Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: IVEcv0Q1Z1gnheuW2HjO8fr927Wvfl/Y/HQdumP2PeA=
Subject key identifier: 1B:31:83:CA:8C:F0:D8:EE:D0:E2:36:AA:AB:54:5D:00:99:72:98:5D
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 0197887DAD97C381D64A8B320BE7BE993C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 1264
Signing time: Thu 19 Jun 2025 14:00:27 +0000
Manifest this update: Thu 19 Jun 2025 14:00:27 +0000
Manifest next update: Fri 20 Jun 2025 14:00:27 +0000
Files and hashes: 1: HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa (hash: ty6hQDkhWUALNQQqzONCESXYcfpgf+zxWDRQRihR4ws=)
2: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: dFvGy3lYtS5yaL48EJdTd/28WpePe5CjJm16qNhbzog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:7d:ad:97:c3:81:d6:4a:8b:32:0b:e7:be:99:3c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Jun 19 14:00:27 2025 GMT
Not After : Jun 20 14:00:27 2025 GMT
Subject: CN=1b3183ca8cf0d8eed0e236aaab545d009972985d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:27:cf:2a:75:ad:74:07:d5:bb:78:43:a6:
f1:2d:32:d5:9a:91:fb:bb:50:65:31:f7:2f:12:fe:
6b:fa:d0:05:af:06:bc:0a:1d:2c:73:3b:3c:75:01:
47:12:87:c5:c8:44:4b:a2:5b:c5:d1:6b:e5:43:09:
8f:44:b5:e0:e7:a4:fc:86:88:a7:5b:83:6e:ce:ba:
66:1d:53:78:92:95:9d:9d:a7:93:c9:0f:21:d1:50:
75:91:c1:fc:72:11:5e:8e:90:f9:2d:46:69:63:47:
44:01:ad:b4:ca:d8:88:54:ee:de:0a:4f:2a:b1:00:
02:ac:ab:23:ae:0e:08:6c:48:5b:d3:ae:1e:8c:74:
2a:99:d1:2c:e5:d7:fc:6a:f1:92:01:a2:a3:46:72:
71:74:52:c7:ac:6b:d9:a6:35:90:50:70:7c:83:9f:
7b:26:b6:63:ab:85:d8:d4:2a:16:05:51:20:f7:eb:
a5:bc:5c:f4:fa:a4:30:47:cd:da:52:a0:89:31:15:
d9:e9:01:6f:77:a4:68:54:0d:3d:3a:4a:05:38:1b:
38:33:2e:69:89:31:44:72:9a:7c:77:d1:dc:43:37:
1d:9d:9c:f7:92:71:7d:62:42:e0:c2:4f:2b:c2:64:
44:74:cb:2f:4c:e9:d8:a5:5f:5b:fc:0d:dc:37:18:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:31:83:CA:8C:F0:D8:EE:D0:E2:36:AA:AB:54:5D:00:99:72:98:5D
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:56:32:6e:69:58:4d:5c:4b:17:ba:67:e0:80:5c:da:79:9f:
0b:d4:b9:0a:99:ea:45:62:57:74:1d:fd:96:25:66:a7:e3:4f:
8c:c8:8f:40:97:d3:c3:1e:07:0e:a8:8e:24:4e:10:4a:71:bb:
e8:f0:7a:ac:1a:18:c1:72:0f:49:be:23:7d:19:38:72:cb:99:
cf:e6:a6:11:57:98:16:ac:9d:86:3e:21:8c:e7:1d:e8:6e:57:
1e:ff:be:a3:8b:13:ef:a1:10:29:34:ca:e0:c6:4d:1c:d2:83:
5c:09:10:6a:27:b0:2f:a2:e2:c0:94:12:61:bc:ba:d7:e9:43:
46:7b:c6:62:c6:84:a7:58:a4:62:96:18:a6:04:b4:97:07:81:
21:25:94:a2:3a:ea:ca:76:a3:34:b4:72:12:dc:6a:42:7f:28:
d2:64:04:6b:9c:a5:00:c9:1c:44:a2:ea:61:3f:61:d5:f9:0b:
2b:9b:e7:fc:c0:35:2f:5a:56:26:1f:7b:63:4e:12:e2:8a:48:
0c:5a:13:28:a5:3b:e0:12:ba:1d:23:8a:55:51:2e:dd:84:f1:
66:25:50:be:d1:61:a6:47:6a:c8:7f:83:ee:5f:bf:5b:7b:b9:
ce:95:9b:70:40:75:45:d8:ec:a0:f9:91:a1:8d:d8:63:f9:0e:
f2:14:0c:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeIfa2Xw4HWSosyC+e+mTyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMDE4MTdkNDJjZmY4Yjg4MTRiYmQxNzAwYWRlOTE2NzQy
NjhlZDcwHhcNMjUwNjE5MTQwMDI3WhcNMjUwNjIwMTQwMDI3WjAzMTEwLwYDVQQD
EygxYjMxODNjYThjZjBkOGVlZDBlMjM2YWFhYjU0NWQwMDk5NzI5ODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD4nzyp1rXQH1bt4Q6bxLTLVmpH7
u1BlMfcvEv5r+tAFrwa8Ch0sczs8dQFHEofFyERLolvF0WvlQwmPRLXg56T8hoin
W4NuzrpmHVN4kpWdnaeTyQ8h0VB1kcH8chFejpD5LUZpY0dEAa20ytiIVO7eCk8q
sQACrKsjrg4IbEhb064ejHQqmdEs5df8avGSAaKjRnJxdFLHrGvZpjWQUHB8g597
JrZjq4XY1CoWBVEg9+ulvFz0+qQwR83aUqCJMRXZ6QFvd6RoVA09OkoFOBs4My5p
iTFEcpp8d9HcQzcdnZz3knF9YkLgwk8rwmREdMsvTOnYpV9b/A3cNxhknQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsxg8qM8Nju0OI2qqtUXQCZcphdMB8GA1UdIwQY
MBaAFIsBgX1Cz/i4gUu9FwCt6RZ0Jo7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDct
ZDdhNjYwZDRjYWFkLzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDctZDdhNjYwZDRjYWFk
LzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVYybmlY
TVxLF7pn4IBc2nmfC9S5CpnqRWJXdB39liVmp+NPjMiPQJfTwx4HDqiOJE4QSnG7
6PB6rBoYwXIPSb4jfRk4csuZz+amEVeYFqydhj4hjOcd6G5XHv++o4sT76EQKTTK
4MZNHNKDXAkQaiewL6LiwJQSYby61+lDRnvGYsaEp1ikYpYYpgS0lweBISWUojrq
ynajNLRyEtxqQn8o0mQEa5ylAMkcRKLqYT9h1fkLK5vn/MA1L1pWJh97Y04S4opI
DFoTKKU74BK6HSOKVVEu3YTxZiVQvtFhpkdqyH+D7l+/W3u5zpWbcEB1RdjsoPmR
oY3YY/kO8hQMOw==
-----END CERTIFICATE-----
Generated at Thu Jun 19 17:36:35 2025 by rpki-client