Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
File: iy4NGE_1UzdchHw41N_NzeEhn9M.mft (raw, json)
Hash identifier: etTT88Zca0kJpGnqYBEMKor8e4qQOiNHEVwGr+rNY2Y=
Subject key identifier: 2C:2F:15:77:3B:19:4E:8D:8C:3D:FA:D0:09:CF:ED:79:5D:94:E7:4C
Authority key identifier: 8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
Certificate issuer: /CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Certificate serial: 0197B6A0C04BA44C24380290B74B7B6F0631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
Manifest number: 0FA3
Signing time: Sat 28 Jun 2025 13:01:17 +0000
Manifest this update: Sat 28 Jun 2025 13:01:17 +0000
Manifest next update: Sun 29 Jun 2025 13:01:17 +0000
Files and hashes: 1: QhkZtHC-GArPwLlJouzdeKz4vt4.roa (hash: rYjbbMwu5klxqw8Z2ve99sKM+e3vXg5MSUYMGvpUeAw=)
2: ek-bgKo0V51DyYfh9FUoM-CKgO8.roa (hash: aPF/FaJvXVYEUFEnZVNFtJQGYrjiMzQAcdLekCScrys=)
3: iy4NGE_1UzdchHw41N_NzeEhn9M.crl (hash: /MhZBuwhPfQnpwMg/EnELr3pKLiIcYuyldn1KAS7bkA=)
4: jjb9-8iXZGVpIaiYLG1b0CgDmDQ.roa (hash: aXW8Frrn0CPPaBr+F5uNOjUESeabRZzpMHqeAGAbYRY=)
5: tyr7YT-XlbKvyQI5Aiw1lqcEPZ0.roa (hash: A8rtdyJ9paAEirlby1av+cQ7baYrwbelcvz/vsvt2z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c0:4b:a4:4c:24:38:02:90:b7:4b:7b:6f:06:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Validity
Not Before: Jun 28 13:01:17 2025 GMT
Not After : Jun 29 13:01:17 2025 GMT
Subject: CN=2c2f15773b194e8d8c3dfad009cfed795d94e74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:dd:a7:88:80:56:5f:0c:e9:39:df:b5:23:
57:01:6d:95:0f:f6:1b:91:ac:a3:f4:46:e5:37:fe:
8a:11:b7:ea:bc:4d:8b:c3:11:6b:c8:ee:36:21:45:
da:54:3a:82:d9:e3:83:e6:6c:c2:36:10:0f:61:67:
85:36:79:86:cf:71:ae:65:94:d2:d9:54:5a:8b:82:
91:a2:78:b1:fe:2a:e2:e3:a9:e1:38:9f:61:d5:ac:
7d:ba:9a:a1:e5:43:95:87:1b:e4:90:19:ff:e3:1c:
f2:e2:47:62:fd:84:12:97:f3:b6:24:93:eb:74:72:
1a:72:3b:99:36:ea:82:ba:53:5d:bb:80:6b:3e:23:
43:98:d4:9d:35:ad:63:12:3c:48:c8:ec:8c:38:a1:
bf:05:e6:0a:28:bc:e9:3b:93:5d:8c:73:15:1e:7a:
9e:a4:3d:c9:7f:f4:fb:8d:88:ae:af:ac:6e:47:94:
2c:24:93:50:4d:d2:56:04:ce:ad:26:de:6a:95:6c:
61:28:6b:60:07:cd:3f:44:2b:50:13:15:3d:46:e9:
f7:c8:8b:77:7a:d1:e9:07:21:bf:fb:7f:96:61:8b:
8d:17:f8:a8:cc:cb:9a:57:da:23:12:9f:0f:bd:83:
c6:4f:59:9a:8b:54:dc:00:89:ed:51:57:66:f5:ef:
c6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2F:15:77:3B:19:4E:8D:8C:3D:FA:D0:09:CF:ED:79:5D:94:E7:4C
X509v3 Authority Key Identifier:
keyid:8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1f:12:7b:15:f7:e3:61:03:89:8b:c8:35:18:e9:3d:11:96:
e1:c1:c2:c4:b3:6b:f0:d3:75:ed:c0:87:01:74:1d:74:47:bf:
37:ef:ce:6a:e5:32:36:a8:97:8e:21:f4:2e:a6:a9:a6:a0:76:
b4:73:fc:3c:28:9e:5b:5f:8e:62:81:c3:4a:a4:4b:b3:12:51:
ed:14:6f:65:51:80:85:09:1f:db:d5:8a:ac:5c:98:73:8a:60:
5f:34:6e:ee:12:81:f7:8f:6b:97:35:c6:40:54:d9:e7:9c:31:
f9:d1:25:aa:5f:fc:3b:18:9a:14:7b:1d:fc:80:bc:81:23:6f:
ec:54:19:ef:a5:95:af:68:ef:95:02:a0:ad:fc:9a:c0:a5:43:
e6:e8:a1:04:79:9b:e5:96:ff:3a:e0:a8:75:cd:61:e6:8e:59:
c4:bb:d1:bc:6e:3f:8f:57:33:47:d2:b7:8e:03:0c:8d:82:78:
b0:bf:24:1b:3c:1d:d3:44:db:93:05:73:2f:6a:61:fd:fd:12:
8a:fa:1d:72:74:c5:92:21:e8:b7:7f:25:fb:5f:e9:c6:fc:8d:
11:2b:6c:2b:17:a9:15:d0:f6:3a:be:2d:53:e5:2b:ee:15:98:
38:1f:07:bb:f6:fb:aa:9e:d3:9a:7a:99:5a:bc:62:30:a6:ff:
34:ea:7d:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oMBLpEwkOAKQt0t7bwYxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMmUwZDE4NGZmNTUzMzc1Yzg0N2MzOGQ0ZGZjZGNkZTEy
MTlmZDMwHhcNMjUwNjI4MTMwMTE3WhcNMjUwNjI5MTMwMTE3WjAzMTEwLwYDVQQD
EygyYzJmMTU3NzNiMTk0ZThkOGMzZGZhZDAwOWNmZWQ3OTVkOTRlNzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKrdp4iAVl8M6TnftSNXAW2VD/Yb
kayj9EblN/6KEbfqvE2LwxFryO42IUXaVDqC2eOD5mzCNhAPYWeFNnmGz3GuZZTS
2VRai4KRonix/iri46nhOJ9h1ax9upqh5UOVhxvkkBn/4xzy4kdi/YQSl/O2JJPr
dHIacjuZNuqCulNdu4BrPiNDmNSdNa1jEjxIyOyMOKG/BeYKKLzpO5NdjHMVHnqe
pD3Jf/T7jYiur6xuR5QsJJNQTdJWBM6tJt5qlWxhKGtgB80/RCtQExU9Run3yIt3
etHpByG/+3+WYYuNF/iozMuaV9ojEp8PvYPGT1mai1TcAIntUVdm9e/GUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwvFXc7GU6NjD360AnP7XldlOdMMB8GA1UdIwQY
MBaAFIsuDRhP9VM3XIR8ONTfzc3hIZ/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXk0TkdFXzFVemRjaEh3NDFOX056ZUVobjlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wZmNkOGUtMTAzNC00YTc1LWEwNzAt
Njk5ZjNjZDg1MGZhLzEvaXk0TkdFXzFVemRjaEh3NDFOX056ZUVobjlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8wZmNkOGUtMTAzNC00YTc1LWEwNzAtNjk5ZjNjZDg1MGZh
LzEvaXk0TkdFXzFVemRjaEh3NDFOX056ZUVobjlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXB8SexX3
42EDiYvINRjpPRGW4cHCxLNr8NN17cCHAXQddEe/N+/OauUyNqiXjiH0LqappqB2
tHP8PCieW1+OYoHDSqRLsxJR7RRvZVGAhQkf29WKrFyYc4pgXzRu7hKB949rlzXG
QFTZ55wx+dElql/8OxiaFHsd/IC8gSNv7FQZ76WVr2jvlQKgrfyawKVD5uihBHmb
5Zb/OuCodc1h5o5ZxLvRvG4/j1czR9K3jgMMjYJ4sL8kGzwd00TbkwVzL2ph/f0S
ivodcnTFkiHot38l+1/pxvyNEStsKxepFdD2Or4tU+Ur7hWYOB8Hu/b7qp7TmnqZ
WrxiMKb/NOp9YA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:32 2025 by rpki-client