Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
File: I3ikqcUjJahZIICboaTYniHALxc.mft (raw, json)
Hash identifier: X6ZlkFHhpVs11hsB4A3sPoYQPdm6p6dQkD5vJzFsYGw=
Subject key identifier: E1:F5:B3:C7:88:13:04:EB:8A:92:75:C7:93:55:6F:22:FE:2C:00:9B
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 01976F2BDF6FABED8DD7C3113ABDC38199E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
Manifest number: 12DE
Signing time: Sat 14 Jun 2025 16:00:35 +0000
Manifest this update: Sat 14 Jun 2025 16:00:35 +0000
Manifest next update: Sun 15 Jun 2025 16:00:35 +0000
Files and hashes: 1: I3ikqcUjJahZIICboaTYniHALxc.crl (hash: mXLcBCGMuCVdw9nRR2TtQhHt6R5Hiso6sDyrVx+OjiY=)
2: LWXmlZUU3ecfqvwZHXpe4N13PwE.roa (hash: 4NYVwWGAs7YF0X626zcPKU0/2BhITxR5hdojEVCb7vQ=)
3: Sb-J4R6jgDy1hu0trOifGY0aUIY.roa (hash: BnRnuIbBZBHwGOy/+XFTLzwpti+5vGhUFRVEfpqfups=)
4: XNLU8qoxsRXpQnmwz4ctSe-cqyE.roa (hash: JQ5L08jadmyYilDYeIqvPylZ8SNDZ1MGMwYpTLmwoLo=)
5: cEBx7aoqU0ILwpLn4WovM_f845U.roa (hash: J2opbMpTZpUpvX4wcx9CCjjTjdIRz3Wc8zKaGaF1BXs=)
6: caXYCCXqjYg5FcmsNZB3ePKReDk.roa (hash: XSzupsyXsQ8GmhQZJGGSHfiNeG8fCN+9mFDFmlJ4Bu4=)
7: gnOWx6TZJqqJDVFgIEMBOXAqJm4.roa (hash: fy9tgSe6kfwMDX9Ibp9s7/6EtOy/O5uDNSQU1PskuXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:df:6f:ab:ed:8d:d7:c3:11:3a:bd:c3:81:99:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Jun 14 16:00:35 2025 GMT
Not After : Jun 15 16:00:35 2025 GMT
Subject: CN=e1f5b3c7881304eb8a9275c793556f22fe2c009b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:8b:b9:db:66:b2:a3:72:1b:f8:71:95:23:
09:05:0a:ed:5d:74:1f:f7:5f:8f:a8:85:08:4d:d6:
e0:6b:be:f0:a1:73:e6:70:d8:17:ca:f8:71:08:de:
3d:3a:48:d5:48:cf:ea:d3:5a:e6:be:aa:0f:c2:7e:
b7:88:8c:2e:8e:55:24:1f:3e:47:23:fc:e1:03:1d:
6d:7a:b4:e8:1f:be:d8:c4:b7:34:aa:5f:9b:4d:da:
a2:da:c0:63:26:bb:02:80:63:fe:52:02:c4:7d:97:
8e:11:0d:0a:1b:3b:c5:dc:7f:56:2c:94:40:09:a8:
c4:f4:3e:e5:2b:a7:b0:19:a1:b0:7c:cf:32:3b:93:
b1:7f:08:5b:3d:69:c3:4a:66:db:0b:67:8e:8b:3c:
22:ca:b8:1f:20:14:8f:ee:b4:67:a7:4a:d8:bc:ae:
50:7d:8e:9c:03:60:f5:d2:20:b4:aa:a2:d9:e7:1e:
bb:f3:93:b7:7d:4b:29:1d:9b:ef:6c:eb:59:05:8d:
35:40:6d:73:37:30:9d:7c:f1:06:e9:ad:23:7a:33:
25:95:25:f3:68:8d:d5:92:68:11:3c:6b:54:d0:93:
4c:d4:f7:d2:a3:db:d2:27:f9:24:b6:66:e7:63:cd:
cd:32:13:e9:57:e8:26:38:3c:18:49:75:ce:b9:09:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F5:B3:C7:88:13:04:EB:8A:92:75:C7:93:55:6F:22:FE:2C:00:9B
