Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: CiUiX3pSKiIepaYu+lrXjCZt5Ka232x9MLEN3SV4Xmk=
Subject key identifier: 8E:6E:71:63:8D:A1:8A:72:5D:6E:8E:B9:EF:DC:CB:AF:0A:4F:5E:08
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 019787D894DEC5A772F1696AF4DAF4047C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 1369
Signing time: Thu 19 Jun 2025 11:00:07 +0000
Manifest this update: Thu 19 Jun 2025 11:00:07 +0000
Manifest next update: Fri 20 Jun 2025 11:00:07 +0000
Files and hashes: 1: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (hash: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=)
2: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (hash: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=)
3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: sZDVwo33cxrEdrBsNp8Yz1y1f/HSLd/EeKB3oFaBFKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:d8:94:de:c5:a7:72:f1:69:6a:f4:da:f4:04:7c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Jun 19 11:00:07 2025 GMT
Not After : Jun 20 11:00:07 2025 GMT
Subject: CN=8e6e71638da18a725d6e8eb9efdccbaf0a4f5e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:f6:ad:4e:c7:f1:76:6b:70:df:f7:c7:d4:
da:25:9f:d4:c5:9b:97:e1:40:e2:98:f6:cf:58:06:
6b:e2:9b:68:c6:e6:79:c4:a6:54:08:a9:be:a9:2f:
9b:63:1f:83:74:0e:0b:09:a6:e9:06:71:62:f7:4c:
fe:8f:1c:2a:a2:11:3b:86:b2:62:8a:ab:32:16:b2:
c2:8d:14:43:67:42:13:44:cf:42:d0:1d:3c:1f:01:
1e:29:83:31:35:c2:f7:0d:9c:74:73:b0:bb:c9:9f:
d2:02:ad:5c:dc:68:26:ed:2f:06:36:66:ed:a1:89:
2b:13:f8:00:57:51:6e:d3:aa:6f:ca:a9:dc:a7:ac:
d7:63:60:a2:63:13:9c:ba:67:e6:22:da:74:2b:d4:
f9:58:e1:52:05:51:36:d7:73:e0:34:e8:21:d9:55:
c4:c7:33:90:2e:04:43:4f:bb:fb:b3:d5:3b:5b:56:
0e:7b:43:fb:69:35:2f:cd:a4:c8:1b:d2:64:54:86:
82:ad:13:92:c1:1b:92:e4:56:f1:cb:57:2e:de:36:
5e:1f:9a:53:c0:a6:de:ab:51:cc:46:87:71:8d:df:
4b:69:cd:96:17:63:8c:88:5d:0c:ee:ec:5e:c6:a4:
52:d9:04:2f:4c:88:37:45:40:dc:86:b4:26:4f:72:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6E:71:63:8D:A1:8A:72:5D:6E:8E:B9:EF:DC:CB:AF:0A:4F:5E:08
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ae:3b:98:3e:9e:49:36:ae:2c:14:91:2d:e4:5f:73:21:ec:
12:84:b6:8b:22:e3:f6:7c:8b:96:cf:31:a8:2c:29:27:0f:20:
23:53:72:7c:f2:d4:90:a3:7f:79:98:91:f0:70:cc:11:f5:e0:
af:0d:05:1b:63:ae:77:b0:63:2a:c7:ea:78:af:6a:23:56:57:
18:24:b3:0c:7c:80:8c:d3:f8:f2:0f:28:e9:e6:14:dd:92:73:
fa:b3:ec:77:cf:e4:73:88:2a:88:14:07:95:24:04:28:73:b2:
e6:60:f0:86:c0:3c:62:7b:40:5a:1d:39:aa:21:71:a3:a3:45:
9e:cc:3b:cd:bc:b2:fb:89:62:fa:dd:bc:48:c6:ab:d5:28:c3:
66:ee:44:04:af:4b:9f:d3:fc:9c:40:d1:ff:05:e3:f4:f1:10:
d6:54:91:83:55:86:32:36:76:e0:50:4b:58:45:b6:c9:31:13:
be:56:f8:5a:73:0d:d6:08:66:0d:e6:fb:86:63:c7:57:6e:4f:
40:9f:c0:1d:86:78:86:d2:cf:f9:39:0d:98:53:e2:64:e4:3b:
e9:67:a7:11:34:bb:b8:43:5c:b3:19:3e:60:53:78:f0:72:3f:
06:d2:76:3c:58:66:eb:b1:45:fd:b8:d8:72:41:c8:f3:8b:b0:
5d:b3:bd:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeH2JTexady8Wlq9Nr0BHxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZDRiY2JmMzVkYjdmZTJlZjY2MzUyMmE1YTNhMzk3OWE0
ZjFmZjgwHhcNMjUwNjE5MTEwMDA3WhcNMjUwNjIwMTEwMDA3WjAzMTEwLwYDVQQD
Eyg4ZTZlNzE2MzhkYTE4YTcyNWQ2ZThlYjllZmRjY2JhZjBhNGY1ZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJX2rU7H8XZrcN/3x9TaJZ/UxZuX
4UDimPbPWAZr4ptoxuZ5xKZUCKm+qS+bYx+DdA4LCabpBnFi90z+jxwqohE7hrJi
iqsyFrLCjRRDZ0ITRM9C0B08HwEeKYMxNcL3DZx0c7C7yZ/SAq1c3Ggm7S8GNmbt
oYkrE/gAV1Fu06pvyqncp6zXY2CiYxOcumfmItp0K9T5WOFSBVE213PgNOgh2VXE
xzOQLgRDT7v7s9U7W1YOe0P7aTUvzaTIG9JkVIaCrROSwRuS5Fbxy1cu3jZeH5pT
wKbeq1HMRodxjd9Lac2WF2OMiF0M7uxexqRS2QQvTIg3RUDchrQmT3I5XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5ucWONoYpyXW6Oue/cy68KT14IMB8GA1UdIwQY
MBaAFIvUvL8123/i72Y1IqWjo5eaTx/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAt
NDc4ZWQ3ZjhkMDVlLzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAtNDc4ZWQ3ZjhkMDVl
LzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVq47mD6e
STauLBSRLeRfcyHsEoS2iyLj9nyLls8xqCwpJw8gI1NyfPLUkKN/eZiR8HDMEfXg
rw0FG2Oud7BjKsfqeK9qI1ZXGCSzDHyAjNP48g8o6eYU3ZJz+rPsd8/kc4gqiBQH
lSQEKHOy5mDwhsA8YntAWh05qiFxo6NFnsw7zbyy+4li+t28SMar1SjDZu5EBK9L
n9P8nEDR/wXj9PEQ1lSRg1WGMjZ24FBLWEW2yTETvlb4WnMN1ghmDeb7hmPHV25P
QJ/AHYZ4htLP+TkNmFPiZOQ76WenETS7uENcsxk+YFN48HI/BtJ2PFhm67FF/bjY
ckHI84uwXbO99A==
-----END CERTIFICATE-----
Generated at Thu Jun 19 18:56:47 2025 by rpki-client