Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
File: IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft (raw, json)
Hash identifier: tWdrUFXZ3ZXk7RcMFDEi2nFbLlT/rTUg9lgl9+mcL28=
Subject key identifier: B4:51:5E:B1:3F:BE:78:25:12:21:56:D8:EB:00:39:6F:95:79:57:6C
Authority key identifier: 21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
Certificate issuer: /CN=219885ea020e65006314ee9480def3b3efc039e3
Certificate serial: 01977941747EAF3CD710465E984549BFA3C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 15:00:22 +0000
Manifest this update: Mon 16 Jun 2025 15:00:22 +0000
Manifest next update: Tue 17 Jun 2025 15:00:22 +0000
Files and hashes: 1: IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl (hash: ZLnECtTtFmqsfd5zqk5HXIsDuM2YqtdiwsQK3V0YzWg=)
2: mcM8_9lyrTG-MMDFjvFoLzh0EcU.roa (hash: wA7gawHVSiIwq+RZjpXudHmsZpXyv8YQLjD76SZRvpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:41:74:7e:af:3c:d7:10:46:5e:98:45:49:bf:a3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219885ea020e65006314ee9480def3b3efc039e3
Validity
Not Before: Jun 16 15:00:22 2025 GMT
Not After : Jun 17 15:00:22 2025 GMT
Subject: CN=b4515eb13fbe7825122156d8eb00396f9579576c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:e7:f9:3f:51:3e:44:f9:c3:46:62:93:94:
1a:97:56:a4:4c:6d:d0:de:a1:0c:14:74:f7:d1:b9:
15:a7:97:1b:36:79:1f:b8:84:c6:58:b1:f4:34:75:
e9:66:5d:51:3e:e5:11:4a:3b:7b:b3:6e:08:7e:02:
36:ec:8a:c5:12:dc:6a:6b:eb:f0:a7:48:e1:ef:6f:
30:09:0b:b2:b7:6e:aa:32:7d:b7:84:52:3d:60:74:
ee:c8:b4:5f:37:48:82:b1:65:48:1b:34:23:04:f3:
95:34:f1:df:ab:c9:e0:83:34:c6:cd:a0:f5:71:05:
dd:88:10:ea:25:4d:5c:40:c9:4c:d1:55:37:36:79:
a3:c5:4a:6a:eb:c4:c0:f5:e1:52:dd:89:c1:ac:09:
51:ea:01:e9:59:8f:d9:ea:39:ae:c5:6b:b4:cb:36:
f6:75:c0:63:fd:79:fb:6d:f1:dd:6b:05:09:da:25:
b0:d3:a6:56:9d:9d:97:66:c1:af:ce:1d:27:ef:d0:
b2:86:d4:8d:30:c5:3d:1c:05:41:b1:02:0c:75:29:
6b:56:b1:8f:51:6e:a2:7b:18:b6:f8:cf:af:de:f5:
48:67:3c:5d:7e:c2:cd:8c:b6:f6:e4:58:b1:57:a2:
6e:3a:92:16:6d:5d:66:5f:b1:fa:1a:f0:3c:98:bc:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:51:5E:B1:3F:BE:78:25:12:21:56:D8:EB:00:39:6F:95:79:57:6C
X509v3 Authority Key Identifier:
keyid:21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b5:43:4c:0b:4e:27:be:9b:db:bc:ab:f9:64:f4:2e:02:a2:
aa:4b:50:20:21:c3:d4:9a:17:86:d0:2c:08:97:ba:3d:c3:61:
