Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: gciRnaI2EZcXZD2PVbu/ABfqa1JT7Qqfq9nqrw0NGU0=
Subject key identifier: 7D:D6:28:9D:83:4D:35:B0:FC:F4:17:46:87:BC:60:56:96:6F:E2:3C
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 019777F8174BC5D5082A993F130C80952613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 03C3
Signing time: Mon 16 Jun 2025 09:00:36 +0000
Manifest this update: Mon 16 Jun 2025 09:00:36 +0000
Manifest next update: Tue 17 Jun 2025 09:00:36 +0000
Files and hashes: 1: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: Utt2wji1/0kkrXALEYmmDojo9nq+0vRlObCJpe6y/xY=)
2: tCW9fwISpjkcZibIaKBsjXs7N7A.roa (hash: NwxiC6aogmrL5itM5Y4be2nBp9O9LLOH8w2QrDP5u38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:17:4b:c5:d5:08:2a:99:3f:13:0c:80:95:26:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Jun 16 09:00:36 2025 GMT
Not After : Jun 17 09:00:36 2025 GMT
Subject: CN=7dd6289d834d35b0fcf4174687bc6056966fe23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:99:ef:e4:b3:4d:24:f4:41:1b:4c:b3:0b:
3e:7c:3b:fc:85:23:9c:7d:ce:44:fe:be:7d:99:3f:
a5:ad:34:a8:48:95:b4:6c:64:2d:d9:cc:5d:4a:2a:
fa:bc:5b:50:2d:08:8e:ee:db:ca:07:d7:c0:ed:ef:
4d:ba:b9:38:77:ba:28:28:47:60:0c:6e:e2:7d:bc:
95:30:17:fa:5c:00:c7:88:f0:2d:cf:a5:aa:09:46:
af:ae:c1:40:d8:06:df:2f:5e:74:a7:6a:a5:42:99:
f3:7a:70:17:1e:39:d2:5c:c9:45:d5:ee:60:e2:83:
a7:73:b9:54:fe:b6:55:a7:5a:89:00:2f:98:a4:a2:
e9:63:3f:c2:6a:94:cc:96:2c:21:93:00:ba:a6:4d:
f6:19:c4:dd:a5:15:77:fb:1e:24:f3:e6:71:0b:5c:
8a:13:be:dd:9a:28:34:27:47:a7:bc:7a:c6:d7:9d:
60:8c:59:9a:4d:4c:9d:8b:34:92:65:c7:39:af:de:
e7:e8:84:ec:30:ae:42:de:62:81:b8:0b:5d:53:f3:
fa:d6:c9:d3:ab:b4:9f:13:2e:34:22:d6:30:a8:fc:
37:74:23:be:6e:d4:ec:0f:75:d4:05:83:69:46:a3:
95:a9:40:bc:a6:16:81:1b:91:8e:a9:4e:c7:9c:c6:
c4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D6:28:9D:83:4D:35:B0:FC:F4:17:46:87:BC:60:56:96:6F:E2:3C
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c8:67:74:c5:c9:79:60:45:8c:06:7f:32:76:91:26:05:d2:
04:c8:76:ef:de:1e:16:e5:2f:40:31:8e:33:17:30:34:e7:33:
8f:43:7c:af:10:78:e8:a9:50:d0:14:0e:89:0a:39:19:dc:6b:
84:7f:00:04:c3:ca:c1:c9:31:49:7c:2a:9c:a4:fc:25:a1:91:
c7:c5:17:c4:d4:bb:bc:7e:9c:43:43:c8:3a:27:7f:89:db:d3:
51:aa:ba:51:bc:69:41:11:3c:b4:c7:ca:9c:d7:97:d0:22:c5:
26:c2:3e:6c:66:2d:41:57:33:0b:4c:f4:ed:df:ed:d4:7a:7d:
a5:f7:14:11:0d:64:45:de:8a:9d:75:fe:94:51:6e:af:c9:b5:
e0:7b:d9:59:b4:bd:91:36:d4:3d:1b:88:1b:b0:75:c1:21:ce:
18:d8:d6:27:d6:5e:08:60:f2:8b:3a:0f:43:51:ea:78:c8:2b:
b0:53:4a:c6:c2:99:9b:f2:52:fb:f8:a6:59:32:93:0c:89:2d:
8a:c3:36:86:89:19:bb:68:79:11:a7:ba:e4:a6:64:08:bd:6e:
a2:0a:0b:32:cb:9a:04:c3:41:82:b8:5d:d0:d7:44:1d:44:c3:
21:41:c9:33:9e:5e:e7:52:36:4e:da:8d:63:25:41:3d:f6:7d:
47:58:dc:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3+BdLxdUIKpk/EwyAlSYTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOWNjNTdjYTg0NzIzYWVjMjg0MTE0NWY2ZjdkMzAxYmRm
MzViYWMwHhcNMjUwNjE2MDkwMDM2WhcNMjUwNjE3MDkwMDM2WjAzMTEwLwYDVQQD
Eyg3ZGQ2Mjg5ZDgzNGQzNWIwZmNmNDE3NDY4N2JjNjA1Njk2NmZlMjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7qZ7+SzTST0QRtMsws+fDv8hSOc
fc5E/r59mT+lrTSoSJW0bGQt2cxdSir6vFtQLQiO7tvKB9fA7e9Nurk4d7ooKEdg
DG7ifbyVMBf6XADHiPAtz6WqCUavrsFA2AbfL150p2qlQpnzenAXHjnSXMlF1e5g
4oOnc7lU/rZVp1qJAC+YpKLpYz/CapTMliwhkwC6pk32GcTdpRV3+x4k8+ZxC1yK
E77dmig0J0envHrG151gjFmaTUydizSSZcc5r97n6ITsMK5C3mKBuAtdU/P61snT
q7SfEy40ItYwqPw3dCO+btTsD3XUBYNpRqOVqUC8phaBG5GOqU7HnMbEJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3WKJ2DTTWw/PQXRoe8YFaWb+I8MB8GA1UdIwQY
MBaAFIucxXyoRyOuwoQRRfb30wG981usMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zOGU2ZjctNGUzNS00YzJkLTk5Nzct
MDk3Y2I4ZGYyYTI0LzEvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zOGU2ZjctNGUzNS00YzJkLTk5NzctMDk3Y2I4ZGYyYTI0
LzEvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASshndMXJ
eWBFjAZ/MnaRJgXSBMh2794eFuUvQDGOMxcwNOczj0N8rxB46KlQ0BQOiQo5Gdxr
hH8ABMPKwckxSXwqnKT8JaGRx8UXxNS7vH6cQ0PIOid/idvTUaq6UbxpQRE8tMfK
nNeX0CLFJsI+bGYtQVczC0z07d/t1Hp9pfcUEQ1kRd6KnXX+lFFur8m14HvZWbS9
kTbUPRuIG7B1wSHOGNjWJ9ZeCGDyizoPQ1HqeMgrsFNKxsKZm/JS+/imWTKTDIkt
isM2hokZu2h5Eae65KZkCL1uogoLMsuaBMNBgrhd0NdEHUTDIUHJM55e51I2TtqN
YyVBPfZ9R1jckw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:13:59 2025 by rpki-client