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4f:da:dd:af:39:97:22:99:51:8f:36:d2:f7:a9:5f:11:dc:
89:e9:9b:df:be:69:56:91:21:74:88:4d:df:df:1d:8b:95:0b:
6e:0e:84:21:cf:26:81:8c:76:0c:00:3a:6d:d7:8a:c2:56:07:
61:08:b8:cc:d7:50:a1:fe:83:ec:f5:1a:f0:99:b1:08:4e:e2:
85:23:db:03:39:96:5b:00:39:d1:24:ca:d7:ef:15:2d:63:5f:
a3:10:86:df:3a:01:0a:58:43:d4:3d:46:0f:b1:8b:42:9d:d3:
79:b2:20:ff:a2:c1:7e:8f:e6:b8:aa:e9:af:0d:16:5d:6e:38:
70:2c:89:f6:a8:87:39:48:78:fa:fd:85:e6:c7:b2:6f:27:14:
7c:0f:12:88:51:2c:ea:fe:b9:fd:e7:bc:d5:35:10:d2:3c:bc:
4f:00:f7:a2:e3:fd:69:70:88:e6:58:c2:e4:be:89:5e:b9:5b:
73:ff:12:71:f0:b6:64:0d:5d:a4:ac:f8:2d:e3:f5:ce:c4:59:
d8:43:29:db:ad:ab:d5:f8:0a:48:11:39:2a:72:59:df:b9:bd:
3e:98:ad:26:29:2a:ea:53:0f:c6:eb:52:bc:45:43:1a:77:56:
7b:63:2f:03:9c:89:1d:f0:84:d2:7e:80:71:e4:3f:42:25:4d:
07:ef:c8:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvK99vq+2N18MROr3DgZnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNzhhNGE5YzUyMzI1YTg1OTIwODA5YmExYTRkODllMjFj
MDJmMTcwHhcNMjUwNjE0MTYwMDM1WhcNMjUwNjE1MTYwMDM1WjAzMTEwLwYDVQQD
EyhlMWY1YjNjNzg4MTMwNGViOGE5Mjc1Yzc5MzU1NmYyMmZlMmMwMDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynaLudtmsqNyG/hxlSMJBQrtXXQf
91+PqIUITdbga77woXPmcNgXyvhxCN49OkjVSM/q01rmvqoPwn63iIwujlUkHz5H
I/zhAx1terToH77YxLc0ql+bTdqi2sBjJrsCgGP+UgLEfZeOEQ0KGzvF3H9WLJRA
CajE9D7lK6ewGaGwfM8yO5OxfwhbPWnDSmbbC2eOizwiyrgfIBSP7rRnp0rYvK5Q
fY6cA2D10iC0qqLZ5x6785O3fUspHZvvbOtZBY01QG1zNzCdfPEG6a0jejMllSXz
aI3VkmgRPGtU0JNM1PfSo9vSJ/kktmbnY83NMhPpV+gmODwYSXXOuQmKKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOH1s8eIEwTripJ1x5NVbyL+LACbMB8GA1UdIwQY
MBaAFCN4pKnFIyWoWSCAm6Gk2J4hwC8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmIt
OTM3ZTI3ZWUxYjViLzEvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmItOTM3ZTI3ZWUxYjVi
LzEvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJk/a3a85
lyKZUY820vepXxHciemb375pVpEhdIhN398di5ULbg6EIc8mgYx2DAA6bdeKwlYH
YQi4zNdQof6D7PUa8JmxCE7ihSPbAzmWWwA50STK1+8VLWNfoxCG3zoBClhD1D1G
D7GLQp3TebIg/6LBfo/muKrprw0WXW44cCyJ9qiHOUh4+v2F5seybycUfA8SiFEs
6v65/ee81TUQ0jy8TwD3ouP9aXCI5ljC5L6JXrlbc/8ScfC2ZA1dpKz4LeP1zsRZ
2EMp262r1fgKSBE5KnJZ37m9PpitJikq6lMPxutSvEVDGndWe2MvA5yJHfCE0n6A
ceQ/QiVNB+/ISQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:03:24 2025 by rpki-client