Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
File: IKf8vlkxTDcraPIyIjgoseM6A-w.mft (raw, json)
Hash identifier: pTY8Qv5dxEb053duissgQs4qUU4RNGKXiNgCriq9M04=
Subject key identifier: BC:43:6D:D0:2D:5B:77:4D:99:9F:A3:D2:7B:9F:8E:16:ED:15:F6:81
Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
Certificate issuer: /CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Certificate serial: 0197711AC455E4FCF0818F8FA7AD2F8D0602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
Manifest number: 11F0
Signing time: Sun 15 Jun 2025 01:01:08 +0000
Manifest this update: Sun 15 Jun 2025 01:01:08 +0000
Manifest next update: Mon 16 Jun 2025 01:01:08 +0000
Files and hashes: 1: IKf8vlkxTDcraPIyIjgoseM6A-w.crl (hash: 60UBbHcR7ruM5Aw2+hY5UC89d1Hf5yJ27qit6LYvZQk=)
2: d-01XFis9cLH8BZUIJJWfcsmDG4.roa (hash: NudOKOFu9rScWQsymrxK2r70c3aFtGLF+JDUyVcCcnw=)
3: rwFlopf5Xa6Dqk29FmnWdxdlBsc.roa (hash: sHbPcAOKBddNPUyuRRzIjyvQe1AGIhhOwA82JfuKSsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:c4:55:e4:fc:f0:81:8f:8f:a7:ad:2f:8d:06:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Validity
Not Before: Jun 15 01:01:08 2025 GMT
Not After : Jun 16 01:01:08 2025 GMT
Subject: CN=bc436dd02d5b774d999fa3d27b9f8e16ed15f681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:74:fe:74:00:57:cf:41:52:a2:02:2c:fb:
70:1b:8e:a0:9a:95:6b:0a:66:5a:c9:5f:a1:47:40:
57:a7:9c:b6:15:d3:e2:d7:76:a7:af:82:1b:bc:e5:
a8:db:84:6e:82:9c:27:d7:2b:a7:41:0e:e8:9c:62:
48:49:33:6f:ec:66:42:dc:bc:e0:20:3b:77:09:18:
83:00:d4:ee:9b:f8:39:55:90:40:b5:ec:18:f7:0d:
1e:4a:d8:b9:57:7b:dc:2e:fd:3c:12:a5:e5:4f:35:
10:15:65:99:7d:e9:04:c9:ba:d8:f1:ce:11:94:ba:
98:55:e8:cd:51:57:be:e1:7e:45:da:1f:9e:16:ca:
1a:b2:07:1a:9b:bf:0e:9e:35:3c:d6:9c:92:eb:73:
b5:48:ee:c3:f4:17:b7:49:f1:d4:3f:79:d7:05:f5:
7b:59:b1:5e:15:65:16:28:6f:ff:b9:b6:7f:98:37:
6f:93:0d:70:47:d3:82:95:f8:7a:27:f5:b7:0f:4c:
2c:f2:af:24:83:d4:ba:7d:57:74:e2:83:10:78:90:
b8:87:0b:cc:d9:ac:55:49:1f:69:2e:7d:8c:78:7c:
40:75:38:3d:78:32:31:50:e6:48:f7:20:0b:f2:56:
79:a9:ae:58:64:ac:c9:8b:77:98:32:52:52:6f:ed:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:43:6D:D0:2D:5B:77:4D:99:9F:A3:D2:7B:9F:8E:16:ED:15:F6:81
X509v3 Authority Key Identifier:
keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1f:91:d1:db:20:b8:83:d6:09:28:3c:58:2b:ba:0c:a6:83:
