Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
File: Iavg4GkA17lgdsALtQ1PncA5L1k.mft (raw, json)
Hash identifier: 3hPr0YkiPANpEnQXv3BSZUjAVTaT2Dqk5Adwh8fKCp0=
Subject key identifier: D8:16:EA:C3:4F:9B:97:18:EF:7C:C5:24:65:D2:3E:4C:7D:42:0A:9A
Authority key identifier: 21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
Certificate issuer: /CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Certificate serial: 0197B5FBE2647A995BA39BA619C713CD3B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
Manifest number: 0518
Signing time: Sat 28 Jun 2025 10:01:12 +0000
Manifest this update: Sat 28 Jun 2025 10:01:12 +0000
Manifest next update: Sun 29 Jun 2025 10:01:12 +0000
Files and hashes: 1: Iavg4GkA17lgdsALtQ1PncA5L1k.crl (hash: RNEKrMQ4Y4HCw2aMsynFVOs/jrGCG8McnEerD9Os33Y=)
2: mCYGvJbl1Fw6jPx9Itl4lHAe01g.roa (hash: jGLZYe0wekh1PvAGDaIi7Ir4CmCU/JjboXXovtVFOe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:e2:64:7a:99:5b:a3:9b:a6:19:c7:13:cd:3b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Validity
Not Before: Jun 28 10:01:12 2025 GMT
Not After : Jun 29 10:01:12 2025 GMT
Subject: CN=d816eac34f9b9718ef7cc52465d23e4c7d420a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:30:fa:c5:c4:80:45:30:d4:94:a8:26:53:6b:
51:6f:13:51:7b:8e:cf:bf:92:b7:d1:86:e2:be:25:
3a:7d:15:c1:8b:88:ae:b9:13:a1:fb:9e:3a:f3:38:
9f:24:17:50:63:48:0b:ac:48:a7:c0:ca:6e:7f:86:
c4:44:ae:79:63:c9:3f:fe:07:dc:d6:e2:fe:be:29:
1c:53:20:42:bf:71:3b:6b:4b:ed:01:58:d0:e7:96:
7d:25:97:73:35:a1:b4:f9:68:a7:fc:ca:ce:02:a1:
28:9c:38:56:03:4a:96:e4:c7:37:76:e0:9f:67:99:
6e:fa:68:2b:e1:ba:79:59:7b:fe:31:5b:62:34:92:
7e:9f:30:f7:1e:6b:1b:03:5f:29:d9:dc:be:34:57:
12:c5:2f:4f:f0:e1:22:86:ec:3b:cb:fd:99:76:c7:
b6:9e:e4:14:6e:07:d5:d0:fa:28:f5:ba:b1:e1:53:
ff:1d:f3:c3:5c:d7:ac:de:06:23:41:8b:14:54:8b:
9b:60:68:32:f4:cd:5d:2b:d9:a0:c7:0f:78:33:e1:
e8:e2:e2:3b:4c:0c:a2:0d:15:8b:af:7a:3c:94:e4:
74:94:d4:e4:39:c0:4d:2b:35:df:b0:1c:f9:97:10:
44:84:25:f0:bc:60:b1:31:a8:dd:be:88:2b:d3:32:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:16:EA:C3:4F:9B:97:18:EF:7C:C5:24:65:D2:3E:4C:7D:42:0A:9A
X509v3 Authority Key Identifier:
keyid:21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:72:5b:a0:12:17:d7:ae:8f:72:27:7b:ba:43:43:40:fa:45:
1f:b9:90:8c:8c:5f:18:1d:1b:70:cd:00:e8:b5:64:b5:09:dd:
33:82:6c:6b:d7:9f:dd:3b:5d:53:61:89:88:b2:88:be:88:93:
26:6f:e5:1a:0e:b1:70:ea:ce:42:aa:eb:91:12:24:1a:0b:76:
f3:f2:cb:08:2e:91:23:71:a9:25:1c:c4:99:f6:83:d4:88:e1:
78:44:22:76:a7:76:6e:79:be:d7:9b:ec:71:24:1b:58:ef:40:
8e:3c:b4:cb:42:36:e7:65:85:f7:f1:82:1c:eb:e5:69:41:07:
24:dd:17:5a:8a:8e:f0:8b:0b:a7:b4:95:6f:71:e7:de:28:27:
1b:c7:45:05:4c:e8:56:9f:a2:ac:9a:b4:b2:d8:45:4e:10:dd:
24:77:4b:03:3d:f0:f6:39:a1:a2:c6:b2:06:17:f8:07:5f:0d:
10:be:97:64:4b:02:d8:23:be:be:fc:80:4b:75:64:df:49:d9:
17:2f:fb:8d:62:3a:eb:de:9f:fd:df:89:47:1f:9b:e2:c3:e5:
04:87:44:49:97:3c:e3:73:e4:79:a5:f1:3e:54:c0:81:30:52:
e0:5d:33:92:71:b0:25:79:af:9e:5d:a1:1f:ea:50:cd:92:a0:
df:17:8b:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1++Jkeplbo5umGccTzTsSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYWJlMGUwNjkwMGQ3Yjk2MDc2YzAwYmI1MGQ0ZjlkYzAz
OTJmNTkwHhcNMjUwNjI4MTAwMTEyWhcNMjUwNjI5MTAwMTEyWjAzMTEwLwYDVQQD
EyhkODE2ZWFjMzRmOWI5NzE4ZWY3Y2M1MjQ2NWQyM2U0YzdkNDIwYTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jD6xcSARTDUlKgmU2tRbxNRe47P
v5K30YbiviU6fRXBi4iuuROh+5468zifJBdQY0gLrEinwMpuf4bERK55Y8k//gfc
1uL+vikcUyBCv3E7a0vtAVjQ55Z9JZdzNaG0+Win/MrOAqEonDhWA0qW5Mc3duCf
Z5lu+mgr4bp5WXv+MVtiNJJ+nzD3HmsbA18p2dy+NFcSxS9P8OEihuw7y/2Zdse2
nuQUbgfV0Poo9bqx4VP/HfPDXNes3gYjQYsUVIubYGgy9M1dK9mgxw94M+Ho4uI7
TAyiDRWLr3o8lOR0lNTkOcBNKzXfsBz5lxBEhCXwvGCxMajdvogr0zK+FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgW6sNPm5cY73zFJGXSPkx9QgqaMB8GA1UdIwQY
MBaAFCGr4OBpANe5YHbAC7UNT53AOS9ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWF2ZzRHa0ExN2xnZHNBTHRRMVBuY0E1TDFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mMmVjMDktNTQ0NS00NGZmLTk5MTUt
ZGVlOWFhZWZmYzlkLzEvSWF2ZzRHa0ExN2xnZHNBTHRRMVBuY0E1TDFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9mMmVjMDktNTQ0NS00NGZmLTk5MTUtZGVlOWFhZWZmYzlk
LzEvSWF2ZzRHa0ExN2xnZHNBTHRRMVBuY0E1TDFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3JboBIX
166Pcid7ukNDQPpFH7mQjIxfGB0bcM0A6LVktQndM4Jsa9ef3TtdU2GJiLKIvoiT
Jm/lGg6xcOrOQqrrkRIkGgt28/LLCC6RI3GpJRzEmfaD1IjheEQidqd2bnm+15vs
cSQbWO9Ajjy0y0I252WF9/GCHOvlaUEHJN0XWoqO8IsLp7SVb3Hn3ignG8dFBUzo
Vp+irJq0sthFThDdJHdLAz3w9jmhosayBhf4B18NEL6XZEsC2CO+vvyAS3Vk30nZ
Fy/7jWI6696f/d+JRx+b4sPlBIdESZc843PkeaXxPlTAgTBS4F0zknGwJXmvnl2h
H+pQzZKg3xeLeA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:33 2025 by rpki-client