Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
File: I_IQvBU0utwI_5R9mTUEcRk1MbM.mft (raw, json)
Hash identifier: YHchEOOTiWNtJ6vMpNsrePQv7GFrG2v3DOf24Ic25ow=
Subject key identifier: DD:17:B6:60:43:7F:04:15:75:1F:06:83:81:E4:EE:FA:95:41:62:17
Authority key identifier: 23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
Certificate issuer: /CN=23f210bc1534badc08ff947d99350471193531b3
Certificate serial: 01967831AD9062DA0284A90523B062412BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 17:00:43 +0000
Manifest this update: Sun 27 Apr 2025 17:00:43 +0000
Manifest next update: Mon 28 Apr 2025 17:00:43 +0000
Files and hashes: 1: IQl4HNXKSWovo0ppYzsGnJqwUZ0.roa (hash: I1ThZylWt52H2yyPu4akWSun+BojCZr3Y+wXTnrpft0=)
2: I_IQvBU0utwI_5R9mTUEcRk1MbM.crl (hash: wFKQDN3cLeBmFail562Ex9VFu2L5KMgrQ5ZMVJHVL3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:ad:90:62:da:02:84:a9:05:23:b0:62:41:2b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f210bc1534badc08ff947d99350471193531b3
Validity
Not Before: Apr 27 17:00:43 2025 GMT
Not After : Apr 28 17:00:43 2025 GMT
Subject: CN=dd17b660437f0415751f068381e4eefa95416217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:9f:0d:63:e9:88:f0:47:26:48:2b:0d:99:
f5:89:94:fe:fe:96:b9:71:ac:62:30:05:00:88:45:
3b:ef:b0:81:0c:40:92:e1:7e:e1:1d:e4:40:0f:fe:
6c:38:19:61:65:2b:a7:b9:e8:ef:56:43:3d:16:d8:
1d:2f:a6:2b:40:82:f8:63:9d:4c:98:a0:33:61:94:
d5:b5:54:c1:4e:af:83:bb:1f:3a:9b:46:4f:f3:ac:
88:b5:4b:35:9b:a9:39:73:bf:86:a6:da:a1:80:3b:
e2:2d:74:42:aa:b1:1c:a5:fb:49:d3:6f:ad:9b:24:
ad:9b:88:32:af:8f:0a:26:b8:12:4a:a6:d5:19:47:
88:50:c6:55:2c:4c:25:6b:02:35:34:21:2c:11:4a:
92:5f:49:e3:46:8e:14:fd:b5:d9:94:d0:10:21:2b:
c6:c7:d8:1a:c1:ed:00:e2:79:e4:d1:6c:2f:bc:05:
7c:4e:5a:65:ea:0f:eb:4a:62:08:9d:d0:e9:b3:50:
9e:cf:f3:9c:5b:4c:84:88:b5:d5:4c:f2:78:68:61:
f6:de:35:2c:81:7b:ae:ed:43:f6:db:c1:3f:a7:77:
77:67:f4:56:06:67:0d:02:33:7e:d9:1f:1c:4e:fb:
54:30:08:26:41:3a:24:1e:a5:a2:38:9e:d4:f0:4a:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:17:B6:60:43:7F:04:15:75:1F:06:83:81:E4:EE:FA:95:41:62:17
X509v3 Authority Key Identifier:
keyid:23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4b:bc:e0:fc:b0:4d:05:50:4e:76:b9:47:49:98:b6:01:9e:
88:68:00:7d:78:e4:c5:85:fd:d0:fe:c4:50:2e:59:11:82:7f:
