
bb:ab:d3:bf:46:eb:57:de:08:50:66:f4:d2:eb:a2:44:ca:b5:
2f:ea:04:17:ba:07:5b:8a:a0:b3:00:1a:39:ae:51:4c:ed:e4:
80:8a:dd:d7:73:ad:7f:e2:e2:d7:7a:68:f7:f4:11:2a:95:fd:
cc:92:ad:3f:bc:2e:1c:ce:1f:5f:1f:81:09:c1:31:e9:b7:f2:
ff:58:a5:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DTBOuJdp+5LBk2FMMuXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ODg4MThjNGVjZjFkNWRlYjRlYTkzNjY3NDcwYTdhMTE0
ZDlhMDcwHhcNMjUwNDI3MDcwMTM3WhcNMjUwNDI4MDcwMTM3WjAzMTEwLwYDVQQD
EygzZjRiMDAwNmMxODVkMjA0YjljMmNiYjIyZWJhOWJiZWVlNTY2NDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn4K37mgsb943IkelQwIVas1yfqN
2cyUlVW4OQuX/nZQ2eU5G9JssIOmS7HR3KU8grcOlA0Qn6xcb0ADZknoqzzqUt9B
lA5pQLVAf1FZ1EOycYwj+GFeXFpfMUtyYBe6rA8lSykN49shXY6BJWQIZeiwXN0Y
k5hfD8+MJcnvjRx3kBExZl0bmbcsZ5P5lkTCNZe2qpVfY13SrtMIY838/1dcd8eQ
089RPwH15OGKAJ1PyaxbNlhHKiU19ZTMLb6xvOjqqqd6UUq1T+HwNLQ1mUUMG/gQ
tk0bG16790da5n93fVFIfkB7SKg/4FTsDmDlZqbnNqRUmi+n/bVlTACybQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9LAAbBhdIEucLLsi66m77uVmSJMB8GA1UdIwQY
MBaAFIiIgYxOzx1d606pNmdHCnoRTZoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUlpQmpFN1BIVjNyVHFrMlowY0tlaEZObWdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOWViYjItODUxZC00NTc4LWE4Nzkt
YzI5YmYyNWQyNjZlLzEvaUlpQmpFN1BIVjNyVHFrMlowY0tlaEZObWdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jOWViYjItODUxZC00NTc4LWE4NzktYzI5YmYyNWQyNjZl
LzEvaUlpQmpFN1BIVjNyVHFrMlowY0tlaEZObWdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVKkrJ7N
t/E30DyZKvf3WkVPO7VTX4YECjNgS88AetVplEcN2SNmWT7ZiDL8wpdcRPeAOFzz
nVXI7/lLkST6GkDla1iypH9aySMb328kwm1P1CbT9iBYG/fZmEUlP0NUh3grb3Uy
wRFFEBlMCel4xPH0RxRuEBeF7TuSAMLlXo39rnpd3ea5uvmU3q5t4XyN01ykKEJC
2OmB4FmLnIO+rXAuqelZ1VWfEsk8ihqX/S1yiH4Du6vTv0brV94IUGb00uuiRMq1
L+oEF7oHW4qgswAaOa5RTO3kgIrd13Otf+Li13po9/QRKpX9zJKtP7wuHM4fXx+B
CcEx6bfy/1ilDw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:30:54 2025 by rpki-client