Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft
File: iW81xeAyGs0CFn3viAfwu29xwo0.mft (raw, json)
Hash identifier: NwRS54+rs0fTtHqXULNr66bXcQCKZLk0pv+to8o9/tY=
Subject key identifier: 01:2A:28:CD:49:1F:FE:F5:B9:16:9D:FE:3A:E4:BB:32:7C:25:99:73
Authority key identifier: 89:6F:35:C5:E0:32:1A:CD:02:16:7D:EF:88:07:F0:BB:6F:71:C2:8D
Certificate issuer: /CN=896f35c5e0321acd02167def8807f0bb6f71c28d
Certificate serial: 0197C4257CC26A10C1E31E58CCE4111F054C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft
Manifest number: 117E
Signing time: Tue 01 Jul 2025 04:01:20 +0000
Manifest this update: Tue 01 Jul 2025 04:01:20 +0000
Manifest next update: Wed 02 Jul 2025 04:01:20 +0000
Files and hashes: 1: KzxZqybvsz4qWRvLNMoGl_b-dg0.roa (hash: waO3ZFTQ9Kiow9t+yCx6WlAToF1IQKM9UgVqX7Ju9ms=)
2: iW81xeAyGs0CFn3viAfwu29xwo0.crl (hash: CJU56ijY6hAkPfm73Is8ExtAZwLDw6gaWySfvIST430=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:25:7c:c2:6a:10:c1:e3:1e:58:cc:e4:11:1f:05:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f35c5e0321acd02167def8807f0bb6f71c28d
Validity
Not Before: Jul 1 04:01:20 2025 GMT
Not After : Jul 2 04:01:20 2025 GMT
Subject: CN=012a28cd491ffef5b9169dfe3ae4bb327c259973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a8:ad:b0:af:c4:7d:f3:a7:23:c0:1f:12:55:
2b:90:2e:40:97:55:4d:3a:af:39:46:81:02:da:75:
b5:b0:a4:8a:6e:a3:a3:57:e3:d5:e2:6d:4c:a1:fd:
cc:6c:d1:20:9b:76:07:b0:a5:14:9e:82:01:71:2e:
09:c3:f2:3c:0e:c5:41:87:55:ee:28:3c:1c:92:f9:
80:8c:23:2e:f0:5a:c2:ca:b0:24:e0:51:7b:fd:51:
45:12:9a:89:6d:ed:c9:b8:18:03:f4:85:b5:87:77:
b6:20:71:da:cc:26:56:d1:f1:aa:1f:fe:71:dc:7a:
98:a8:41:f8:14:dd:b6:fb:f0:e4:ec:e0:fb:4a:04:
fa:d2:3b:47:d9:a9:f3:24:48:cc:3e:5d:0c:70:d4:
cf:65:65:15:b2:5c:0d:d9:73:e7:13:10:b9:2a:d4:
b8:f2:aa:b8:04:7f:19:72:14:35:78:f0:99:ca:f2:
96:8d:95:83:f2:4e:a4:91:20:e0:e1:d2:b3:18:23:
29:ac:88:db:53:a8:c3:37:cd:e4:a0:41:23:6d:67:
5e:d1:4b:33:93:ff:53:13:83:dd:d1:83:f2:1a:b9:
9e:96:9c:b8:ac:9f:84:0b:bc:87:fd:ea:df:01:ea:
dd:79:da:c5:90:06:ff:dc:4d:ad:2f:e6:38:24:e7:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2A:28:CD:49:1F:FE:F5:B9:16:9D:FE:3A:E4:BB:32:7C:25:99:73
X509v3 Authority Key Identifier:
keyid:89:6F:35:C5:E0:32:1A:CD:02:16:7D:EF:88:07:F0:BB:6F:71:C2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:79:57:ac:0d:32:86:8a:c0:65:03:b2:de:f8:c6:b3:79:5e:
