Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
File: iwjmq-L-QyImUc6Z780Sr2DmT1s.mft (raw, json)
Hash identifier: bCbXPMHcA9WAlZ0rSbhq1AD7eOk9KJzv9nmYTT5vN8g=
Subject key identifier: 9D:7B:C1:48:1B:CE:33:E5:F3:39:FD:20:25:9C:AA:EE:E1:E3:B9:4A
Authority key identifier: 8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
Certificate issuer: /CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Certificate serial: 0196C916915FA416044DC8E72EA2A68648AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
Manifest number: 0527
Signing time: Tue 13 May 2025 10:00:21 +0000
Manifest this update: Tue 13 May 2025 10:00:21 +0000
Manifest next update: Wed 14 May 2025 10:00:21 +0000
Files and hashes: 1: iwjmq-L-QyImUc6Z780Sr2DmT1s.crl (hash: WHj3rIS9mHekbl2HnyupwdhzS2WrKUPvzdrUKdVHYdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:91:5f:a4:16:04:4d:c8:e7:2e:a2:a6:86:48:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Validity
Not Before: May 13 10:00:21 2025 GMT
Not After : May 14 10:00:21 2025 GMT
Subject: CN=9d7bc1481bce33e5f339fd20259caaeee1e3b94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:09:5d:f4:38:e7:83:71:cf:8c:36:bf:68:
cf:4b:0d:d1:6c:6b:4b:ae:ed:74:dc:b5:87:7c:0a:
46:fc:f3:cd:a8:4e:98:b8:22:09:7f:30:54:f9:76:
d8:aa:12:32:c4:07:e8:8d:c1:63:7c:fa:e9:3b:92:
da:7d:cb:87:cc:42:4b:99:72:df:91:60:17:68:fa:
bf:4a:d5:af:2d:41:aa:46:0b:af:89:b5:1b:fa:1d:
d1:6a:a6:b8:06:b8:9b:e7:dc:9c:bc:2e:1e:7d:2b:
8c:3b:1a:00:38:b9:de:ca:5b:25:9e:74:76:4f:3f:
99:82:bd:0d:3e:a5:19:96:a7:01:f6:56:6d:fa:d8:
4c:f6:c7:95:7c:b7:d5:e0:75:0d:3c:ff:bf:ff:bf:
02:ae:00:ea:3a:f6:95:b2:fe:b5:09:4b:3c:80:21:
2c:9e:78:3c:8b:2b:c3:e1:ad:0b:91:bb:c8:8d:e3:
23:b4:53:48:98:61:dd:8b:c6:c3:e7:83:96:cb:eb:
7f:30:36:97:d5:c9:bf:49:ae:36:dc:13:7b:1e:7e:
77:07:f9:32:fd:cc:cd:7c:4c:a7:65:c6:cb:a4:f6:
e4:c1:60:94:12:55:de:9c:a1:87:90:50:08:e1:c9:
dc:a3:26:1e:eb:63:83:06:ac:78:e2:70:e3:1e:74:
c6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7B:C1:48:1B:CE:33:E5:F3:39:FD:20:25:9C:AA:EE:E1:E3:B9:4A
X509v3 Authority Key Identifier:
keyid:8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ee:9b:6f:90:bd:7b:6f:12:e6:f8:49:e4:bf:e3:92:cd:44:
c3:a9:68:46:03:0c:59:b3:70:b0:86:de:0d:4c:98:75:71:ae:
77:00:cf:3b:d1:97:05:54:16:7a:d5:1a:0e:56:00:92:f4:3b:
