Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft
File: iqaY-D40KcieNMjy77WxIBoY_Pc.mft (raw, json)
Hash identifier: E6eXQQ2nVUirvorEDCKRnxTev0KE7Db7YhRGS1+wTW8=
Subject key identifier: FD:6A:DA:EF:4F:F3:B7:A3:E6:66:5A:0C:82:2C:78:2D:CB:0F:06:99
Authority key identifier: 8A:A6:98:F8:3E:34:29:C8:9E:34:C8:F2:EF:B5:B1:20:1A:18:FC:F7
Certificate issuer: /CN=8aa698f83e3429c89e34c8f2efb5b1201a18fcf7
Certificate serial: 019688B750BD251ACF692A1496B1BA46A79D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqaY-D40KcieNMjy77WxIBoY_Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft
Manifest number: 151C
Signing time: Wed 30 Apr 2025 22:00:37 +0000
Manifest this update: Wed 30 Apr 2025 22:00:37 +0000
Manifest next update: Thu 01 May 2025 22:00:37 +0000
Files and hashes: 1: Eklv5iMrpdIb57nofb-2LDtZiMo.roa (hash: yKALUmc+NQQTzWDEWN3x1mf1BWmjZYZaxlqX1YAmy08=)
2: iqaY-D40KcieNMjy77WxIBoY_Pc.crl (hash: t/IwiNHYV1lsexaclUbsFbTrVD4hjgea66Ne5owYlSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqaY-D40KcieNMjy77WxIBoY_Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:50:bd:25:1a:cf:69:2a:14:96:b1:ba:46:a7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa698f83e3429c89e34c8f2efb5b1201a18fcf7
Validity
Not Before: Apr 30 22:00:37 2025 GMT
Not After : May 1 22:00:37 2025 GMT
Subject: CN=fd6adaef4ff3b7a3e6665a0c822c782dcb0f0699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:4f:0c:7e:e2:52:bc:43:ed:cc:b5:fd:e4:
d3:11:b9:98:f4:6d:ef:d9:e0:71:35:31:97:ef:be:
3b:77:f0:96:af:e1:75:2e:56:5f:e1:6e:46:f3:b2:
d5:50:eb:65:1d:3f:36:92:e1:b7:f0:67:62:25:ac:
c7:70:ac:80:01:d1:e5:4a:d7:17:18:cc:45:c2:44:
bc:d6:ea:84:2f:81:e8:77:7e:53:ba:50:ae:89:45:
7a:87:e1:dd:2c:d5:b3:93:f0:1c:1d:5a:f5:48:98:
28:09:a1:6b:40:60:2d:9c:26:3d:42:32:af:40:4c:
ee:59:9a:1f:03:cd:e4:0c:30:15:f6:cd:39:52:fb:
f8:17:65:d9:29:ff:87:d4:e0:50:5e:0b:27:e2:d8:
b6:16:5f:a1:63:bd:f7:4f:e6:ad:a8:03:99:d5:4e:
5e:d8:23:fa:a0:2f:af:28:85:43:b5:88:db:4f:02:
38:e2:38:f9:24:df:b9:79:ba:db:bb:79:1a:0d:72:
86:fc:d7:dd:20:3a:33:b9:0a:bc:0b:d3:bf:1e:67:
13:ff:f0:90:ee:85:60:db:14:86:57:4c:c8:a6:cb:
2a:bc:b9:a8:e5:d1:ab:4e:72:a0:67:6f:52:59:2f:
b6:b9:a4:4f:57:84:58:b6:5c:be:34:f4:b2:e2:69:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6A:DA:EF:4F:F3:B7:A3:E6:66:5A:0C:82:2C:78:2D:CB:0F:06:99
X509v3 Authority Key Identifier:
keyid:8A:A6:98:F8:3E:34:29:C8:9E:34:C8:F2:EF:B5:B1:20:1A:18:FC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqaY-D40KcieNMjy77WxIBoY_Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:73:5d:69:60:69:32:8f:7c:9c:bb:e4:9e:42:91:4f:ab:16:
