Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier: /WtiGS6ASqc93k/0Rm5UyVi8M9UKjVJzrM7fntHOF1A=
Subject key identifier: 7A:DA:C2:0E:49:12:3A:F9:09:75:EC:BD:4D:55:A2:FC:83:B4:D4:67
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial: 019769CE60A325A6389366926A7AC1971B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 15:00:22 +0000
Manifest this update: Fri 13 Jun 2025 15:00:22 +0000
Manifest next update: Sat 14 Jun 2025 15:00:22 +0000
Files and hashes: 1: 2JOqb_FcM3JCaikWzh1QzLM3NNs.roa (hash: isQtSQoVI4VnIJhK4p6fvX5w7lFtKPVqkwJW/rfKCwA=)
2: KkqNZ54Qewj5mCBLo3rtzCSFt7g.roa (hash: Rbv/KvRW9C13yYdCBXyUxqLUAuWNRC3szrxFy+NiiA8=)
3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: xgQxJhYfFlIwq/z++DgO0thnRb/g39/WJEWkqW9LdIk=)
4: soZKqGzihNQNfxzcrDh_Qn-1Tnw.roa (hash: +H581vOHkrLuu+UEmJR0K8H+S0wh9yACSCN32HI4jio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:60:a3:25:a6:38:93:66:92:6a:7a:c1:97:1b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
Validity
Not Before: Jun 13 15:00:22 2025 GMT
Not After : Jun 14 15:00:22 2025 GMT
Subject: CN=7adac20e49123af90975ecbd4d55a2fc83b4d467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f2:95:41:34:00:59:9f:a5:3b:42:35:0a:a5:
d2:77:7b:99:95:63:d8:3e:10:fe:fb:d9:d0:fb:ba:
44:fb:14:42:bb:3d:02:89:88:f3:ab:ef:04:44:1f:
8f:ed:77:a5:4c:38:29:f0:c2:8c:c7:fe:e3:59:85:
67:b5:61:b9:72:3f:8a:a8:88:4d:3b:ad:a7:cb:b6:
a7:8f:d1:44:45:d3:1f:cb:88:aa:fe:fe:5e:6f:92:
63:c2:df:b5:dd:fa:91:a4:a1:c1:7b:1a:13:13:e9:
96:43:4a:ea:05:17:c7:19:64:01:2d:6c:2c:7e:e5:
6e:ac:44:66:1c:2e:93:82:50:c3:6b:9d:87:51:a1:
e2:c9:2d:5b:58:d7:d0:cd:5b:85:e4:63:7f:a8:82:
40:ba:cd:e0:fe:62:b6:1a:ea:30:bc:18:d6:05:db:
64:20:58:7f:37:d7:6d:fb:c3:6a:26:bf:6d:f6:9c:
43:82:ce:80:05:f6:0e:90:a8:d9:37:8d:bf:8c:f6:
8f:b0:40:1b:c5:36:f0:4d:d2:3c:0f:91:a6:07:e5:
85:b4:f7:4c:20:c7:44:15:9d:43:ef:23:67:6c:8f:
da:96:b1:cf:8e:3b:2a:f0:07:f8:ba:47:22:49:d0:
39:f7:cb:f8:bf:2f:e5:be:2c:2e:31:b9:0c:64:ae:
26:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DA:C2:0E:49:12:3A:F9:09:75:EC:BD:4D:55:A2:FC:83:B4:D4:67
X509v3 Authority Key Identifier:
keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:92:bb:3b:ed:32:02:30:90:76:fc:47:59:95:b4:28:77:ef:
22:9e:6b:44:cc:e9:02:9b:06:32:1c:95:da:95:17:55:48:ed:
a1:9e:f6:77:fe:b4:f6:24:5e:6d:84:73:12:ff:17:d9:50:83:
f5:62:fd:b9:9a:29:26:b4:d4:cc:32:a8:82:30:3d:ae:8e:e8:
95:ce:9a:41:09:97:67:4c:73:c8:08:3b:88:3c:e7:48:f4:42:
c9:df:72:b0:ae:04:81:81:03:95:0e:c9:96:8b:a6:7b:d3:51:
fa:23:20:3b:31:ca:0a:9b:35:06:a3:84:19:31:ca:de:78:5c:
09:46:92:8e:f7:cc:6b:80:68:79:62:61:f4:b4:7a:d1:71:7c:
e0:ea:4b:f2:7b:17:81:c7:6a:70:fc:ca:b3:cf:74:97:c6:66:
44:33:e0:2b:90:d4:77:60:78:f4:38:77:b2:85:a5:02:14:9b:
50:7a:66:18:b9:e7:d0:75:da:a9:b9:3f:f2:05:49:b6:8a:c2:
21:f0:e4:34:90:7f:b0:d3:6c:9a:88:81:da:d7:5e:38:3a:bb:
89:6b:f8:cc:5a:d4:2d:2c:83:e1:5c:ab:d6:ff:5a:a6:c1:80:
13:c9:79:78:c3:cb:8d:0f:91:4d:3f:90:71:6a:9b:a3:28:01:
fc:41:83:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzmCjJaY4k2aSanrBlxsOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZTcxOWY0MjY3OTNiMWU5MDYzNzcxNDYwYWJkMzExYTNk
ZmYxMTYwHhcNMjUwNjEzMTUwMDIyWhcNMjUwNjE0MTUwMDIyWjAzMTEwLwYDVQQD
Eyg3YWRhYzIwZTQ5MTIzYWY5MDk3NWVjYmQ0ZDU1YTJmYzgzYjRkNDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PKVQTQAWZ+lO0I1CqXSd3uZlWPY
PhD++9nQ+7pE+xRCuz0CiYjzq+8ERB+P7XelTDgp8MKMx/7jWYVntWG5cj+KqIhN
O62ny7anj9FERdMfy4iq/v5eb5Jjwt+13fqRpKHBexoTE+mWQ0rqBRfHGWQBLWws
fuVurERmHC6TglDDa52HUaHiyS1bWNfQzVuF5GN/qIJAus3g/mK2GuowvBjWBdtk
IFh/N9dt+8NqJr9t9pxDgs6ABfYOkKjZN42/jPaPsEAbxTbwTdI8D5GmB+WFtPdM
IMdEFZ1D7yNnbI/alrHPjjsq8Af4ukciSdA598v4vy/lviwuMbkMZK4mmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrawg5JEjr5CXXsvU1VovyDtNRnMB8GA1UdIwQY
MBaAFIjnGfQmeTsekGN3FGCr0xGj3/EWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU9jWjlDWjVPeDZRWTNjVVlLdlRFYVBmOFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wMGQ0NWQtNWU0OC00NThkLTkyZjct
YWU1MmUxNTZiNzdlLzEvaU9jWjlDWjVPeDZRWTNjVVlLdlRFYVBmOFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8wMGQ0NWQtNWU0OC00NThkLTkyZjctYWU1MmUxNTZiNzdl
LzEvaU9jWjlDWjVPeDZRWTNjVVlLdlRFYVBmOFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpK7O+0y
AjCQdvxHWZW0KHfvIp5rRMzpApsGMhyV2pUXVUjtoZ72d/609iRebYRzEv8X2VCD
9WL9uZopJrTUzDKogjA9ro7olc6aQQmXZ0xzyAg7iDznSPRCyd9ysK4EgYEDlQ7J
loume9NR+iMgOzHKCps1BqOEGTHK3nhcCUaSjvfMa4BoeWJh9LR60XF84OpL8nsX
gcdqcPzKs890l8ZmRDPgK5DUd2B49Dh3soWlAhSbUHpmGLnn0HXaqbk/8gVJtorC
IfDkNJB/sNNsmoiB2tdeODq7iWv4zFrULSyD4Vyr1v9apsGAE8l5eMPLjQ+RTT+Q
cWqboygB/EGDTA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:29 2025 by rpki-client