Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File: IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier: x5BacFEX970D2QjiPVaE8UffInmiQTq7K6qzYAXSAWQ=
Subject key identifier: 4B:CC:12:38:B3:1B:B9:21:5F:67:E0:D8:16:17:6B:F8:FA:F0:4E:7E
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial: 01969E9A4E1E00384F248431F8DC27C276A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number: 1213
Signing time: Mon 05 May 2025 04:00:34 +0000
Manifest this update: Mon 05 May 2025 04:00:34 +0000
Manifest next update: Tue 06 May 2025 04:00:34 +0000
Files and hashes: 1: 1-BW4odJAyxl12AYDgfFuFOqGWeE.roa (hash: qq64q7wVgL8AHerH5wdm8XW+pg0/VDQN8uM/uUKTeDM=)
2: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: pZ7mKzgC8c6M2VQxX1YDX3dJ6KJMfcn+/YD4hLFYmi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:4e:1e:00:38:4f:24:84:31:f8:dc:27:c2:76:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Validity
Not Before: May 5 04:00:34 2025 GMT
Not After : May 6 04:00:34 2025 GMT
Subject: CN=4bcc1238b31bb9215f67e0d816176bf8faf04e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:19:9a:15:d8:84:ff:45:2b:f6:03:a3:87:
b0:65:4e:a6:a4:6a:78:ea:7e:c6:75:da:73:05:39:
d6:ae:02:38:a4:a2:2d:71:57:e5:52:89:d7:6f:bd:
2c:38:13:fa:0b:26:2b:40:e3:c2:9f:36:98:33:bc:
52:94:e1:bb:13:4c:90:a9:bd:16:66:02:33:7e:c0:
4f:c5:2e:61:60:e4:1d:ea:41:d9:f0:3d:6f:ee:3f:
3e:f3:4e:d5:9e:f9:82:3b:1a:04:c4:17:fd:a0:e2:
82:77:0d:f1:39:3a:83:38:a9:0e:f8:77:41:df:70:
d2:cd:ca:7c:a7:70:8d:23:f5:34:64:9e:44:fd:45:
72:38:99:d8:02:81:d4:51:ae:9f:22:31:0d:0e:58:
fe:f1:80:27:4b:5c:2e:d1:6a:81:56:e9:ec:2c:09:
2a:0d:c8:81:a9:0a:eb:ff:0f:79:bc:44:ec:f5:a4:
6b:5d:0f:c7:c2:fd:b4:c0:38:27:8b:33:65:d1:28:
14:db:2c:9f:31:5b:dd:91:e5:55:81:c5:6e:cf:7c:
45:1a:01:7e:95:4e:f2:2c:fd:6c:c9:0a:ed:52:dd:
52:db:22:3b:14:5e:80:b8:e4:f4:56:ae:67:9e:e9:
e0:c9:96:12:d9:59:bd:e7:bb:8b:61:7f:07:e2:a7:
7f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CC:12:38:B3:1B:B9:21:5F:67:E0:D8:16:17:6B:F8:FA:F0:4E:7E
X509v3 Authority Key Identifier:
keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:08:47:48:68:5f:cd:a8:a8:c8:57:d9:e9:51:c5:c3:8c:44:
f8:2f:7f:2b:51:d1:7f:2a:01:41:96:4c:21:f9:5d:c9:8d:c9:
da:8a:2d:ae:38:96:75:6a:02:1b:34:d5:23:14:4f:ab:c4:9e:
75:8a:fa:38:33:0c:28:79:e6:1a:42:13:6e:4f:c1:2b:6f:97:
5b:93:32:3d:e3:7a:09:10:75:5f:b9:c1:89:68:ec:de:07:11:
96:0b:75:0f:c4:24:0e:e8:8b:bb:20:eb:4c:85:69:3c:57:a1:
d5:f7:41:22:da:df:93:6b:64:3d:be:b5:b5:7f:ed:7b:e8:e2:
d6:88:75:4e:7c:79:8d:4a:24:cd:8a:19:30:04:dd:6b:fc:5d:
c5:a9:0a:a6:c7:92:6d:64:71:b4:cd:d9:60:45:95:3d:75:89:
eb:a4:ce:ae:c3:7f:8a:43:80:4a:5f:41:4d:a0:9d:b2:03:0c:
d3:f2:54:9b:32:98:18:ba:f5:1b:39:1b:40:25:1c:48:45:b0:
c3:03:09:f2:91:79:e1:b6:54:d8:7c:62:1a:48:c9:22:39:ff:
50:20:3b:41:91:38:5a:af:c6:60:71:bb:91:cc:eb:f0:c1:77:
91:c6:7b:51:f6:05:d1:5a:59:63:2e:79:6c:a7:a6:6e:11:1b:
c5:d1:74:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaemk4eADhPJIQx+NwnwnahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjQ2MmM4YzAwNjVhMGE2Y2VhZjI0Mzk4NWI2OTdjZjEz
NTdiZmIwHhcNMjUwNTA1MDQwMDM0WhcNMjUwNTA2MDQwMDM0WjAzMTEwLwYDVQQD
Eyg0YmNjMTIzOGIzMWJiOTIxNWY2N2UwZDgxNjE3NmJmOGZhZjA0ZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v8ZmhXYhP9FK/YDo4ewZU6mpGp4
6n7GddpzBTnWrgI4pKItcVflUonXb70sOBP6CyYrQOPCnzaYM7xSlOG7E0yQqb0W
ZgIzfsBPxS5hYOQd6kHZ8D1v7j8+807VnvmCOxoExBf9oOKCdw3xOTqDOKkO+HdB
33DSzcp8p3CNI/U0ZJ5E/UVyOJnYAoHUUa6fIjENDlj+8YAnS1wu0WqBVunsLAkq
DciBqQrr/w95vETs9aRrXQ/Hwv20wDgnizNl0SgU2yyfMVvdkeVVgcVuz3xFGgF+
lU7yLP1syQrtUt1S2yI7FF6AuOT0Vq5nnungyZYS2Vm957uLYX8H4qd/1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvMEjizG7khX2fg2BYXa/j68E5+MB8GA1UdIwQY
MBaAFCFkYsjABloKbOryQ5hbaXzxNXv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mZDkwYzUtMTgzYy00ZDY5LTkyZjEt
NTZiYzcwOTY3ODg1LzEvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9mZDkwYzUtMTgzYy00ZDY5LTkyZjEtNTZiYzcwOTY3ODg1
LzEvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwhHSGhf
zaioyFfZ6VHFw4xE+C9/K1HRfyoBQZZMIfldyY3J2ootrjiWdWoCGzTVIxRPq8Se
dYr6ODMMKHnmGkITbk/BK2+XW5MyPeN6CRB1X7nBiWjs3gcRlgt1D8QkDuiLuyDr
TIVpPFeh1fdBItrfk2tkPb61tX/te+ji1oh1Tnx5jUokzYoZMATda/xdxakKpseS
bWRxtM3ZYEWVPXWJ66TOrsN/ikOASl9BTaCdsgMM0/JUmzKYGLr1GzkbQCUcSEWw
wwMJ8pF54bZU2HxiGkjJIjn/UCA7QZE4Wq/GYHG7kczr8MF3kcZ7UfYF0VpZYy55
bKembhEbxdF0hA==
-----END CERTIFICATE-----
Generated at Mon May 5 13:48:26 2025 by rpki-client