Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: nJI+dJPtT4KYwk6jp+I+wUXYpVymv2l2W1E6oVeIFuo=
Subject key identifier: 76:A7:79:BE:55:90:D5:8E:8C:8A:5C:D3:19:E7:6B:29:F0:1B:43:DA
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 0197B70EDBCD9737F8E45C69E976798B16BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 1098
Signing time: Sat 28 Jun 2025 15:01:33 +0000
Manifest this update: Sat 28 Jun 2025 15:01:33 +0000
Manifest next update: Sun 29 Jun 2025 15:01:33 +0000
Files and hashes: 1: 0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa (hash: q9HOhDrTziiN8dHNBG3tLes1wQlniZAzuxjJOEin3Rw=)
2: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: Ndew4aBQxZ2Kmr+tVhXPUjW2T9Hcq8qlaGbOFDRaOwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:db:cd:97:37:f8:e4:5c:69:e9:76:79:8b:16:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Jun 28 15:01:33 2025 GMT
Not After : Jun 29 15:01:33 2025 GMT
Subject: CN=76a779be5590d58e8c8a5cd319e76b29f01b43da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:f5:23:f1:c8:e4:7b:13:ad:02:51:59:a9:
74:fb:fb:51:11:6c:6a:56:02:e7:a9:92:80:c5:3e:
37:43:44:54:87:fd:31:a8:f4:ba:c6:87:30:73:36:
97:57:2a:1d:d9:14:a6:af:36:2a:23:45:a0:e6:fd:
79:39:ad:75:7b:8b:30:02:52:ca:88:3a:0c:52:e2:
11:67:71:7f:e2:15:66:b6:88:05:72:eb:3c:f0:06:
01:b5:d6:4b:26:4b:dc:ed:c4:5e:1a:76:72:b1:31:
19:c5:0a:74:03:f5:ef:30:2d:5b:70:f2:f7:e5:0e:
a3:cb:ce:e2:14:c1:54:4e:0d:a5:83:f2:50:b4:a3:
5e:38:5f:a1:e3:95:f7:56:73:c3:6f:1e:5f:d6:cc:
3f:54:76:d9:2c:3c:35:5d:1b:86:aa:05:a3:e7:4f:
04:86:ac:8a:87:c5:72:8b:13:0a:b7:71:6b:14:fe:
51:99:d0:01:c9:f1:3b:2a:6e:b5:1c:ec:5a:e0:dc:
4a:b4:fd:ef:5c:3c:90:12:62:61:2a:73:ee:dd:db:
cf:73:0e:9a:d1:e3:f4:dd:e2:50:17:7a:4f:bc:5c:
2a:27:99:47:39:d8:bf:58:94:f4:a7:1f:82:6e:11:
ab:c4:03:40:8c:1f:28:02:8e:e8:a9:c5:d4:45:05:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A7:79:BE:55:90:D5:8E:8C:8A:5C:D3:19:E7:6B:29:F0:1B:43:DA
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0b:30:7a:01:07:30:c0:9b:d2:1f:3a:d1:c1:77:58:d8:90:
d5:15:75:3f:6c:47:5f:a5:a4:c8:f7:61:9d:58:73:dd:76:c5:
41:0d:e5:f9:5e:d0:9f:0e:2c:d8:c4:3d:99:78:10:28:d3:fc:
cf:99:de:0a:dc:0d:f3:da:07:e1:a0:bb:5d:fc:c1:89:47:8c:
8f:75:69:2b:10:a2:7e:5e:9d:af:b5:50:65:5f:4b:d8:ab:b2:
c7:94:89:a1:db:ef:8b:36:11:2f:97:73:ca:ca:89:d5:06:fb:
17:29:a2:64:86:e0:43:d9:f1:45:eb:10:8b:34:1b:a3:65:7b:
43:e3:63:48:b9:cc:40:00:42:cb:4b:97:17:5b:e8:71:70:ea:
f2:34:56:3e:51:d3:8b:7e:f1:9e:ce:40:b7:e8:2f:c4:ec:1b:
86:2f:42:77:50:d0:7b:6f:4e:9e:62:87:44:2d:fa:7c:08:0a:
9c:b1:b3:c1:48:5a:c8:1c:88:f5:6a:31:39:e7:10:d7:0d:90:
0c:1f:ea:d1:46:9d:dc:d2:bc:df:c1:90:a6:bd:50:70:d0:52:
1e:8e:67:29:81:1f:22:25:64:37:52:36:1f:9e:37:64:f7:54:
b4:52:c6:1d:95:c2:0c:10:c6:b8:9b:d6:a0:87:5e:41:50:75:
93:29:2d:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DtvNlzf45Fxp6XZ5ixa/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTc3NmE2OTU1YzAxNjNjOWNmMWE4MzhjNDFkZmVlNWRh
OWRiM2QwHhcNMjUwNjI4MTUwMTMzWhcNMjUwNjI5MTUwMTMzWjAzMTEwLwYDVQQD
Eyg3NmE3NzliZTU1OTBkNThlOGM4YTVjZDMxOWU3NmIyOWYwMWI0M2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPP1I/HI5HsTrQJRWal0+/tREWxq
VgLnqZKAxT43Q0RUh/0xqPS6xocwczaXVyod2RSmrzYqI0Wg5v15Oa11e4swAlLK
iDoMUuIRZ3F/4hVmtogFcus88AYBtdZLJkvc7cReGnZysTEZxQp0A/XvMC1bcPL3
5Q6jy87iFMFUTg2lg/JQtKNeOF+h45X3VnPDbx5f1sw/VHbZLDw1XRuGqgWj508E
hqyKh8VyixMKt3FrFP5RmdAByfE7Km61HOxa4NxKtP3vXDyQEmJhKnPu3dvPcw6a
0eP03eJQF3pPvFwqJ5lHOdi/WJT0px+CbhGrxANAjB8oAo7oqcXURQUdJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaneb5VkNWOjIpc0xnnaynwG0PaMB8GA1UdIwQY
MBaAFCKndqaVXAFjyc8ag4xB3+5dqds9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMt
YWYxZGUzZDBmMjE3LzEvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMtYWYxZGUzZDBmMjE3
LzEvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawswegEH
MMCb0h860cF3WNiQ1RV1P2xHX6WkyPdhnVhz3XbFQQ3l+V7Qnw4s2MQ9mXgQKNP8
z5neCtwN89oH4aC7XfzBiUeMj3VpKxCifl6dr7VQZV9L2Kuyx5SJodvvizYRL5dz
ysqJ1Qb7FymiZIbgQ9nxResQizQbo2V7Q+NjSLnMQABCy0uXF1vocXDq8jRWPlHT
i37xns5At+gvxOwbhi9Cd1DQe29OnmKHRC36fAgKnLGzwUhayByI9WoxOecQ1w2Q
DB/q0Uad3NK838GQpr1QcNBSHo5nKYEfIiVkN1I2H543ZPdUtFLGHZXCDBDGuJvW
oIdeQVB1kyktQw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:20 2025 by rpki-client