9b:e0:a7:a5:3d:ce:55:1b:71:72:48:f2:0c:2d:0c:cb:10:00:
e3:24:11:c2:b6:55:d5:e5:3e:12:58:90:43:48:46:d8:02:99:
c0:f3:96:9a:39:cf:ce:48:23:7f:cf:b9:a7:5f:df:06:c2:e5:
53:e6:85:1f:1f:b5:bc:98:12:a2:c3:f5:44:00:b8:18:fa:8a:
9e:d0:e1:5d:90:ff:cb:f1:db:5c:6f:f1:45:76:37:8d:71:63:
c1:fa:e8:82:b0:03:d7:8b:2a:e4:14:00:a3:a1:f6:88:2a:4c:
c0:c7:d8:36:67:19:d6:0d:84:6a:76:e5:eb:38:c0:1c:90:5b:
4d:e7:68:e9:e3:7d:e2:ab:7e:72:20:e7:28:01:89:bd:99:d8:
ec:20:52:11:53:3d:b7:8b:e5:7f:d8:dd:40:e7:4b:a6:ce:b6:
a5:23:9c:97:85:c9:2a:7b:b4:00:34:92:9c:9a:1d:67:ea:66:
5e:59:09:c1:7a:6b:d8:a9:71:99:30:ff:a2:8f:7a:b9:a9:07:
27:05:41:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJFpFfpBYETcjnLqKmhkisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMDhlNmFiZTJmZTQzMjIyNjUxY2U5OWVmY2QxMmFmNjBl
NjRmNWIwHhcNMjUwNTEzMTAwMDIxWhcNMjUwNTE0MTAwMDIxWjAzMTEwLwYDVQQD
Eyg5ZDdiYzE0ODFiY2UzM2U1ZjMzOWZkMjAyNTljYWFlZWUxZTNiOTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTwJXfQ454Nxz4w2v2jPSw3RbGtL
ru103LWHfApG/PPNqE6YuCIJfzBU+XbYqhIyxAfojcFjfPrpO5LafcuHzEJLmXLf
kWAXaPq/StWvLUGqRguvibUb+h3Raqa4Brib59ycvC4efSuMOxoAOLneylslnnR2
Tz+Zgr0NPqUZlqcB9lZt+thM9seVfLfV4HUNPP+//78CrgDqOvaVsv61CUs8gCEs
nng8iyvD4a0LkbvIjeMjtFNImGHdi8bD54OWy+t/MDaX1cm/Sa423BN7Hn53B/ky
/czNfEynZcbLpPbkwWCUElXenKGHkFAI4cncoyYe62ODBqx44nDjHnTG7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ17wUgbzjPl8zn9ICWcqu7h47lKMB8GA1UdIwQY
MBaAFIsI5qvi/kMiJlHOme/NEq9g5k9bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXdqbXEtTC1ReUltVWM2Wjc4MFNyMkRtVDFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82NzU2YTQtNDBkZS00MmQ1LWI0NzQt
Y2I2YjgwYzllM2Y4LzEvaXdqbXEtTC1ReUltVWM2Wjc4MFNyMkRtVDFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS82NzU2YTQtNDBkZS00MmQ1LWI0NzQtY2I2YjgwYzllM2Y4
LzEvaXdqbXEtTC1ReUltVWM2Wjc4MFNyMkRtVDFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARe6bb5C9
e28S5vhJ5L/jks1Ew6loRgMMWbNwsIbeDUyYdXGudwDPO9GXBVQWetUaDlYAkvQ7
m+CnpT3OVRtxckjyDC0MyxAA4yQRwrZV1eU+EliQQ0hG2AKZwPOWmjnPzkgjf8+5
p1/fBsLlU+aFHx+1vJgSosP1RAC4GPqKntDhXZD/y/HbXG/xRXY3jXFjwfrogrAD
14sq5BQAo6H2iCpMwMfYNmcZ1g2Eanbl6zjAHJBbTedo6eN94qt+ciDnKAGJvZnY
7CBSEVM9t4vlf9jdQOdLps62pSOcl4XJKnu0ADSSnJodZ+pmXlkJwXpr2KlxmTD/
oo96uakHJwVBDA==
-----END CERTIFICATE-----
Generated at Tue May 13 20:52:45 2025 by rpki-client