Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: aqx/zStrekeZpYdO/G0EPBAIgkcTGQ2W11GrJcgDixg=
Subject key identifier: DC:9A:E9:6E:73:ED:81:37:B8:B1:C2:A1:77:5F:54:61:E7:37:3D:A4
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 019769CF293471FB2E327A37842957F1939F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0986
Signing time: Fri 13 Jun 2025 15:01:13 +0000
Manifest this update: Fri 13 Jun 2025 15:01:13 +0000
Manifest next update: Sat 14 Jun 2025 15:01:13 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: P4FlEiw89Oq05uk0ovoJKHYgNBG7eZVg2MKnypWgmVc=)
2: mXq5imVatjJhnnG6SsoqA-p0UNQ.roa (hash: 8CJwggTE1PoL2jvcGBTOZHCwbyGaj586VEqXhjgdUvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:29:34:71:fb:2e:32:7a:37:84:29:57:f1:93:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Jun 13 15:01:13 2025 GMT
Not After : Jun 14 15:01:13 2025 GMT
Subject: CN=dc9ae96e73ed8137b8b1c2a1775f5461e7373da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d0:29:7c:94:0c:18:54:27:22:de:2f:b9:c7:
7a:d3:6b:78:2c:bf:94:e4:0e:8a:05:77:35:4c:8e:
93:42:04:2d:3f:37:12:12:50:e0:eb:7a:f1:de:58:
88:a1:db:f5:51:1b:59:1d:06:4e:56:9e:53:2f:b8:
89:1e:f8:cf:27:b9:60:c3:f2:0f:96:0e:72:a8:a2:
c0:7b:1a:93:b6:57:9d:c4:72:92:25:d6:80:e2:b9:
d6:4b:3f:ba:55:87:ba:8c:13:c6:41:fb:00:c9:01:
59:d4:7b:9f:f8:4e:05:7e:0b:90:b4:b2:59:23:b7:
9d:1c:b3:30:80:0a:80:9b:6c:1d:a2:fa:d6:72:45:
66:1a:16:06:2d:a6:e6:f3:85:3d:d7:1d:4b:1e:19:
30:08:9e:fe:54:c3:1e:9e:36:26:25:2c:fa:47:da:
95:79:61:6e:84:ee:a5:7a:a1:5a:60:69:da:4f:2d:
11:3b:fd:29:ea:d1:97:ce:cc:3c:99:0e:f6:1c:8b:
fc:bb:99:ff:c9:3c:69:4b:4b:31:da:1a:45:09:ea:
a2:c0:14:76:53:a0:40:7f:86:2c:ea:cb:47:42:b9:
bd:ad:19:09:e7:e1:1c:ed:87:df:a0:67:a6:c2:95:
d0:7b:95:97:3a:50:0f:ac:d9:f1:bf:0a:7a:bb:49:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9A:E9:6E:73:ED:81:37:B8:B1:C2:A1:77:5F:54:61:E7:37:3D:A4
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:60:45:8f:7c:51:9d:6a:bd:67:1b:68:ae:5d:fc:ee:ee:28:
42:e8:f8:eb:b3:32:7a:97:c3:87:81:85:56:3d:8b:d7:73:f4:
51:5c:4c:d2:4f:df:c9:dc:19:c8:1e:be:62:b7:db:67:90:de:
54:c8:f0:9b:45:ed:1f:f1:b5:b5:54:2e:fe:07:0a:69:c8:33:
18:47:04:5c:cd:8e:60:d6:dc:8c:28:28:38:64:04:36:12:10:
02:28:18:1c:4d:f5:ca:fa:8f:2b:c3:3e:2f:d0:bd:6b:fd:c2:
fb:12:0c:15:86:94:ca:bf:6b:69:2e:8c:7b:75:f1:28:3e:61:
a0:8d:4c:7f:52:2d:e1:75:75:a5:e2:21:03:ad:c2:74:51:f1:
7f:53:0f:52:df:76:be:a3:b1:2b:4e:54:27:21:e8:81:9a:fb:
df:25:52:a9:0d:9a:e9:9b:60:d9:12:3a:ce:7f:79:a2:e7:ef:
05:e6:ef:3c:c7:34:c4:f4:0d:bd:ab:34:d8:fa:09:ce:24:81:
16:81:83:b0:7a:f3:9c:e1:4f:86:be:33:f8:37:9c:c5:38:69:
c2:32:c3:bc:28:db:32:1b:28:0d:61:58:d1:78:cd:51:27:82:
27:ba:5a:ba:42:35:1b:2b:88:6b:c2:08:e2:01:63:22:4a:3a:
6b:2a:d5:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzyk0cfsuMno3hClX8ZOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhOGQxOWFkMzFjODRhNzQ4NTZiMGE2YjNjYzEwMGU0N2Ey
YjJhYWMwHhcNMjUwNjEzMTUwMTEzWhcNMjUwNjE0MTUwMTEzWjAzMTEwLwYDVQQD
EyhkYzlhZTk2ZTczZWQ4MTM3YjhiMWMyYTE3NzVmNTQ2MWU3MzczZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydApfJQMGFQnIt4vucd602t4LL+U
5A6KBXc1TI6TQgQtPzcSElDg63rx3liIodv1URtZHQZOVp5TL7iJHvjPJ7lgw/IP
lg5yqKLAexqTtledxHKSJdaA4rnWSz+6VYe6jBPGQfsAyQFZ1Huf+E4FfguQtLJZ
I7edHLMwgAqAm2wdovrWckVmGhYGLabm84U91x1LHhkwCJ7+VMMenjYmJSz6R9qV
eWFuhO6leqFaYGnaTy0RO/0p6tGXzsw8mQ72HIv8u5n/yTxpS0sx2hpFCeqiwBR2
U6BAf4Ys6stHQrm9rRkJ5+Ec7YffoGemwpXQe5WXOlAPrNnxvwp6u0naewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNya6W5z7YE3uLHCoXdfVGHnNz2kMB8GA1UdIwQY
MBaAFIqNGa0xyEp0hWsKazzBAOR6KyqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgt
MjQwMjM0MDNiYjBjLzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgtMjQwMjM0MDNiYjBj
LzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2BFj3xR
nWq9Zxtorl387u4oQuj467MyepfDh4GFVj2L13P0UVxM0k/fydwZyB6+YrfbZ5De
VMjwm0XtH/G1tVQu/gcKacgzGEcEXM2OYNbcjCgoOGQENhIQAigYHE31yvqPK8M+
L9C9a/3C+xIMFYaUyr9raS6Me3XxKD5hoI1Mf1It4XV1peIhA63CdFHxf1MPUt92
vqOxK05UJyHogZr73yVSqQ2a6Ztg2RI6zn95oufvBebvPMc0xPQNvas02PoJziSB
FoGDsHrznOFPhr4z+DecxThpwjLDvCjbMhsoDWFY0XjNUSeCJ7paukI1GyuIa8II
4gFjIko6ayrVuA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:43 2025 by rpki-client