33:25:e8:63:f6:71:d3:7a:20:b0:ea:30:b4:05:b9:69:5c:ee:
0a:12:88:c0:60:b4:74:ad:b5:37:7d:42:47:98:14:78:b8:61:
96:9a:ca:ff:b7:5a:2c:88:32:e9:1d:63:89:85:84:7d:c2:69:
4a:44:8a:41:64:3d:e1:3d:4f:db:fc:28:d4:e7:8c:ad:c9:f5:
82:5b:b1:68:bb:54:fe:62:94:ea:43:a3:a0:4e:8d:3c:12:28:
8b:63:a6:73:f0:94:bf:d0:e0:f2:88:c7:f1:79:51:73:9e:7b:
7f:52:68:38:7f:a6:89:a1:ab:e6:f0:6b:f3:8d:38:c9:1a:4c:
42:c8:98:9f:4e:ee:7c:e0:92:9d:d5:c4:92:3f:39:a5:8a:d8:
fa:cc:44:5e:70:8c:f7:20:7c:dc:3b:52:27:5c:76:94:d6:4c:
30:44:84:a5:2c:3f:d3:91:36:82:04:94:f0:9d:0f:72:ab:5d:
7a:99:c7:d2:b8:68:52:94:97:be:a8:82:bd:03:a2:90:4d:7d:
4c:6a:fb:79:1e:4f:17:a7:f2:92:6f:3a:95:57:5b:e3:3b:d4:
39:9f:dc:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5QXR+rzzXEEZemEVJv6PGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOTg4NWVhMDIwZTY1MDA2MzE0ZWU5NDgwZGVmM2IzZWZj
MDM5ZTMwHhcNMjUwNjE2MTUwMDIyWhcNMjUwNjE3MTUwMDIyWjAzMTEwLwYDVQQD
EyhiNDUxNWViMTNmYmU3ODI1MTIyMTU2ZDhlYjAwMzk2Zjk1Nzk1NzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQLn+T9RPkT5w0Zik5Qal1akTG3Q
3qEMFHT30bkVp5cbNnkfuITGWLH0NHXpZl1RPuURSjt7s24IfgI27IrFEtxqa+vw
p0jh728wCQuyt26qMn23hFI9YHTuyLRfN0iCsWVIGzQjBPOVNPHfq8nggzTGzaD1
cQXdiBDqJU1cQMlM0VU3NnmjxUpq68TA9eFS3YnBrAlR6gHpWY/Z6jmuxWu0yzb2
dcBj/Xn7bfHdawUJ2iWw06ZWnZ2XZsGvzh0n79CyhtSNMMU9HAVBsQIMdSlrVrGP
UW6iexi2+M+v3vVIZzxdfsLNjLb25FixV6JuOpIWbV1mX7H6GvA8mLwdawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRRXrE/vnglEiFW2OsAOW+VeVdsMB8GA1UdIwQY
MBaAFCGYheoCDmUAYxTulIDe87PvwDnjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVppRjZnSU9aUUJqRk82VWdON3pzLV9BT2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZTA0YWMtYTE5MC00ODA0LTkxM2Mt
ZmZjMDI1ODMxZjRmLzEvSVppRjZnSU9aUUJqRk82VWdON3pzLV9BT2VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mZTA0YWMtYTE5MC00ODA0LTkxM2MtZmZjMDI1ODMxZjRm
LzEvSVppRjZnSU9aUUJqRk82VWdON3pzLV9BT2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbVDTAtO
J76b27yr+WT0LgKiqktQICHD1JoXhtAsCJe6PcNhMyXoY/Zx03ogsOowtAW5aVzu
ChKIwGC0dK21N31CR5gUeLhhlprK/7daLIgy6R1jiYWEfcJpSkSKQWQ94T1P2/wo
1OeMrcn1gluxaLtU/mKU6kOjoE6NPBIoi2Omc/CUv9Dg8ojH8XlRc557f1JoOH+m
iaGr5vBr8404yRpMQsiYn07ufOCSndXEkj85pYrY+sxEXnCM9yB83DtSJ1x2lNZM
MESEpSw/05E2ggSU8J0PcqtdepnH0rhoUpSXvqiCvQOikE19TGr7eR5PF6fykm86
lVdb4zvUOZ/c7g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:50:34 2025 by rpki-client