bd:cb:59:3e:a7:9e:48:cc:c1:28:49:3c:13:61:65:69:6d:7f:
b8:00:24:3a:0d:88:ef:c6:0d:09:92:e5:e1:6f:b2:c4:d0:39:
4e:0c:1e:fe:74:7f:a2:8f:a5:53:dd:bc:6f:5d:b4:c6:f3:12:
0d:9f:ee:37:84:46:8c:25:c9:b8:f8:45:1d:84:62:2f:78:01:
f1:ff:91:22:17:e4:f8:ac:5a:40:72:46:6f:49:54:ca:70:67:
29:7b:1a:5c:a6:5c:78:10:bb:5f:83:30:52:50:b5:98:2c:d9:
95:70:b4:7f:55:ca:3a:03:e4:9f:48:14:80:37:ea:1a:54:d9:
60:aa:7e:50:e4:87:75:d7:fd:f1:2e:d6:e7:7f:7c:56:dd:a7:
c4:32:2b:fb:dc:80:e8:d7:0b:d3:95:2e:0c:56:45:fc:a8:1f:
b1:5a:b0:e0:2d:01:10:6a:0e:9a:0e:cf:92:4e:6d:eb:9a:e5:
e6:62:6b:6c:5c:46:a5:e8:4a:62:ac:38:21:33:e1:ac:84:c9:
4f:f5:1e:f6:f2:9d:0a:9c:c0:44:d1:82:bb:47:1d:6d:b1:71:
19:e2:94:01:79:a6:5b:33:cd:7e:a0:f9:d5:88:0e:69:f5:5b:
56:a7:58:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxGsRV5PzwgY+Pp60vjQYCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYTdmY2JlNTkzMTRjMzcyYjY4ZjIzMjIyMzgyOGIxZTMz
YTAzZWMwHhcNMjUwNjE1MDEwMTA4WhcNMjUwNjE2MDEwMTA4WjAzMTEwLwYDVQQD
EyhiYzQzNmRkMDJkNWI3NzRkOTk5ZmEzZDI3YjlmOGUxNmVkMTVmNjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZR0/nQAV89BUqICLPtwG46gmpVr
CmZayV+hR0BXp5y2FdPi13anr4IbvOWo24Rugpwn1yunQQ7onGJISTNv7GZC3Lzg
IDt3CRiDANTum/g5VZBAtewY9w0eSti5V3vcLv08EqXlTzUQFWWZfekEybrY8c4R
lLqYVejNUVe+4X5F2h+eFsoasgcam78OnjU81pyS63O1SO7D9Be3SfHUP3nXBfV7
WbFeFWUWKG//ubZ/mDdvkw1wR9OClfh6J/W3D0ws8q8kg9S6fVd04oMQeJC4hwvM
2axVSR9pLn2MeHxAdTg9eDIxUOZI9yAL8lZ5qa5YZKzJi3eYMlJSb+3JTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxDbdAtW3dNmZ+j0nufjhbtFfaBMB8GA1UdIwQY
MBaAFCCn/L5ZMUw3K2jyMiI4KLHjOgPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jMzk4OGUtODY1NC00MzExLTgyOTIt
NDI2MDM5Nzg4OTE5LzEvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9jMzk4OGUtODY1NC00MzExLTgyOTItNDI2MDM5Nzg4OTE5
LzEvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgx+R0dsg
uIPWCSg8WCu6DKaDvctZPqeeSMzBKEk8E2FlaW1/uAAkOg2I78YNCZLl4W+yxNA5
Tgwe/nR/oo+lU928b120xvMSDZ/uN4RGjCXJuPhFHYRiL3gB8f+RIhfk+KxaQHJG
b0lUynBnKXsaXKZceBC7X4MwUlC1mCzZlXC0f1XKOgPkn0gUgDfqGlTZYKp+UOSH
ddf98S7W5398Vt2nxDIr+9yA6NcL05UuDFZF/KgfsVqw4C0BEGoOmg7Pkk5t65rl
5mJrbFxGpehKYqw4ITPhrITJT/Ue9vKdCpzARNGCu0cdbbFxGeKUAXmmWzPNfqD5
1YgOafVbVqdY8Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:56:40 2025 by rpki-client