Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: vIlaoo8CRhqdXFVkihUkyTXnX/E+nj9Ey/z0IFQkXno=
Subject key identifier: 6A:81:64:CE:15:D3:4A:42:A5:1D:5A:FA:28:21:2C:02:AA:B8:C0:5F
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 019779789E91C9304AA1EF862D44AB906CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0ABE
Signing time: Mon 16 Jun 2025 16:00:37 +0000
Manifest this update: Mon 16 Jun 2025 16:00:37 +0000
Manifest next update: Tue 17 Jun 2025 16:00:37 +0000
Files and hashes: 1: Io8_rALEkRmJyvwQSYZoU_nTQg0.roa (hash: IdvBLL1znSmthNlumpub/fXZwL7C6UNAlVvYWPg9Tzc=)
2: fp-LIMQ80k5YBVtTaX91n-J89eo.roa (hash: ItqEQhJ82EwpqjGgmH+0CXCKGMVgFNbNle1pM5dmqlE=)
3: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: AAKlwGCmmw33vfp8jIgjcL9Hngpq+LHN+RDMday8ztQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:9e:91:c9:30:4a:a1:ef:86:2d:44:ab:90:6c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Jun 16 16:00:37 2025 GMT
Not After : Jun 17 16:00:37 2025 GMT
Subject: CN=6a8164ce15d34a42a51d5afa28212c02aab8c05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:cd:58:17:bc:7a:13:d8:b1:e0:a8:b9:7f:
3e:09:91:77:5b:a0:b9:26:b1:37:ff:7e:b6:c8:74:
fc:dc:71:32:e8:9b:80:3c:2e:e2:6f:75:44:4a:ab:
97:1f:c9:92:38:0b:80:23:e6:c8:76:98:74:b3:ef:
9f:3f:17:0e:97:49:a1:dd:3e:91:b9:27:d0:74:eb:
3c:48:26:ce:4d:6a:b3:59:21:42:80:cc:f7:79:85:
ed:54:77:b3:5e:e7:33:15:78:49:a8:c3:b1:81:53:
1a:2a:cd:21:fb:bb:84:ee:66:1f:23:ff:93:8b:e4:
ed:4f:a0:02:6c:f0:8f:98:65:e7:1d:1d:cd:f8:b7:
bc:8f:ae:43:a3:ac:0c:6b:43:f2:ca:ad:22:7d:71:
c9:a3:d0:ca:01:d6:e4:af:85:ef:02:5f:42:38:2a:
f4:2c:ea:ba:f4:5e:d0:4d:5f:dd:00:08:1a:09:36:
92:9e:79:86:f1:6a:cc:20:68:3f:c4:1c:03:8d:8b:
64:8d:b9:bd:cc:de:1f:d8:f1:23:35:fd:3a:cf:6d:
9e:bf:d1:9e:15:28:1e:24:ec:59:e2:73:8e:6e:cc:
42:4e:ba:71:2f:c7:9c:1f:68:00:62:59:31:63:95:
2c:e0:59:69:36:df:39:29:ff:e1:75:d7:a7:d1:6c:
2b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:81:64:CE:15:D3:4A:42:A5:1D:5A:FA:28:21:2C:02:AA:B8:C0:5F
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:72:89:f4:42:1a:8b:14:d5:4f:cb:06:bd:3b:6f:33:67:64:
65:a5:65:3a:9a:14:00:b2:2b:5f:48:d0:16:b5:9d:96:4e:c3:
76:9f:63:0a:9c:d5:d3:3e:22:58:90:7c:93:21:03:36:02:f7:
ab:89:82:08:18:f7:ab:e5:76:5e:e3:be:1c:b9:29:ae:01:13:
07:d3:c2:0a:37:19:3b:a3:b8:ed:10:21:ef:f9:42:bb:83:2b:
59:56:6e:08:b8:9a:d7:07:7c:86:d2:ba:a3:ea:f3:2a:46:c3:
82:74:c9:6e:57:6d:cc:14:af:7a:d1:c8:03:64:62:4b:5f:84:
21:60:f8:3b:82:11:63:86:1f:24:25:48:76:37:c9:2a:7f:41:
ae:f0:7c:74:f5:92:b7:3b:1f:14:48:0e:06:95:5b:95:93:0e:
00:c2:d6:8f:c6:2d:2d:8f:2b:e5:4c:58:5d:d7:f6:40:db:6e:
bd:32:30:31:78:b5:2f:1e:c5:c9:69:15:56:5a:f1:24:d5:d7:
36:9a:ae:52:2b:dd:3c:63:98:81:a0:af:f6:a2:8b:d8:2f:d7:
41:9d:d3:d4:74:e4:82:e5:bc:f0:4d:21:69:7e:a3:45:d2:4b:
30:cb:8b:fd:05:70:92:82:71:a0:b4:15:fd:52:70:6c:10:d6:
95:3a:8d:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5eJ6RyTBKoe+GLUSrkGzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NTU0NzgwZGIyNWIyNDNjMGEyZDM2MTk3OWIxMzBhN2Yx
M2M2MGQwHhcNMjUwNjE2MTYwMDM3WhcNMjUwNjE3MTYwMDM3WjAzMTEwLwYDVQQD
Eyg2YTgxNjRjZTE1ZDM0YTQyYTUxZDVhZmEyODIxMmMwMmFhYjhjMDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7LNWBe8ehPYseCouX8+CZF3W6C5
JrE3/362yHT83HEy6JuAPC7ib3VESquXH8mSOAuAI+bIdph0s++fPxcOl0mh3T6R
uSfQdOs8SCbOTWqzWSFCgMz3eYXtVHezXuczFXhJqMOxgVMaKs0h+7uE7mYfI/+T
i+TtT6ACbPCPmGXnHR3N+Le8j65Do6wMa0Pyyq0ifXHJo9DKAdbkr4XvAl9COCr0
LOq69F7QTV/dAAgaCTaSnnmG8WrMIGg/xBwDjYtkjbm9zN4f2PEjNf06z22ev9Ge
FSgeJOxZ4nOObsxCTrpxL8ecH2gAYlkxY5Us4FlpNt85Kf/hdden0WwrJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqBZM4V00pCpR1a+ighLAKquMBfMB8GA1UdIwQY
MBaAFIlVR4DbJbJDwKLTYZebEwp/E8YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZTIwNzctYmMxMC00NjIxLWFiMGIt
ZGJhNGM5Yjg3MDZiLzEvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zZTIwNzctYmMxMC00NjIxLWFiMGItZGJhNGM5Yjg3MDZi
LzEvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3KJ9EIa
ixTVT8sGvTtvM2dkZaVlOpoUALIrX0jQFrWdlk7Ddp9jCpzV0z4iWJB8kyEDNgL3
q4mCCBj3q+V2XuO+HLkprgETB9PCCjcZO6O47RAh7/lCu4MrWVZuCLia1wd8htK6
o+rzKkbDgnTJbldtzBSvetHIA2RiS1+EIWD4O4IRY4YfJCVIdjfJKn9BrvB8dPWS
tzsfFEgOBpVblZMOAMLWj8YtLY8r5UxYXdf2QNtuvTIwMXi1Lx7FyWkVVlrxJNXX
NpquUivdPGOYgaCv9qKL2C/XQZ3T1HTkguW88E0haX6jRdJLMMuL/QVwkoJxoLQV
/VJwbBDWlTqNoA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:01:55 2025 by rpki-client