3a:30:d9:bf:bf:53:8f:d0:92:40:39:f2:a4:1c:cc:e2:c0:4c:
b3:f5:01:d8:09:2c:bf:01:95:19:4b:82:2e:1d:3b:b9:a9:7c:
4f:bd:98:3c:69:cc:52:44:69:36:d3:9d:79:43:3c:ad:8b:75:
16:f7:65:27:71:5e:46:46:7b:57:e4:a7:34:8e:a1:a4:01:94:
b5:e7:6a:df:63:9a:58:ec:aa:a9:d1:90:92:1f:4f:b3:48:c1:
55:2b:5b:b9:f3:0d:cf:cb:ac:db:0f:b3:70:06:33:d9:d0:cf:
9b:ad:00:46:bf:24:bb:4a:70:fa:90:8a:d9:63:2e:51:5e:78:
d2:b0:dc:10:8b:e4:ff:3a:95:28:9a:16:59:cb:c0:55:ba:43:
ec:2a:d0:11:2f:a8:ab:ab:7f:ba:c8:bf:04:80:0a:b8:22:0f:
3b:e9:2b:dd:5f:c3:53:1d:c7:9f:71:36:bf:b5:5b:78:92:e2:
cf:63:81:94:60:2c:69:7d:6c:08:5d:1a:b3:24:77:38:d7:70:
8c:d0:2e:96:99:a3:34:53:8a:c3:98:4a:6d:78:e2:85:de:cd:
49:20:3d:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4Ma2QYtoChKkFI7BiQSvzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjIxMGJjMTUzNGJhZGMwOGZmOTQ3ZDk5MzUwNDcxMTkz
NTMxYjMwHhcNMjUwNDI3MTcwMDQzWhcNMjUwNDI4MTcwMDQzWjAzMTEwLwYDVQQD
EyhkZDE3YjY2MDQzN2YwNDE1NzUxZjA2ODM4MWU0ZWVmYTk1NDE2MjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9mfDWPpiPBHJkgrDZn1iZT+/pa5
caxiMAUAiEU777CBDECS4X7hHeRAD/5sOBlhZSunuejvVkM9FtgdL6YrQIL4Y51M
mKAzYZTVtVTBTq+Dux86m0ZP86yItUs1m6k5c7+GptqhgDviLXRCqrEcpftJ02+t
myStm4gyr48KJrgSSqbVGUeIUMZVLEwlawI1NCEsEUqSX0njRo4U/bXZlNAQISvG
x9gawe0A4nnk0WwvvAV8Tlpl6g/rSmIIndDps1Cez/OcW0yEiLXVTPJ4aGH23jUs
gXuu7UP228E/p3d3Z/RWBmcNAjN+2R8cTvtUMAgmQTokHqWiOJ7U8EqadQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0XtmBDfwQVdR8Gg4Hk7vqVQWIXMB8GA1UdIwQY
MBaAFCPyELwVNLrcCP+UfZk1BHEZNTGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9JUXZCVTB1dHdJXzVSOW1UVUVjUmsxTWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80YTY3ZjEtNzQyYi00MWUzLWE2MGYt
MTEzNjNhMmJjZmFiLzEvSV9JUXZCVTB1dHdJXzVSOW1UVUVjUmsxTWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi80YTY3ZjEtNzQyYi00MWUzLWE2MGYtMTEzNjNhMmJjZmFi
LzEvSV9JUXZCVTB1dHdJXzVSOW1UVUVjUmsxTWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEu84Pyw
TQVQTna5R0mYtgGeiGgAfXjkxYX90P7EUC5ZEYJ/OjDZv79Tj9CSQDnypBzM4sBM
s/UB2AksvwGVGUuCLh07ual8T72YPGnMUkRpNtOdeUM8rYt1FvdlJ3FeRkZ7V+Sn
NI6hpAGUtedq32OaWOyqqdGQkh9Ps0jBVStbufMNz8us2w+zcAYz2dDPm60ARr8k
u0pw+pCK2WMuUV540rDcEIvk/zqVKJoWWcvAVbpD7CrQES+oq6t/usi/BIAKuCIP
O+kr3V/DUx3Hn3E2v7VbeJLiz2OBlGAsaX1sCF0asyR3ONdwjNAulpmjNFOKw5hK
bXjihd7NSSA9WQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:14:26 2025 by rpki-client