75:84:6f:de:fa:1e:e5:7f:0e:a6:8a:54:5b:8f:83:4a:38:f6:
96:c0:d5:a6:96:d8:40:25:79:38:1c:e9:60:93:ad:b0:b0:7d:
db:d4:50:65:37:e0:9e:14:70:21:b0:55:d7:14:ae:4d:fd:7e:
aa:a4:16:4b:18:14:26:dd:fa:44:fa:c9:92:43:fb:cf:93:18:
10:cc:77:73:0d:c4:4d:7e:0a:31:16:43:0f:c4:e4:20:f4:67:
1b:43:f5:70:97:63:2c:7d:72:dc:29:b3:6a:0b:ef:a0:f9:75:
68:ee:ac:44:06:96:fa:c7:67:38:6a:c2:52:fa:02:3f:94:07:
19:5a:0e:71:d0:2a:b3:fd:62:d2:b6:82:53:19:53:c3:ca:a3:
a8:7e:50:e6:c3:9c:4b:27:75:c2:f6:14:8a:27:f0:d7:2f:dd:
a0:4c:d6:07:b2:35:61:60:0c:16:2c:f8:c9:d5:43:d4:06:60:
31:34:7a:a2:20:26:9e:8a:db:06:a0:6e:60:c7:fd:9e:0d:ff:
b5:88:ad:02:a3:ab:d0:fe:d9:cb:6b:3b:b7:ea:41:c4:95:2f:
38:08:2b:fe:ef:78:99:52:1d:93:f6:7c:9d:1c:a6:59:64:5f:
cf:6a:64:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaIt1C9JRrPaSoUlrG6RqedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYTY5OGY4M2UzNDI5Yzg5ZTM0YzhmMmVmYjViMTIwMWEx
OGZjZjcwHhcNMjUwNDMwMjIwMDM3WhcNMjUwNTAxMjIwMDM3WjAzMTEwLwYDVQQD
EyhmZDZhZGFlZjRmZjNiN2EzZTY2NjVhMGM4MjJjNzgyZGNiMGYwNjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiFPDH7iUrxD7cy1/eTTEbmY9G3v
2eBxNTGX7747d/CWr+F1LlZf4W5G87LVUOtlHT82kuG38GdiJazHcKyAAdHlStcX
GMxFwkS81uqEL4Hod35TulCuiUV6h+HdLNWzk/AcHVr1SJgoCaFrQGAtnCY9QjKv
QEzuWZofA83kDDAV9s05Uvv4F2XZKf+H1OBQXgsn4ti2Fl+hY733T+atqAOZ1U5e
2CP6oC+vKIVDtYjbTwI44jj5JN+5ebrbu3kaDXKG/NfdIDozuQq8C9O/HmcT//CQ
7oVg2xSGV0zIpssqvLmo5dGrTnKgZ29SWS+2uaRPV4RYtly+NPSy4ml0dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1q2u9P87ej5mZaDIIseC3LDwaZMB8GA1UdIwQY
MBaAFIqmmPg+NCnInjTI8u+1sSAaGPz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXFhWS1ENDBLY2llTk1qeTc3V3hJQm9ZX1BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kNzA0ZjItNmVkNC00NGMxLThlNGYt
NGQ3YTg0YmFiYmRlLzEvaXFhWS1ENDBLY2llTk1qeTc3V3hJQm9ZX1BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9kNzA0ZjItNmVkNC00NGMxLThlNGYtNGQ3YTg0YmFiYmRl
LzEvaXFhWS1ENDBLY2llTk1qeTc3V3hJQm9ZX1BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHNdaWBp
Mo98nLvknkKRT6sWdYRv3voe5X8OpopUW4+DSjj2lsDVppbYQCV5OBzpYJOtsLB9
29RQZTfgnhRwIbBV1xSuTf1+qqQWSxgUJt36RPrJkkP7z5MYEMx3cw3ETX4KMRZD
D8TkIPRnG0P1cJdjLH1y3CmzagvvoPl1aO6sRAaW+sdnOGrCUvoCP5QHGVoOcdAq
s/1i0raCUxlTw8qjqH5Q5sOcSyd1wvYUiifw1y/doEzWB7I1YWAMFiz4ydVD1AZg
MTR6oiAmnorbBqBuYMf9ng3/tYitAqOr0P7Zy2s7t+pBxJUvOAgr/u94mVIdk/Z8
nRymWWRfz2pkYA==
-----END CERTIFICATE-----
Generated at Thu May 1 03:00:11 2025 by rpki-client