Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier: kFvuf8lsI1DlpOujzf7KqrtIS5GMFVHX5FdGmEHqD1A=
Subject key identifier: 91:DE:44:8B:DA:E3:2F:FC:2D:27:4A:65:CF:5C:40:9E:F2:E1:7E:8E
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 019874F52C87B73F180CB366D8F08CE1B7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number: 15AB
Signing time: Mon 04 Aug 2025 12:01:21 +0000
Manifest this update: Mon 04 Aug 2025 12:01:21 +0000
Manifest next update: Tue 05 Aug 2025 12:01:21 +0000
Files and hashes: 1: 0R4cTom2N3Ffy-a36Ai0y_lwR7M.roa (hash: Nepk/Ut8yLvwSKOE+VPPTDkKY+eqYlx1ya61v2fExqo=)
2: DO5JxSipVW_jSyusVYE1KNyV5oM.roa (hash: fTaf/BSF7U37w4OYShE1QwyUlpAokZv3Xb6JIFlzFT0=)
3: MHydlao-1yBTTsCdp3bBe4bDnkc.roa (hash: OnwOrVTgc/R+eeJsST7imMdVV9F4opbfB++sLNDhiX8=)
4: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: LvMGEO7fPsB+Fxf6JHaWHve59qJV7IqyvTEBD5x6Umo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:2c:87:b7:3f:18:0c:b3:66:d8:f0:8c:e1:b7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Aug 4 12:01:21 2025 GMT
Not After : Aug 5 12:01:21 2025 GMT
Subject: CN=91de448bdae32ffc2d274a65cf5c409ef2e17e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:6a:26:9d:45:b1:29:33:db:29:6e:4b:97:
56:ad:9e:9e:7c:f6:49:3a:6b:16:73:b0:96:a7:dd:
d3:fe:b9:fe:03:77:70:8d:e9:a6:3d:0b:4f:79:b3:
dc:98:98:b8:5c:9a:0d:99:ed:01:f3:cc:2d:72:15:
f1:60:8b:09:4d:07:5c:ea:bd:92:a3:09:5c:6f:98:
92:8b:6b:f5:b2:54:e5:35:94:e8:78:dc:27:08:1a:
3f:2f:7e:d0:f5:da:09:37:f0:e2:4c:22:e8:6b:c8:
4a:06:3f:e3:33:a9:34:d8:0a:ea:95:de:d9:a2:76:
26:87:4f:c6:5d:20:b6:6b:a1:d6:22:1d:63:df:e8:
9c:b8:06:50:ea:fb:ae:4c:4c:70:20:6e:fa:0b:b1:
6b:c1:52:9e:4a:68:cf:14:66:61:67:87:6e:e5:ba:
ef:ef:7a:3b:ed:0e:d4:be:1a:41:f9:19:68:16:cf:
bb:74:50:b8:53:1d:c4:04:89:58:88:91:3a:66:dc:
31:f6:40:f9:8e:a5:6b:02:a1:e7:a7:98:42:28:c3:
85:4c:03:11:47:e3:e5:50:fd:22:59:1d:63:d4:84:
37:c8:67:ea:df:6e:15:20:0e:29:f3:fb:22:38:9e:
74:ce:97:eb:4a:2e:9d:ec:11:d9:6e:98:90:76:2a:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DE:44:8B:DA:E3:2F:FC:2D:27:4A:65:CF:5C:40:9E:F2:E1:7E:8E
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:41:24:c0:6a:6b:08:0f:0c:72:0f:9a:bf:7f:a0:99:92:ba:
cf:76:14:83:fc:f4:02:38:34:f1:cc:30:e4:77:18:4e:b3:e4:
e4:56:3d:42:9c:28:80:7f:e5:d7:a8:a0:cd:35:f7:4d:2e:c9:
6e:a8:94:3b:0f:6c:71:18:5a:f2:63:78:00:84:ab:a6:ce:03:
36:7c:61:39:b4:6f:cf:2f:ba:5e:b2:29:50:91:bb:0e:96:ea:
2c:c9:74:2d:45:7a:c7:8a:a8:2a:04:aa:92:77:0c:de:3d:85:
01:77:82:ba:b7:95:1c:21:86:a3:30:d2:88:a9:fe:ab:bc:33:
a9:1c:9a:a4:8f:b0:04:a1:f7:7f:89:78:be:5e:5c:c8:44:55:
1c:56:11:d6:cd:ff:30:32:4e:23:40:c7:3c:a9:3f:35:a8:fd:
3a:4c:cd:43:01:4a:d7:d6:f8:53:37:1f:86:c7:66:b9:4c:fe:
de:fa:de:8c:fc:ce:66:b1:7a:a9:2b:e1:0c:97:a7:22:e9:3b:
fa:87:e2:ef:e3:89:16:e5:c2:aa:a3:62:8a:7f:8d:5d:95:55:
c8:45:5a:0a:0e:b8:5c:e8:60:5d:d6:88:1f:59:b2:ab:27:a5:
9b:db:fd:a1:9c:2f:7d:26:f3:68:b3:ae:f7:1c:11:84:24:32:
ef:56:0f:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09SyHtz8YDLNm2PCM4bfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYjNlOTY1Yzg3NDdlMmZhNWRkZDEyODU3NjczZjA2MDQy
ZWZhNDMwHhcNMjUwODA0MTIwMTIxWhcNMjUwODA1MTIwMTIxWjAzMTEwLwYDVQQD
Eyg5MWRlNDQ4YmRhZTMyZmZjMmQyNzRhNjVjZjVjNDA5ZWYyZTE3ZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuRqJp1FsSkz2yluS5dWrZ6efPZJ
OmsWc7CWp93T/rn+A3dwjemmPQtPebPcmJi4XJoNme0B88wtchXxYIsJTQdc6r2S
owlcb5iSi2v1slTlNZToeNwnCBo/L37Q9doJN/DiTCLoa8hKBj/jM6k02Arqld7Z
onYmh0/GXSC2a6HWIh1j3+icuAZQ6vuuTExwIG76C7FrwVKeSmjPFGZhZ4du5brv
73o77Q7UvhpB+RloFs+7dFC4Ux3EBIlYiJE6Ztwx9kD5jqVrAqHnp5hCKMOFTAMR
R+PlUP0iWR1j1IQ3yGfq324VIA4p8/siOJ50zpfrSi6d7BHZbpiQdirlBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHeRIva4y/8LSdKZc9cQJ7y4X6OMB8GA1UdIwQY
MBaAFIqz6WXIdH4vpd3RKFdnPwYELvpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzIt
MDQ0MjdhOTlmMWM1LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzItMDQ0MjdhOTlmMWM1
LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUEkwGpr
CA8Mcg+av3+gmZK6z3YUg/z0Ajg08cww5HcYTrPk5FY9QpwogH/l16igzTX3TS7J
bqiUOw9scRha8mN4AISrps4DNnxhObRvzy+6XrIpUJG7DpbqLMl0LUV6x4qoKgSq
kncM3j2FAXeCureVHCGGozDSiKn+q7wzqRyapI+wBKH3f4l4vl5cyERVHFYR1s3/
MDJOI0DHPKk/Naj9OkzNQwFK19b4UzcfhsdmuUz+3vrejPzOZrF6qSvhDJenIuk7
+ofi7+OJFuXCqqNiin+NXZVVyEVaCg64XOhgXdaIH1myqyelm9v9oZwvfSbzaLOu
9xwRhCQy71YPWQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:07:23 2025 by rpki-client