Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File: iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier: XfPFmnrfqRQvs8uxtvDaK5L0OT3fe7Ws50VW1+RPB/M=
Subject key identifier: 2A:CA:AC:BE:C2:E4:B9:2B:D0:10:62:32:64:99:DD:6A:74:0B:67:8C
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial: 0197C425A57F0032883B6E1D7BC2BEC46BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number: 0C73
Signing time: Tue 01 Jul 2025 04:01:30 +0000
Manifest this update: Tue 01 Jul 2025 04:01:30 +0000
Manifest next update: Wed 02 Jul 2025 04:01:30 +0000
Files and hashes: 1: NGjcJESkWKoe17DLj5CiFkjFkhs.roa (hash: GPilr/syUwSnDgvatxbmfR2uNG9m+2J2hRVuK9V/K4A=)
2: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: VOGkSqA5eZu2BPfIo8U7KB3WtYGJDbU2bvHr/zQIS70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:25:a5:7f:00:32:88:3b:6e:1d:7b:c2:be:c4:6b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Validity
Not Before: Jul 1 04:01:30 2025 GMT
Not After : Jul 2 04:01:30 2025 GMT
Subject: CN=2acaacbec2e4b92bd01062326499dd6a740b678c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:d9:0e:4f:87:6b:20:82:16:00:1d:71:7b:
c7:f9:ec:24:78:8a:9a:27:b1:7a:eb:35:d5:fa:6a:
c8:17:15:1a:7a:c8:5b:a8:d7:b0:12:d1:da:d1:6c:
fb:ae:96:13:af:6a:ff:5a:a2:6a:2a:1e:2b:e8:e3:
8f:b7:98:11:22:08:cd:eb:b9:c5:eb:ce:30:12:c1:
ae:34:5e:f3:e5:db:79:09:1f:4e:54:0a:df:21:58:
55:8a:5a:98:ea:b1:45:ec:a4:18:ec:9d:14:cf:7a:
f5:91:a5:39:9d:85:d8:8b:60:ac:5c:3c:37:bc:0f:
70:97:0b:1d:cb:74:22:57:7b:6f:0f:90:fb:40:bb:
8b:95:81:bf:25:28:ab:10:6c:da:dd:42:32:27:d1:
38:5d:1d:ff:5c:33:d5:22:93:62:5e:59:72:84:38:
95:f2:3f:44:24:42:87:6b:ec:bd:b4:e8:94:3e:56:
df:59:54:1a:64:65:33:32:e9:76:aa:5d:f7:b4:d3:
ad:31:eb:28:79:bb:75:b8:ee:a0:36:ac:a6:bb:f3:
8a:50:9d:81:f7:cd:f8:7c:7b:2c:c4:b2:e3:8c:cb:
be:b0:d4:73:88:35:4b:cf:60:d1:2f:af:36:56:c7:
ad:53:f2:4c:b2:35:5b:4e:21:11:81:6c:da:fb:43:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CA:AC:BE:C2:E4:B9:2B:D0:10:62:32:64:99:DD:6A:74:0B:67:8C
X509v3 Authority Key Identifier:
keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:76:c6:f5:1a:f4:3c:b6:d4:40:6a:c3:0a:3b:ed:fb:b6:9d:
58:35:d1:d2:15:84:9d:09:13:18:14:96:24:1d:b6:d3:89:8a:
bb:15:65:a2:67:13:d2:c3:b6:84:11:eb:ce:5e:19:9b:0c:41:
86:6d:0a:81:f4:79:b5:e3:1f:db:1d:2c:2a:0e:dc:ad:0c:b7:
ad:4b:0a:6f:6e:bc:d8:d5:f5:74:88:11:97:6c:76:27:5e:41:
03:8f:65:7f:ab:1d:23:9a:bc:22:eb:b7:86:e6:05:38:b4:d3:
72:f3:18:38:7d:c5:9e:ab:b8:d7:4a:03:42:87:19:bf:9c:23:
22:ed:a5:96:45:08:17:64:bd:00:12:9f:59:30:72:23:43:b3:
05:fe:7b:e0:b1:8d:37:75:18:d7:aa:3c:8c:50:68:f6:ce:ea:
e4:bd:84:88:37:06:c8:a3:58:6f:f3:b9:15:05:08:48:f6:a3:
f6:0c:37:67:37:01:c4:a6:3e:8c:41:f8:e8:6a:37:87:9d:24:
11:cd:5f:dc:f6:6c:2b:b9:03:4d:ed:21:62:d9:37:60:ce:64:
16:82:df:55:b0:74:53:ba:a5:09:77:e0:1c:4e:8f:7e:81:ef:
b7:90:a0:50:2b:b5:7a:ed:8d:eb:b3:32:8d:81:5f:9a:ea:4d:
26:a1:9a:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEJaV/ADKIO24de8K+xGvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZTEzOWFmMDg5OWY1ZDZiNWIzMjU4MTM3M2VkYTMwMzdl
YTMwYzAwHhcNMjUwNzAxMDQwMTMwWhcNMjUwNzAyMDQwMTMwWjAzMTEwLwYDVQQD
EygyYWNhYWNiZWMyZTRiOTJiZDAxMDYyMzI2NDk5ZGQ2YTc0MGI2NzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi7ZDk+HayCCFgAdcXvH+ewkeIqa
J7F66zXV+mrIFxUaeshbqNewEtHa0Wz7rpYTr2r/WqJqKh4r6OOPt5gRIgjN67nF
684wEsGuNF7z5dt5CR9OVArfIVhVilqY6rFF7KQY7J0Uz3r1kaU5nYXYi2CsXDw3
vA9wlwsdy3QiV3tvD5D7QLuLlYG/JSirEGza3UIyJ9E4XR3/XDPVIpNiXllyhDiV
8j9EJEKHa+y9tOiUPlbfWVQaZGUzMul2ql33tNOtMesoebt1uO6gNqymu/OKUJ2B
9834fHssxLLjjMu+sNRziDVLz2DRL682VsetU/JMsjVbTiERgWza+0OPPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrKrL7C5Lkr0BBiMmSZ3Wp0C2eMMB8GA1UdIwQY
MBaAFIrhOa8ImfXWtbMlgTc+2jA36jDAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEt
ZjllMmMyZmRiZjM1LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEtZjllMmMyZmRiZjM1
LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHbG9Rr0
PLbUQGrDCjvt+7adWDXR0hWEnQkTGBSWJB2204mKuxVlomcT0sO2hBHrzl4ZmwxB
hm0KgfR5teMf2x0sKg7crQy3rUsKb2682NX1dIgRl2x2J15BA49lf6sdI5q8Iuu3
huYFOLTTcvMYOH3Fnqu410oDQocZv5wjIu2llkUIF2S9ABKfWTByI0OzBf574LGN
N3UY16o8jFBo9s7q5L2EiDcGyKNYb/O5FQUISPaj9gw3ZzcBxKY+jEH46Go3h50k
Ec1f3PZsK7kDTe0hYtk3YM5kFoLfVbB0U7qlCXfgHE6PfoHvt5CgUCu1eu2N67My
jYFfmupNJqGayQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 14:20:26 2025 by rpki-client