Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
File: iIFmRjoaMByltuuYvd0H45cJGYY.mft (raw, json)
Hash identifier: 5tLr7U05CB688sgztzVPgo8WXybBb30TU5CzyO/sou4=
Subject key identifier: B2:6E:79:B9:C0:B5:84:F2:B0:B6:F9:A1:AB:0E:78:A4:CE:7A:89:58
Authority key identifier: 88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
Certificate issuer: /CN=888166463a1a301ca5b6eb98bddd07e397091986
Certificate serial: 0197B820E6D6E61E3615D467EA39A2A02722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
Manifest number: 108F
Signing time: Sat 28 Jun 2025 20:00:53 +0000
Manifest this update: Sat 28 Jun 2025 20:00:53 +0000
Manifest next update: Sun 29 Jun 2025 20:00:53 +0000
Files and hashes: 1: iIFmRjoaMByltuuYvd0H45cJGYY.crl (hash: mWlSqm4wy5W7lT7jR+X1YiN4fcB7Fj9mz5PmKbaEhCw=)
2: rw7mvGsBN1ywLg0aU0WOnuWPa30.roa (hash: Kkop8VBeWFXHnSavZNOMJQZHo1FfDtxgbSsG84Nc5jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e6:d6:e6:1e:36:15:d4:67:ea:39:a2:a0:27:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888166463a1a301ca5b6eb98bddd07e397091986
Validity
Not Before: Jun 28 20:00:53 2025 GMT
Not After : Jun 29 20:00:53 2025 GMT
Subject: CN=b26e79b9c0b584f2b0b6f9a1ab0e78a4ce7a8958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:07:69:a2:54:14:4f:98:4d:dd:52:b7:6e:
31:82:b7:7b:3b:ba:fb:dc:ef:cf:cc:1c:1d:25:53:
47:1f:e1:a1:70:7f:dc:71:97:eb:dd:77:66:3b:f8:
2f:85:22:2d:e7:9d:23:96:a9:4e:bb:1b:5b:f4:4b:
17:76:e3:24:28:70:8a:9e:ee:ab:8a:fc:a6:9a:17:
64:29:f0:a8:87:e9:ee:53:c0:e8:76:f3:2f:fb:c3:
43:08:56:83:b3:be:ad:4b:79:78:95:37:14:b2:9e:
d1:89:87:3d:69:14:2e:88:2d:4e:a1:10:02:e7:63:
99:87:89:28:f6:22:29:c0:f9:dd:ca:99:09:4a:ad:
87:2b:fb:d7:88:c2:09:72:ab:3f:76:ee:33:0f:79:
3d:d7:1a:bf:4b:67:8f:2e:c0:8b:97:db:af:58:2c:
f1:e7:0e:fc:08:61:63:bc:4d:7d:bc:96:c6:d5:21:
fc:91:a8:72:07:68:68:14:de:90:be:3c:ae:2a:9d:
51:6f:5c:68:6f:f2:f6:92:57:fc:44:97:60:1b:40:
43:c0:04:09:13:f8:2d:f1:9b:69:53:21:13:21:5a:
30:39:3a:66:80:dd:38:8a:f9:29:02:85:0f:f1:0a:
10:3e:96:3f:2e:9f:1d:5c:fa:ce:a4:66:83:88:10:
eb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6E:79:B9:C0:B5:84:F2:B0:B6:F9:A1:AB:0E:78:A4:CE:7A:89:58
X509v3 Authority Key Identifier:
keyid:88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:20:2c:40:da:b3:8f:6d:4d:bc:6f:80:3f:78:8c:b3:ce:db:
ff:38:07:b5:9a:44:6f:f8:d9:0e:e5:d7:1f:18:0d:72:1a:1a:
5e:90:b1:f8:96:9b:aa:cc:b1:53:24:d9:73:91:16:de:94:6b:
b3:3a:cc:6c:fe:f3:47:bc:9a:d0:e8:e5:e0:1b:01:79:81:0d:
95:71:3f:9d:77:70:c5:6d:64:d5:6c:cf:79:28:1e:7f:fb:8e:
e1:5a:0b:19:6f:b5:cc:25:11:b6:41:06:a0:0a:4d:8d:a3:e3:
86:8b:7b:ff:3f:88:3b:f5:a1:d3:0d:ba:d8:e0:f7:37:e1:f1:
2d:e9:0e:1d:a0:b5:5a:bb:bf:58:74:78:53:59:23:62:68:f1:
42:49:6b:1f:8c:e6:ef:e0:d6:48:b0:eb:8b:bd:e5:0e:a8:57:
5f:0f:b9:96:f2:fd:bb:ef:c5:14:0f:2a:3f:2e:ee:07:4f:56:
38:2d:95:ca:0f:78:37:5d:af:ef:1f:8b:f3:1f:50:70:1f:2f:
a1:78:87:45:d4:e2:13:fe:b5:8b:a0:57:37:c9:20:d4:46:33:
a1:61:2a:7b:81:9e:21:ff:58:45:e2:73:c6:37:75:88:0d:b0:
26:d2:6b:5a:9a:95:bd:cc:0a:19:03:96:fe:31:f7:80:7d:b9:
e4:6d:1e:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IObW5h42FdRn6jmioCciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ODE2NjQ2M2ExYTMwMWNhNWI2ZWI5OGJkZGQwN2UzOTcw
OTE5ODYwHhcNMjUwNjI4MjAwMDUzWhcNMjUwNjI5MjAwMDUzWjAzMTEwLwYDVQQD
EyhiMjZlNzliOWMwYjU4NGYyYjBiNmY5YTFhYjBlNzhhNGNlN2E4OTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYcHaaJUFE+YTd1St24xgrd7O7r7
3O/PzBwdJVNHH+GhcH/ccZfr3XdmO/gvhSIt550jlqlOuxtb9EsXduMkKHCKnu6r
ivymmhdkKfCoh+nuU8DodvMv+8NDCFaDs76tS3l4lTcUsp7RiYc9aRQuiC1OoRAC
52OZh4ko9iIpwPndypkJSq2HK/vXiMIJcqs/du4zD3k91xq/S2ePLsCLl9uvWCzx
5w78CGFjvE19vJbG1SH8kahyB2hoFN6QvjyuKp1Rb1xob/L2klf8RJdgG0BDwAQJ
E/gt8ZtpUyETIVowOTpmgN04ivkpAoUP8QoQPpY/Lp8dXPrOpGaDiBDrlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJuebnAtYTysLb5oasOeKTOeolYMB8GA1UdIwQY
MBaAFIiBZkY6GjAcpbbrmL3dB+OXCRmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80NzZmZDAtYjhhNi00NjFmLWI0YzUt
MzhjMmMyYTc5YzM1LzEvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80NzZmZDAtYjhhNi00NjFmLWI0YzUtMzhjMmMyYTc5YzM1
LzEvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSAsQNqz
j21NvG+AP3iMs87b/zgHtZpEb/jZDuXXHxgNchoaXpCx+JabqsyxUyTZc5EW3pRr
szrMbP7zR7ya0Ojl4BsBeYENlXE/nXdwxW1k1WzPeSgef/uO4VoLGW+1zCURtkEG
oApNjaPjhot7/z+IO/Wh0w262OD3N+HxLekOHaC1Wru/WHR4U1kjYmjxQklrH4zm
7+DWSLDri73lDqhXXw+5lvL9u+/FFA8qPy7uB09WOC2Vyg94N12v7x+L8x9QcB8v
oXiHRdTiE/61i6BXN8kg1EYzoWEqe4GeIf9YReJzxjd1iA2wJtJrWpqVvcwKGQOW
/jH3gH255G0egg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:51 2025 by rpki-client