Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: G0ywyQ+Dn6kiKlZPO8p6LD+4SMItG0zqIeUIE6gztpw=
Subject key identifier: 79:08:76:79:53:DE:37:8C:E0:BE:CE:6F:82:CD:94:49:CE:EB:8E:22
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 01976E5065808D3AC143AD02A189C48C6735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0C0B
Signing time: Sat 14 Jun 2025 12:00:51 +0000
Manifest this update: Sat 14 Jun 2025 12:00:51 +0000
Manifest next update: Sun 15 Jun 2025 12:00:51 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: ojSLaEfLHKJSijYsNPZ6ZgRmmwBB04a9W2UrUYOrbVQ=)
2: efjuARdCpmdiyPaUU3_AH5I4td0.roa (hash: 4c8sivagBq88/iXFQqILtQVXJqZtsZ5vEblRM7AxfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:65:80:8d:3a:c1:43:ad:02:a1:89:c4:8c:67:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Jun 14 12:00:51 2025 GMT
Not After : Jun 15 12:00:51 2025 GMT
Subject: CN=7908767953de378ce0bece6f82cd9449ceeb8e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:10:a3:1d:22:f9:45:18:14:38:0a:6d:ea:
28:d3:8d:bc:53:95:26:d4:0b:a3:48:10:38:b4:6d:
1e:b6:62:41:11:40:7e:c9:46:77:c4:5d:77:4a:02:
e9:f9:48:a5:47:bf:57:eb:de:48:09:16:bf:60:d8:
11:10:fb:d7:75:6f:d0:16:f8:f2:52:fb:97:d6:1d:
93:c3:15:6a:e3:58:a6:2e:20:6a:69:3e:8f:b1:fc:
32:f7:3b:65:40:45:5e:27:49:59:58:7f:55:5a:34:
50:3d:86:08:ec:0f:e1:37:e6:b0:79:1f:ba:19:3c:
61:d0:bc:7d:66:f5:c2:0f:10:5f:1f:93:40:91:fa:
a7:b2:c2:ee:43:cf:20:4b:d9:11:16:35:d4:66:3e:
37:59:ae:05:66:b1:6b:a1:52:fb:aa:89:27:e0:34:
df:97:01:2b:95:52:20:68:ea:13:a5:fa:e2:2b:3a:
1f:14:f6:b1:87:9a:1e:d8:37:58:83:b1:4c:ca:d8:
19:67:ad:58:2b:be:10:a6:f8:a6:09:fd:77:e7:22:
e9:3f:1d:6d:74:1a:75:df:2e:4f:79:21:a8:cb:d1:
34:db:1b:83:3d:47:e0:b9:70:f1:9c:64:ad:e8:f3:
de:c3:63:b7:28:92:11:07:db:a9:06:32:0a:d6:2e:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:08:76:79:53:DE:37:8C:E0:BE:CE:6F:82:CD:94:49:CE:EB:8E:22
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:04:0d:da:73:95:43:93:fc:8a:ff:a8:91:db:e3:50:d5:fe:
8b:37:60:a7:2c:9b:87:38:19:ad:0e:6f:f8:dc:0c:c7:51:c2:
8c:2e:97:14:5b:53:06:14:9f:14:5b:98:11:52:a9:70:e7:e6:
b4:5f:a1:fb:1e:b4:e3:35:b0:8f:6e:0a:42:f8:93:84:4f:73:
1e:d0:a9:e3:b6:79:57:b1:60:9a:21:db:5c:87:0d:18:57:b6:
51:19:b4:49:d1:5e:bb:c1:64:3f:14:46:27:0f:e7:1a:b4:f3:
c4:9c:2a:f9:1d:56:5b:fa:df:ae:34:64:b7:0c:ca:3b:52:54:
bc:bc:97:8f:ea:3a:76:49:fd:67:87:d8:db:08:01:97:03:fd:
83:de:84:5c:35:cc:6a:1c:fa:25:74:4a:8e:fb:71:c9:a6:9f:
2e:7a:05:b1:d6:24:ec:6e:9a:e0:da:bd:d2:19:37:d3:bb:7a:
7a:16:a9:33:42:95:09:ac:77:9f:86:7f:d4:68:6b:62:dc:97:
0d:cb:34:13:c8:97:4f:89:39:c6:4d:7f:f0:ee:1b:7b:a4:05:
b8:c1:be:24:e5:98:cd:72:91:7f:e1:b0:57:37:9d:4e:02:0f:
6d:6d:69:04:40:fd:d8:56:a3:b5:df:b5:97:d7:4f:88:ea:a5:
92:40:c9:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduUGWAjTrBQ60CoYnEjGc1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmZiOWUyMTllMTVmZWRhNmFkZDI5NjM5YjhkNzNmNWMy
Y2Q4MDIwHhcNMjUwNjE0MTIwMDUxWhcNMjUwNjE1MTIwMDUxWjAzMTEwLwYDVQQD
Eyg3OTA4NzY3OTUzZGUzNzhjZTBiZWNlNmY4MmNkOTQ0OWNlZWI4ZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnroQox0i+UUYFDgKbeoo0428U5Um
1AujSBA4tG0etmJBEUB+yUZ3xF13SgLp+UilR79X695ICRa/YNgREPvXdW/QFvjy
UvuX1h2TwxVq41imLiBqaT6Psfwy9ztlQEVeJ0lZWH9VWjRQPYYI7A/hN+aweR+6
GTxh0Lx9ZvXCDxBfH5NAkfqnssLuQ88gS9kRFjXUZj43Wa4FZrFroVL7qokn4DTf
lwErlVIgaOoTpfriKzofFPaxh5oe2DdYg7FMytgZZ61YK74QpvimCf135yLpPx1t
dBp13y5PeSGoy9E02xuDPUfguXDxnGSt6PPew2O3KJIRB9upBjIK1i52fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkIdnlT3jeM4L7Ob4LNlEnO644iMB8GA1UdIwQY
MBaAFCG/ueIZ4V/tpq3Sljm41z9cLNgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODIt
NzNmZDJjMDM1ZWI1LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODItNzNmZDJjMDM1ZWI1
LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwQN2nOV
Q5P8iv+okdvjUNX+izdgpyybhzgZrQ5v+NwMx1HCjC6XFFtTBhSfFFuYEVKpcOfm
tF+h+x604zWwj24KQviThE9zHtCp47Z5V7FgmiHbXIcNGFe2URm0SdFeu8FkPxRG
Jw/nGrTzxJwq+R1WW/rfrjRktwzKO1JUvLyXj+o6dkn9Z4fY2wgBlwP9g96EXDXM
ahz6JXRKjvtxyaafLnoFsdYk7G6a4Nq90hk307t6ehapM0KVCax3n4Z/1GhrYtyX
Dcs0E8iXT4k5xk1/8O4be6QFuMG+JOWYzXKRf+GwVzedTgIPbW1pBED92Fajtd+1
l9dPiOqlkkDJhw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:52:01 2025 by rpki-client