Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: RAqAgwSn2z/uq9pgUAQFMtBQmVqwOh7Z8Un5bsnZOJc=
Subject key identifier: BF:C9:9A:85:1C:D0:EC:2D:76:16:DF:44:68:D8:66:D5:F6:4A:C9:E8
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 0197B9A1A4AFD534EF0A8214F04C431A5246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 15BB
Signing time: Sun 29 Jun 2025 03:01:07 +0000
Manifest this update: Sun 29 Jun 2025 03:01:07 +0000
Manifest next update: Mon 30 Jun 2025 03:01:07 +0000
Files and hashes: 1: HevIcw-udVLHAsRMuVL8AXS5DmE.roa (hash: /vwUjeGhMDVH5p9rxYTRis9U3GgQG40VBJ1bShqGwbM=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: 9RYIXAfLrn6ENh+Cl5/rW6GN4Gk2B8M347pZf14i9pA=)
3: dfcipKIHJhkLM8tES7y9qnzOa0g.roa (hash: hdMZ+zVZPKGH8nt9Efyy+7bQ/S/VggiNWiYJsxgZkUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:a4:af:d5:34:ef:0a:82:14:f0:4c:43:1a:52:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Jun 29 03:01:07 2025 GMT
Not After : Jun 30 03:01:07 2025 GMT
Subject: CN=bfc99a851cd0ec2d7616df4468d866d5f64ac9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:41:ab:e7:d4:20:1a:fd:e2:f5:8e:62:7e:
70:7d:ef:10:3c:19:a8:f7:d4:59:8a:bf:2d:29:0f:
66:e1:82:fa:8a:9f:e1:29:7a:b8:d3:ac:98:28:53:
26:fb:7f:ef:7a:e1:c0:b9:5b:30:0b:f4:f0:8b:70:
55:64:d6:c5:21:8d:e7:b2:5c:89:9c:b0:a3:74:b4:
c8:9f:c3:2d:d3:4b:d8:d2:5a:ff:3d:92:8e:67:29:
44:0b:06:e3:4f:95:91:b9:dd:61:ff:58:34:bf:f0:
e0:c7:d3:30:47:40:e8:c5:ef:ba:8b:be:1c:d5:39:
67:b3:c4:78:a5:5e:27:1d:04:0e:4a:3d:0d:5f:e7:
10:0b:9e:83:7e:b7:15:00:5f:63:a6:d7:80:32:e0:
82:79:1b:7d:da:78:50:cf:6a:78:fd:a2:5b:1f:b8:
c3:ae:6d:dd:5b:e1:a3:6e:29:2a:38:5b:37:6d:f4:
86:f4:e8:c2:4d:1e:ef:45:b6:37:74:c2:48:1d:dc:
cb:37:ed:d7:6d:bd:c1:4d:09:0b:e6:79:69:4a:35:
dd:11:43:9e:a5:5b:09:1e:e9:75:cd:ae:39:45:df:
70:a1:c6:31:e7:84:05:c7:34:0e:30:aa:f9:da:21:
6b:6c:3d:a2:00:3e:e6:d3:50:78:43:9e:71:5d:33:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C9:9A:85:1C:D0:EC:2D:76:16:DF:44:68:D8:66:D5:F6:4A:C9:E8
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d0:e0:07:c3:50:4f:b7:7a:3b:84:8a:72:1d:a0:cc:72:48:
77:65:48:76:96:47:5f:e1:ab:bc:b8:1d:52:61:65:3f:c6:9b:
12:ec:68:17:17:1f:c9:89:76:16:e6:1e:e1:7f:18:89:e9:85:
b0:ad:03:9b:aa:aa:4f:68:c4:c2:4b:33:a4:50:a9:e5:de:46:
d8:15:b0:21:af:bf:a6:50:50:6f:fc:2c:43:33:aa:82:f1:52:
cd:a7:69:5b:96:12:31:b7:52:53:55:23:a4:e7:0d:4a:58:83:
47:55:64:e2:52:31:d9:e9:b7:e9:4b:81:b3:6f:86:87:14:4f:
f2:3e:cc:a9:ae:65:48:01:11:bb:f0:a8:ef:23:cc:dc:8f:9a:
8f:d8:3c:22:a5:4d:87:35:f0:f7:dd:05:49:a2:b1:56:a5:d5:
29:95:15:55:50:97:e6:8a:5d:3f:96:8e:be:ea:62:e8:e4:4d:
89:56:a5:fe:87:4d:18:a2:b3:6e:4f:2d:7a:e8:f6:04:7b:b9:
9e:f0:3b:a5:cd:b8:e0:f7:fe:60:f3:28:2b:38:bf:56:9e:b1:
1f:46:7f:7a:9a:d8:d1:77:cb:36:bf:34:23:31:1c:17:5e:9b:
4a:5a:27:7f:79:c0:db:dd:f0:21:49:94:b9:d3:9f:ac:a4:f0:
c9:01:ed:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oaSv1TTvCoIU8ExDGlJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl
YWNlYjQwHhcNMjUwNjI5MDMwMTA3WhcNMjUwNjMwMDMwMTA3WjAzMTEwLwYDVQQD
EyhiZmM5OWE4NTFjZDBlYzJkNzYxNmRmNDQ2OGQ4NjZkNWY2NGFjOWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSRBq+fUIBr94vWOYn5wfe8QPBmo
99RZir8tKQ9m4YL6ip/hKXq406yYKFMm+3/veuHAuVswC/Twi3BVZNbFIY3nslyJ
nLCjdLTIn8Mt00vY0lr/PZKOZylECwbjT5WRud1h/1g0v/Dgx9MwR0Doxe+6i74c
1Tlns8R4pV4nHQQOSj0NX+cQC56DfrcVAF9jpteAMuCCeRt92nhQz2p4/aJbH7jD
rm3dW+GjbikqOFs3bfSG9OjCTR7vRbY3dMJIHdzLN+3Xbb3BTQkL5nlpSjXdEUOe
pVsJHul1za45Rd9wocYx54QFxzQOMKr52iFrbD2iAD7m01B4Q55xXTNUQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/JmoUc0OwtdhbfRGjYZtX2SsnoMB8GA1UdIwQY
MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt
MWU0MzZkY2I4NWM1LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1
LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidDgB8NQ
T7d6O4SKch2gzHJId2VIdpZHX+GrvLgdUmFlP8abEuxoFxcfyYl2FuYe4X8YiemF
sK0Dm6qqT2jEwkszpFCp5d5G2BWwIa+/plBQb/wsQzOqgvFSzadpW5YSMbdSU1Uj
pOcNSliDR1Vk4lIx2em36UuBs2+GhxRP8j7Mqa5lSAERu/Co7yPM3I+aj9g8IqVN
hzXw990FSaKxVqXVKZUVVVCX5opdP5aOvupi6ORNiVal/odNGKKzbk8teuj2BHu5
nvA7pc244Pf+YPMoKzi/Vp6xH0Z/eprY0XfLNr80IzEcF16bSlonf3nA293wIUmU
udOfrKTwyQHtHg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:35:07 2025 by rpki-client