Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: GYEjF1YaFxEj4jf0w10d8teclze+vNvaqhHGckk7eLs=
Subject key identifier: F1:BB:E8:B6:66:98:9E:FE:F6:BF:AC:EC:78:66:CE:5B:13:81:1E:33
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 0197B9A1BFF38FD0856688C49A3D4A1CB9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 1102
Signing time: Sun 29 Jun 2025 03:01:14 +0000
Manifest this update: Sun 29 Jun 2025 03:01:14 +0000
Manifest next update: Mon 30 Jun 2025 03:01:14 +0000
Files and hashes: 1: 76krOMMFj4xGzKVVHko6uuDROxo.roa (hash: ceX2KDmhx3x4hNPX/8MXCJQ5KaH4yEnp1JFYHt1MSdY=)
2: F5qz-Vy2ncltsniwS8n2KgCCfq0.roa (hash: kxMCsu4yD7h4P+QzcS37eIb+y0MEuK5iSa4JgSytJ7M=)
3: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: 5clb7h5L86POTKF9vUafCSZ/aALnyE11utOskxyftu0=)
4: StSC9N03azFTttR3EoIav2MRsZc.roa (hash: Cu2Gg7GKVcYUuysW1qolVhXM9Kgp01W96yjaPNDKJxk=)
5: ewZSVtLlMKbZRioDRSGf8H0IaLA.roa (hash: cBUrQBxHZc9doLajihiHlq4PDgUK5KQSHA/948O3rQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:bf:f3:8f:d0:85:66:88:c4:9a:3d:4a:1c:b9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Jun 29 03:01:14 2025 GMT
Not After : Jun 30 03:01:14 2025 GMT
Subject: CN=f1bbe8b666989efef6bfacec7866ce5b13811e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:e0:ba:6a:fc:b2:1f:fb:9f:c9:ab:9a:9c:
f6:11:ec:bf:24:27:49:7b:22:63:da:5f:e3:48:d2:
c2:a1:1c:31:40:14:8c:82:3e:e9:ea:a5:96:4d:00:
13:07:a2:40:b6:b8:84:c6:79:e8:cd:8a:43:ea:54:
89:34:22:4b:30:d8:4b:bf:53:e5:f2:5a:c0:2a:09:
19:ba:cb:b7:98:76:d5:93:28:02:92:9f:14:8a:5b:
7d:b7:d4:b3:b5:8e:c3:78:c4:68:e1:58:6b:a1:95:
2b:82:71:15:7c:83:7f:ae:67:90:d5:ed:36:a2:15:
c9:3d:2e:78:07:de:39:0e:62:41:4b:73:1f:37:34:
25:38:1c:74:a7:ac:b2:52:75:3d:1e:ba:da:5b:77:
51:0c:42:72:65:04:0a:c8:51:e2:3c:e6:0b:45:21:
6f:81:60:3c:44:e8:42:b7:e0:b3:f4:95:44:65:9a:
50:ce:79:ed:4c:cd:58:82:12:9f:cc:ac:9d:53:58:
1e:2b:9f:17:07:e8:44:57:46:f1:17:e8:c2:a0:73:
95:9f:83:f1:d6:77:1a:81:b4:3f:c1:f2:b4:c1:a3:
20:c7:9f:78:f9:62:ab:2f:b6:90:89:3b:d2:17:04:
bf:b9:fc:d0:62:c6:8c:9d:e8:50:7c:38:a9:29:77:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BB:E8:B6:66:98:9E:FE:F6:BF:AC:EC:78:66:CE:5B:13:81:1E:33
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:45:34:44:8e:84:71:c2:f8:86:fd:1a:e0:b6:22:4c:40:d6:
4e:d1:68:1a:2c:d5:88:5d:84:05:6e:b5:a4:56:26:c3:c4:58:
ba:74:36:3f:1a:fb:d5:60:67:38:46:f4:67:74:65:0b:dc:cf:
43:d4:3f:ce:b5:c6:ef:18:9e:73:db:f6:26:f5:61:e9:24:43:
43:4d:89:36:27:7d:f5:31:80:2b:dd:9f:23:b4:d4:30:8a:6a:
28:fe:21:41:21:f2:b8:21:75:94:fa:55:a5:0d:fe:6a:eb:3d:
5d:a6:15:ed:07:6f:9c:a4:5d:3a:fc:97:37:ac:ad:ec:47:88:
18:3a:d5:29:6e:43:2a:69:7f:1c:77:b3:d5:31:f1:2c:90:66:
82:d2:f5:b1:6e:5b:51:de:09:62:09:c3:0a:7a:cc:1d:68:85:
68:4a:80:d8:eb:5a:22:00:a3:0b:10:d7:a8:49:3a:07:bc:8b:
e4:b3:d8:f9:02:a4:12:43:7d:e2:96:5b:68:2e:c3:9d:e7:ee:
d2:f3:4b:9d:44:88:c0:dd:16:bf:54:ed:e7:cb:c6:72:37:e3:
e0:0b:22:1c:62:06:4d:b8:9f:5e:67:50:c9:f1:4e:73:1e:0a:
f9:97:c6:77:e2:57:d1:4c:db:c1:d7:d8:af:a8:21:52:0a:20:
17:d9:d9:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5ob/zj9CFZojEmj1KHLnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxM2UxZDUwZDUyMjg4YmVlODBlZWE0MzU1NzcwMTg3MTI0
MDliYmUwHhcNMjUwNjI5MDMwMTE0WhcNMjUwNjMwMDMwMTE0WjAzMTEwLwYDVQQD
EyhmMWJiZThiNjY2OTg5ZWZlZjZiZmFjZWM3ODY2Y2U1YjEzODExZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQPgumr8sh/7n8mrmpz2Eey/JCdJ
eyJj2l/jSNLCoRwxQBSMgj7p6qWWTQATB6JAtriExnnozYpD6lSJNCJLMNhLv1Pl
8lrAKgkZusu3mHbVkygCkp8Uilt9t9SztY7DeMRo4VhroZUrgnEVfIN/rmeQ1e02
ohXJPS54B945DmJBS3MfNzQlOBx0p6yyUnU9HrraW3dRDEJyZQQKyFHiPOYLRSFv
gWA8ROhCt+Cz9JVEZZpQznntTM1YghKfzKydU1geK58XB+hEV0bxF+jCoHOVn4Px
1ncagbQ/wfK0waMgx594+WKrL7aQiTvSFwS/ufzQYsaMnehQfDipKXfIXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG76LZmmJ7+9r+s7HhmzlsTgR4zMB8GA1UdIwQY
MBaAFCE+HVDVIoi+6A7qQ1V3AYcSQJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYt
MzE2ZWYyNjFmNGE1LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYtMzE2ZWYyNjFmNGE1
LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0U0RI6E
ccL4hv0a4LYiTEDWTtFoGizViF2EBW61pFYmw8RYunQ2Pxr71WBnOEb0Z3RlC9zP
Q9Q/zrXG7xiec9v2JvVh6SRDQ02JNid99TGAK92fI7TUMIpqKP4hQSHyuCF1lPpV
pQ3+aus9XaYV7QdvnKRdOvyXN6yt7EeIGDrVKW5DKml/HHez1THxLJBmgtL1sW5b
Ud4JYgnDCnrMHWiFaEqA2OtaIgCjCxDXqEk6B7yL5LPY+QKkEkN94pZbaC7Dnefu
0vNLnUSIwN0Wv1Tt58vGcjfj4AsiHGIGTbifXmdQyfFOcx4K+ZfGd+JX0UzbwdfY
r6ghUgogF9nZ7Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:30:03 2025 by rpki-client