Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier: pL4YWtf7uiag4kwdgWiGAjb6kojbXVxuLHQjQEYFl0A=
Subject key identifier: 7B:40:7C:8A:F8:77:B9:41:B1:16:6D:D2:4D:EB:4B:3C:25:3B:D9:98
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 0197C537E352708BC783B9892CA8D3637071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number: 15C8
Signing time: Tue 01 Jul 2025 09:01:03 +0000
Manifest this update: Tue 01 Jul 2025 09:01:03 +0000
Manifest next update: Wed 02 Jul 2025 09:01:03 +0000
Files and hashes: 1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: JOk1bXf+8itaQ9S45KpfQO+1eX1T6SEFDn3oNvvjmmE=)
2: 1-vIuocsySS4hCLwPwzSGGi0Y9tc.roa (hash: +g5xAqCWTvxo7PyMWD8c44r3EF7O21NmsWOjSdPveho=)
3: 6xCL5BtIX0Zw-bEyK4PbFZQ3IoU.roa (hash: nI7BiO9oHKEpbeXY5Oxc7XDGorODwyRSr7ofWs5lz2E=)
4: CCa8r2qpCvCDgqqDcfo4PuokNhg.roa (hash: kaZQfZ66nJ9UAy07CUOVheGM2eaFszN0P5WDSIi6z7o=)
5: L_Dg0on8d5LaF_HjlpEXS7IQZ4o.roa (hash: hPCKAEOYOgu3sLuyZtqWs1ysCg/phNwXs4ZElEe0znQ=)
6: VLB7zCgm9pvaqKu6mzLINMfkozA.roa (hash: 47IXsdsMymeSm5xy4aWnRGiTVKD1XHMeiXkhj2C3NVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:37:e3:52:70:8b:c7:83:b9:89:2c:a8:d3:63:70:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Jul 1 09:01:03 2025 GMT
Not After : Jul 2 09:01:03 2025 GMT
Subject: CN=7b407c8af877b941b1166dd24deb4b3c253bd998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:ba:4c:f0:fc:13:73:cd:11:7f:89:8f:bb:
78:44:f4:a9:8d:8a:17:e8:57:c0:f5:bb:7f:d2:1c:
f0:23:16:93:3a:42:3a:c1:62:32:ed:78:4e:c9:f3:
3b:26:94:13:14:8e:6f:c1:1d:11:16:7c:e3:5b:2d:
83:63:52:78:92:23:94:84:2c:be:c9:15:0e:df:fc:
8e:88:b7:bd:69:45:fe:c2:07:bd:0d:6d:50:02:ca:
15:aa:fd:c6:d9:49:b5:63:7d:71:a7:a0:75:81:33:
c7:aa:63:78:d1:87:94:ae:f5:7b:59:6b:d3:24:3f:
c9:8d:52:e8:48:f3:79:91:cd:03:52:27:51:61:b1:
0b:58:0b:c7:bd:a0:e8:bd:e1:ae:8a:a1:27:6d:8d:
31:9f:3c:25:7e:58:9d:86:0f:6a:c5:32:31:3a:08:
1e:0d:0f:09:3e:d9:43:01:d8:f1:43:27:dd:e4:91:
ac:70:4b:e1:4e:0e:fd:2c:aa:11:61:a2:b4:ec:cf:
b8:4d:bc:7c:59:cf:d0:01:70:5c:b1:70:f6:cd:f9:
bf:bd:a9:c9:16:05:d5:45:94:9c:80:f1:e6:25:77:
39:b5:80:b7:f6:5c:cc:13:bf:ba:b9:0d:a8:8b:55:
52:0c:4c:43:84:36:7c:fd:85:f5:3c:a4:81:bb:04:
76:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:40:7C:8A:F8:77:B9:41:B1:16:6D:D2:4D:EB:4B:3C:25:3B:D9:98
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e9:8c:42:eb:88:ee:02:34:10:6c:83:2c:00:fd:c6:23:32:
22:87:0d:8b:23:a3:64:dd:8f:70:91:f6:6b:b4:8b:fd:30:d5:
82:7b:db:54:35:94:e0:3c:d1:07:fa:5a:d5:f8:c2:bf:e1:c0:
57:2b:92:55:20:7a:b3:70:48:93:ad:8f:9a:1e:4c:bb:96:f6:
e9:4e:24:ae:1e:0f:87:f3:ca:b3:c1:55:93:ce:6e:76:3b:7f:
77:b1:47:97:56:ec:6c:86:2c:99:20:c6:4d:1d:21:10:a4:da:
f5:46:2d:fe:60:b9:49:73:f6:ee:76:32:2b:f8:97:89:58:fc:
f5:b1:83:d0:f2:4f:6a:bd:68:24:d7:57:6e:9f:8b:08:6c:84:
ed:d1:2a:b9:f7:84:5d:6e:6c:6b:1b:a6:e8:65:3c:e4:2b:10:
55:05:b4:88:fe:a9:42:6b:38:be:d4:22:91:c4:3a:e8:06:95:
af:d9:b9:a2:2f:9c:f9:80:14:52:5d:54:d1:7d:5c:31:c9:92:
be:1b:ec:d1:36:c4:21:90:0e:00:40:20:30:de:3d:ab:0a:11:
9c:a2:88:fc:1f:e1:70:13:dd:f3:30:3d:68:d5:d1:66:30:c2:
30:6f:1e:10:5b:48:22:0c:ae:7f:d9:58:4c:61:c7:29:d5:0d:
7a:e8:a6:30
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZfFN+NScIvHg7mJLKjTY3BxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ODU3ZWNmNDQxZTVlYTFkNzE4MWZlYzdlOTdlNmRiYzEy
MjBmYzIwHhcNMjUwNzAxMDkwMTAzWhcNMjUwNzAyMDkwMTAzWjAzMTEwLwYDVQQD
Eyg3YjQwN2M4YWY4NzdiOTQxYjExNjZkZDI0ZGViNGIzYzI1M2JkOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEy6TPD8E3PNEX+Jj7t4RPSpjYoX
6FfA9bt/0hzwIxaTOkI6wWIy7XhOyfM7JpQTFI5vwR0RFnzjWy2DY1J4kiOUhCy+
yRUO3/yOiLe9aUX+wge9DW1QAsoVqv3G2Um1Y31xp6B1gTPHqmN40YeUrvV7WWvT
JD/JjVLoSPN5kc0DUidRYbELWAvHvaDoveGuiqEnbY0xnzwlflidhg9qxTIxOgge
DQ8JPtlDAdjxQyfd5JGscEvhTg79LKoRYaK07M+4Tbx8Wc/QAXBcsXD2zfm/vanJ
FgXVRZScgPHmJXc5tYC39lzME7+6uQ2oi1VSDExDhDZ8/YX1PKSBuwR2hQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHtAfIr4d7lBsRZt0k3rSzwlO9mYMB8GA1UdIwQY
MBaAFPiFfs9EHl6h1xgf7H6X5tvBIg/CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1JVi16MFFlWHFIWEdCX3NmcGZtMjhFaUQ4SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQz
LWE4OWY4MTc3NjQwNi8xLzEtSVYtejBRZVhxSFhHQl9zZnBmbTI4RWlEOEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJhL2M4NDk3Ni1kNWVhLTRlN2YtOGVkMy1hODlmODE3NzY0
MDYvMS8xLUlWLXowUWVYcUhYR0Jfc2ZwZm0yOEVpRDhJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANumM
QuuI7gI0EGyDLAD9xiMyIocNiyOjZN2PcJH2a7SL/TDVgnvbVDWU4DzRB/pa1fjC
v+HAVyuSVSB6s3BIk62Pmh5Mu5b26U4krh4Ph/PKs8FVk85udjt/d7FHl1bsbIYs
mSDGTR0hEKTa9UYt/mC5SXP27nYyK/iXiVj89bGD0PJPar1oJNdXbp+LCGyE7dEq
ufeEXW5saxum6GU85CsQVQW0iP6pQms4vtQikcQ66AaVr9m5oi+c+YAUUl1U0X1c
McmSvhvs0TbEIZAOAEAgMN49qwoRnKKI/B/hcBPd8zA9aNXRZjDCMG8eEFtIIgyu
f9lYTGHHKdUNeuimMA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 11:22:41 2025 by rpki-client