Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier: w66K3DYu7YJfM5+EfG4Ehk0tD5+zGU0vYxND/H5qD6I=
Subject key identifier: 74:DD:BA:EA:16:7F:B0:7F:DD:35:BD:10:A0:BC:00:EB:9F:0F:5D:1E
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 0196AF8DD6C35E9680B1FE26970B3040A3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number: 152B
Signing time: Thu 08 May 2025 11:00:30 +0000
Manifest this update: Thu 08 May 2025 11:00:30 +0000
Manifest next update: Fri 09 May 2025 11:00:30 +0000
Files and hashes: 1: C3a8w3EA0yZf6c0xKrOAJTxFR18.roa (hash: LNpEHJw7nSfysWTvnjy399UaYBj+VVtM2qrA/gSp1Ss=)
2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: 0E528h01Rwr45DwOqDumChwCzQiwvHT9gnHbRSYZqXA=)
3: ODeZnWNl5WX6QJG7docdS6N0Lh0.roa (hash: /UPoSxqJgEbJd9A+t+po1hpjOf0Zwwvb5Sbep9uGpqM=)
4: sWPuB2_JaQ5IbfWV6TRjwzAEtmo.roa (hash: 2MwXerlOGNKciqFr23+HmocPZA4iLoGvibtwd5TaAxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:8d:d6:c3:5e:96:80:b1:fe:26:97:0b:30:40:a3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: May 8 11:00:30 2025 GMT
Not After : May 9 11:00:30 2025 GMT
Subject: CN=74ddbaea167fb07fdd35bd10a0bc00eb9f0f5d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:51:06:56:1f:fc:6d:13:54:bd:73:89:75:
36:54:40:56:65:33:47:bd:93:f9:70:5a:85:39:4f:
93:89:43:6f:61:55:8d:cb:e1:e7:54:18:8d:6f:90:
10:04:77:ff:8e:6c:74:bc:c6:70:a5:f8:f8:56:2a:
5e:18:ab:41:e8:b0:51:9e:1f:ab:9a:c5:cf:a6:6f:
8a:d1:28:cd:64:4a:a1:32:35:51:32:00:ca:1d:29:
aa:bc:db:81:34:2d:45:83:94:ee:f3:75:b9:b9:b9:
e9:50:e8:1b:bf:dd:e1:95:6a:e3:2c:fb:7b:bb:15:
35:08:f9:f9:e4:29:65:38:61:a9:99:6d:b7:be:a4:
31:28:6a:e9:d1:f3:e8:e7:29:0a:56:5e:08:5d:da:
76:aa:b2:ec:2f:06:f8:d4:de:29:1a:55:04:fa:cb:
6a:7c:ce:1c:dd:a2:be:c9:b7:97:68:29:e2:11:d9:
ef:15:2e:a0:32:d7:d1:fe:d8:a6:b4:f9:d7:67:ac:
a5:ee:1e:86:cf:66:b8:96:1b:d5:74:eb:cb:4c:62:
cd:68:b5:e7:41:0e:1b:89:de:c3:70:31:86:95:62:
e3:84:3f:e2:7a:a0:f8:1b:db:30:e2:41:ee:b4:63:
cf:30:3f:25:df:b3:62:97:22:a5:8a:f0:50:5f:4e:
87:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DD:BA:EA:16:7F:B0:7F:DD:35:BD:10:A0:BC:00:EB:9F:0F:5D:1E
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:11:95:9b:4e:ef:e5:79:13:b5:0a:0d:c0:a1:8e:2e:85:18:
e3:4f:40:92:ce:df:71:c7:12:48:2a:f0:6f:53:2c:ca:75:73:
2a:d9:1d:bd:81:27:5f:0d:ba:ff:a4:88:35:0e:9f:f8:ba:bf:
8c:d0:33:4f:a1:b5:87:71:8f:45:fc:e6:e5:e5:bf:56:b6:5f:
d8:7e:7b:50:92:a4:2c:5e:43:b3:a0:1d:e1:b2:9b:8b:83:7e:
2d:b2:b5:fd:ef:53:b6:6f:79:ce:7d:7e:22:cf:a7:3c:77:8c:
ac:59:3f:e0:a8:51:64:12:29:12:c5:a9:21:f0:94:fe:7f:78:
56:a9:a6:7a:07:90:2a:9a:73:31:2f:0d:39:eb:95:0e:39:32:
14:67:6e:17:da:5b:22:29:45:36:3b:58:7a:1a:4c:a1:98:59:
2b:48:af:2b:1c:d6:e5:1b:2c:a4:1d:a3:12:24:07:77:1e:eb:
ae:85:17:2e:e3:30:b6:03:51:db:2e:c3:e3:d3:70:f9:85:36:
fa:f0:ab:f3:71:3f:c4:a5:f6:99:8e:3b:51:1a:14:8f:04:f2:
86:04:12:6d:a3:83:94:e4:7b:ce:b6:09:4d:d5:cc:36:20:14:
af:1b:d9:dd:de:96:33:04:57:92:21:78:e4:f3:2a:66:ca:dc:
15:b0:f8:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavjdbDXpaAsf4mlwswQKO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNjYyYzlhOTgwYWQ3NTg0NjUwYWJhYTM1NDViOWVhOTFk
M2UzNWUwHhcNMjUwNTA4MTEwMDMwWhcNMjUwNTA5MTEwMDMwWjAzMTEwLwYDVQQD
Eyg3NGRkYmFlYTE2N2ZiMDdmZGQzNWJkMTBhMGJjMDBlYjlmMGY1ZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaxRBlYf/G0TVL1ziXU2VEBWZTNH
vZP5cFqFOU+TiUNvYVWNy+HnVBiNb5AQBHf/jmx0vMZwpfj4VipeGKtB6LBRnh+r
msXPpm+K0SjNZEqhMjVRMgDKHSmqvNuBNC1Fg5Tu83W5ubnpUOgbv93hlWrjLPt7
uxU1CPn55CllOGGpmW23vqQxKGrp0fPo5ykKVl4IXdp2qrLsLwb41N4pGlUE+stq
fM4c3aK+ybeXaCniEdnvFS6gMtfR/timtPnXZ6yl7h6Gz2a4lhvVdOvLTGLNaLXn
QQ4bid7DcDGGlWLjhD/ieqD4G9sw4kHutGPPMD8l37NilyKlivBQX06H6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTduuoWf7B/3TW9EKC8AOufD10eMB8GA1UdIwQY
MBaAFCNmLJqYCtdYRlCrqjVFueqR0+NeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEt
ODIzMmUzNTBkNDU4LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wMTc1ZTYtNDI3Yi00ZWY5LThlYjEtODIzMmUzNTBkNDU4
LzEvSTJZc21wZ0sxMWhHVUt1cU5VVzU2cEhUNDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsRGVm07v
5XkTtQoNwKGOLoUY409Aks7fcccSSCrwb1MsynVzKtkdvYEnXw26/6SINQ6f+Lq/
jNAzT6G1h3GPRfzm5eW/VrZf2H57UJKkLF5Ds6Ad4bKbi4N+LbK1/e9Ttm95zn1+
Is+nPHeMrFk/4KhRZBIpEsWpIfCU/n94VqmmegeQKppzMS8NOeuVDjkyFGduF9pb
IilFNjtYehpMoZhZK0ivKxzW5RsspB2jEiQHdx7rroUXLuMwtgNR2y7D49Nw+YU2
+vCr83E/xKX2mY47URoUjwTyhgQSbaODlOR7zrYJTdXMNiAUrxvZ3d6WMwRXkiF4
5PMqZsrcFbD4hw==
-----END CERTIFICATE-----
Generated at Thu May 8 16:02:08 2025 by rpki-client