Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
File: iWkzRGOKywU2WC-rCJh2V472vFY.mft (raw, json)
Hash identifier: 1LkX73BvFTaZpmwHq9E7BI/WMC7qEfKIWNaTEYPDm3o=
Subject key identifier: 22:F3:44:F0:4C:EC:3D:DC:21:09:D1:97:BE:0A:B5:54:E2:EC:07:D8
Authority key identifier: 89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
Certificate issuer: /CN=89693344638acb0536582fab089876578ef6bc56
Certificate serial: 01976D3DFA122372E579CD993B4AB2CDC566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 07:01:07 +0000
Manifest this update: Sat 14 Jun 2025 07:01:07 +0000
Manifest next update: Sun 15 Jun 2025 07:01:07 +0000
Files and hashes: 1: fCZrKI-6j3JypnfEm5_gs1n5dFw.roa (hash: iZ/p7v8ZHeoQxTyUiH1KnvRb3hj8zk8sCV0wmzxeW2k=)
2: iWkzRGOKywU2WC-rCJh2V472vFY.crl (hash: j/JfCmm+B6KJUWnMlNiJ68eBLXn45whoMgGvl60ck7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:fa:12:23:72:e5:79:cd:99:3b:4a:b2:cd:c5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89693344638acb0536582fab089876578ef6bc56
Validity
Not Before: Jun 14 07:01:07 2025 GMT
Not After : Jun 15 07:01:07 2025 GMT
Subject: CN=22f344f04cec3ddc2109d197be0ab554e2ec07d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:e7:34:1f:89:94:dd:30:6b:a6:ee:3a:6d:
70:95:d9:9f:d8:18:68:ca:59:95:87:5f:4f:b8:d1:
c3:f7:33:12:15:69:95:f9:87:42:e1:8f:f5:89:7c:
84:e2:58:a2:06:3f:b4:17:7e:3e:51:4c:78:37:2d:
e5:79:6d:27:b0:2f:0e:72:fa:d3:78:b9:94:1a:c5:
8d:e2:f1:7e:6f:9a:4a:1c:49:76:68:1a:bb:94:3d:
4b:86:71:38:02:79:a5:38:84:db:28:ab:82:50:0c:
6e:0a:b6:bd:f8:39:ff:7d:41:b6:a4:aa:63:9f:73:
07:82:d2:e7:78:8b:e5:41:72:d9:62:64:c6:88:bf:
ca:e9:34:d6:d4:28:d0:fd:c1:78:df:9a:d7:ae:bf:
b5:52:53:95:1f:73:c7:74:6e:1e:76:b0:16:af:7c:
3e:b7:b0:eb:66:38:8d:f2:44:24:a7:7a:da:b2:57:
bd:e4:39:4e:bb:33:48:07:af:95:c4:19:51:e9:71:
9c:7c:a4:c3:d9:e6:8d:44:ce:9f:cc:1b:10:32:09:
48:12:67:14:78:ed:12:21:b1:e5:ff:10:1d:f8:11:
46:54:dc:13:04:9d:50:8b:08:04:a8:d3:cc:30:7a:
cf:40:84:50:df:59:ea:fb:3b:88:ab:a3:ec:bc:4f:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F3:44:F0:4C:EC:3D:DC:21:09:D1:97:BE:0A:B5:54:E2:EC:07:D8
X509v3 Authority Key Identifier:
keyid:89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:77:54:ed:01:df:b5:de:5e:96:1e:60:15:de:73:26:ec:72:
55:81:34:6e:60:94:58:57:95:80:70:f2:f9:9f:ea:d1:1f:85:
d3:72:02:8f:96:aa:42:3c:db:34:ff:42:64:51:60:85:d3:71:
44:00:c2:52:37:71:b0:fc:62:84:81:22:5e:d8:f0:2c:d1:bc:
0c:b0:9a:82:b6:1c:35:4b:e8:6a:61:cb:33:d0:c7:7f:f4:e0:
96:cd:0f:0a:fb:11:be:52:1d:bf:cd:94:61:0f:c3:11:fa:3a:
95:cd:b1:75:49:29:22:bd:1a:c2:e2:f2:64:b9:3c:2e:be:8c:
7c:bb:e7:74:b3:00:23:ad:6f:4d:43:fa:79:8b:37:32:fb:fa:
32:56:3d:8b:53:17:ae:12:b2:7d:38:bf:6c:3a:1b:b6:ea:d1:
f4:77:8a:f4:96:84:1b:79:2c:0b:3f:b4:6d:1e:f3:ae:02:37:
ab:63:f4:b5:40:15:7e:2d:7d:99:c6:d3:06:9f:f5:8a:7f:be:
ff:1f:f1:23:4f:5f:6f:ef:2d:3d:bc:9f:d3:5d:d0:49:bd:16:
2a:3a:46:f1:37:9c:57:ed:87:d5:00:e5:61:4a:c8:48:04:91:
b9:1d:79:00:74:f9:44:08:8b:07:79:e4:5e:1e:57:72:43:b0:
fe:14:fc:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPfoSI3Llec2ZO0qyzcVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NjkzMzQ0NjM4YWNiMDUzNjU4MmZhYjA4OTg3NjU3OGVm
NmJjNTYwHhcNMjUwNjE0MDcwMTA3WhcNMjUwNjE1MDcwMTA3WjAzMTEwLwYDVQQD
EygyMmYzNDRmMDRjZWMzZGRjMjEwOWQxOTdiZTBhYjU1NGUyZWMwN2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3vnNB+JlN0wa6buOm1wldmf2Bho
ylmVh19PuNHD9zMSFWmV+YdC4Y/1iXyE4liiBj+0F34+UUx4Ny3leW0nsC8OcvrT
eLmUGsWN4vF+b5pKHEl2aBq7lD1LhnE4AnmlOITbKKuCUAxuCra9+Dn/fUG2pKpj
n3MHgtLneIvlQXLZYmTGiL/K6TTW1CjQ/cF435rXrr+1UlOVH3PHdG4edrAWr3w+
t7DrZjiN8kQkp3rasle95DlOuzNIB6+VxBlR6XGcfKTD2eaNRM6fzBsQMglIEmcU
eO0SIbHl/xAd+BFGVNwTBJ1QiwgEqNPMMHrPQIRQ31nq+zuIq6PsvE94YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLzRPBM7D3cIQnRl74KtVTi7AfYMB8GA1UdIwQY
MBaAFIlpM0RjissFNlgvqwiYdleO9rxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVdrelJHT0t5d1UyV0MtckNKaDJWNDcydkZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83ZDg5MDAtYmU3Ni00MGUyLThjOTkt
NzBmOTQzZWFjNGRiLzEvaVdrelJHT0t5d1UyV0MtckNKaDJWNDcydkZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83ZDg5MDAtYmU3Ni00MGUyLThjOTktNzBmOTQzZWFjNGRi
LzEvaVdrelJHT0t5d1UyV0MtckNKaDJWNDcydkZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlndU7QHf
td5elh5gFd5zJuxyVYE0bmCUWFeVgHDy+Z/q0R+F03ICj5aqQjzbNP9CZFFghdNx
RADCUjdxsPxihIEiXtjwLNG8DLCagrYcNUvoamHLM9DHf/Tgls0PCvsRvlIdv82U
YQ/DEfo6lc2xdUkpIr0awuLyZLk8Lr6MfLvndLMAI61vTUP6eYs3Mvv6MlY9i1MX
rhKyfTi/bDobturR9HeK9JaEG3ksCz+0bR7zrgI3q2P0tUAVfi19mcbTBp/1in++
/x/xI09fb+8tPbyf013QSb0WKjpG8TecV+2H1QDlYUrISASRuR15AHT5RAiLB3nk
Xh5XckOw/hT8Jw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:44:02 2025 by rpki-client