ac:5d:f7:9e:7f:61:25:d0:35:e5:4a:93:f9:42:00:47:d5:7c:
72:2d:32:bd:25:94:f2:07:40:4d:de:d3:22:6c:66:1f:07:ad:
9c:f4:70:5c:37:9b:c0:1f:45:22:c2:c4:89:c9:44:11:cf:b9:
9e:6c:60:b0:58:68:29:64:80:70:c9:7b:42:bf:13:a0:31:5f:
e5:3a:ed:e5:c0:4d:89:b9:87:f5:66:28:30:d8:64:2b:7f:00:
5b:7b:9b:fd:53:6c:9f:8f:e3:75:d4:e1:ef:f9:74:fa:5a:6c:
75:7f:cb:79:52:73:14:5b:03:71:3a:04:a6:39:bb:d7:7f:33:
a3:03:36:f3:bb:60:7d:4e:f2:13:4f:64:dc:75:03:24:cb:6e:
fd:28:24:08:7c:5c:d2:63:9f:b4:bf:13:39:26:91:6f:c5:50:
d4:1b:d3:bc:01:86:23:6c:3a:62:ca:d1:72:ab:66:fa:09:1a:
0a:91:6d:ac:12:14:fc:15:76:8e:c9:ec:3b:a6:56:9b:76:86:
04:2c:2f:44:5a:00:e6:c9:b2:11:88:05:23:c8:97:1c:57:63:
45:b6:67:64:5b:12:1c:c2:da:e6:f8:36:4f:d5:e0:2c:41:5d:
e2:ca:48:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEJXzCahDB4x5YzOQRHwVMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NmYzNWM1ZTAzMjFhY2QwMjE2N2RlZjg4MDdmMGJiNmY3
MWMyOGQwHhcNMjUwNzAxMDQwMTIwWhcNMjUwNzAyMDQwMTIwWjAzMTEwLwYDVQQD
EygwMTJhMjhjZDQ5MWZmZWY1YjkxNjlkZmUzYWU0YmIzMjdjMjU5OTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aitsK/EffOnI8AfElUrkC5Al1VN
Oq85RoEC2nW1sKSKbqOjV+PV4m1Mof3MbNEgm3YHsKUUnoIBcS4Jw/I8DsVBh1Xu
KDwckvmAjCMu8FrCyrAk4FF7/VFFEpqJbe3JuBgD9IW1h3e2IHHazCZW0fGqH/5x
3HqYqEH4FN22+/Dk7OD7SgT60jtH2anzJEjMPl0McNTPZWUVslwN2XPnExC5KtS4
8qq4BH8ZchQ1ePCZyvKWjZWD8k6kkSDg4dKzGCMprIjbU6jDN83koEEjbWde0Usz
k/9TE4Pd0YPyGrmelpy4rJ+EC7yH/erfAerdedrFkAb/3E2tL+Y4JOdXJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEqKM1JH/71uRad/jrkuzJ8JZlzMB8GA1UdIwQY
MBaAFIlvNcXgMhrNAhZ974gH8LtvccKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVc4MXhlQXlHczBDRm4zdmlBZnd1Mjl4d28wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84MGM0YzAtYzcyOS00MThlLTgwYWYt
MjI5OWE2N2U2MDAxLzEvaVc4MXhlQXlHczBDRm4zdmlBZnd1Mjl4d28wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC84MGM0YzAtYzcyOS00MThlLTgwYWYtMjI5OWE2N2U2MDAx
LzEvaVc4MXhlQXlHczBDRm4zdmlBZnd1Mjl4d28wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXlXrA0y
horAZQOy3vjGs3lerF33nn9hJdA15UqT+UIAR9V8ci0yvSWU8gdATd7TImxmHwet
nPRwXDebwB9FIsLEiclEEc+5nmxgsFhoKWSAcMl7Qr8ToDFf5Trt5cBNibmH9WYo
MNhkK38AW3ub/VNsn4/jddTh7/l0+lpsdX/LeVJzFFsDcToEpjm7138zowM287tg
fU7yE09k3HUDJMtu/SgkCHxc0mOftL8TOSaRb8VQ1BvTvAGGI2w6YsrRcqtm+gka
CpFtrBIU/BV2jsnsO6ZWm3aGBCwvRFoA5smyEYgFI8iXHFdjRbZnZFsSHMLa5vg2
T9XgLEFd4spIXA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 07:56:38 2025 by rpki-client