Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
File: I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json)
Hash identifier: NaRxNuUjeqtfaDIuqeI5uRDTrPZn2olP4ER99lEcseM=
Subject key identifier: 44:88:FA:F4:FA:F5:E9:2C:7F:62:6F:53:03:14:E9:37:EE:44:71:83
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 0197B6A1469B9B4D07A07C79FD6A87041216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:01:52 +0000
Manifest this update: Sat 28 Jun 2025 13:01:52 +0000
Manifest next update: Sun 29 Jun 2025 13:01:52 +0000
Files and hashes: 1: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: SPX4+pqiRDKRFmrcVpjgb2Vno8Tel/3MnXeOuGI6Mk8=)
2: lw90sey6Y2XkP3Sip6ebzWQtTKU.roa (hash: IdqbojAlXr4XwjmKtJYEU/2zd7cvDplQCfLZ9IO+/d0=)
3: uBZl19XYTdc5SBXaRHXvV0GGF98.roa (hash: 1Ti03xYR3EsLOQdndtqiFtUtuVxyXY66yoLYTtqG1ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:46:9b:9b:4d:07:a0:7c:79:fd:6a:87:04:12:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Jun 28 13:01:52 2025 GMT
Not After : Jun 29 13:01:52 2025 GMT
Subject: CN=4488faf4faf5e92c7f626f530314e937ee447183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:8f:43:9c:eb:5a:ad:d4:2c:8a:a6:aa:dd:
bb:37:83:7a:c9:9b:e6:9d:2e:c3:f5:92:21:9f:a3:
1b:33:cc:de:7c:ef:9b:37:c8:6e:e6:06:88:d9:74:
71:6b:29:fc:64:83:0d:66:9f:60:71:77:98:c2:99:
c0:e3:d9:21:68:df:39:da:96:61:99:9a:e7:53:2b:
aa:6f:21:b7:bb:be:d4:a3:6a:b0:97:09:76:5a:7f:
d1:18:11:05:b0:48:3f:c9:02:f4:88:7c:35:cf:b0:
1a:f4:98:07:be:9b:2c:d2:54:c6:5c:e9:60:96:de:
a9:20:40:6b:16:de:c1:7a:2b:c5:96:f3:49:f3:8a:
1c:4b:75:d5:7a:78:3c:e2:32:26:21:93:d0:bd:a5:
22:97:fa:2d:76:6b:cb:45:6a:16:c6:51:94:62:a9:
73:66:ee:ee:3f:b1:f1:05:d5:bc:78:11:1f:65:5a:
08:64:87:ca:27:b3:4e:f4:5d:65:37:98:78:eb:01:
b9:38:2c:53:df:7c:0c:c6:91:20:66:dd:ef:c3:e4:
30:8f:cd:f8:6c:c4:84:54:4d:40:38:86:e2:d1:b2:
67:83:b1:bc:f2:0c:b1:c6:3a:69:90:08:30:5c:c6:
58:38:4a:30:7e:ae:a5:fa:77:0a:a8:c4:20:82:81:
b5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:88:FA:F4:FA:F5:E9:2C:7F:62:6F:53:03:14:E9:37:EE:44:71:83
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a0:04:7e:3e:60:be:28:1e:5e:03:85:65:2e:2a:1a:ec:fa:
6d:f3:8e:ab:b8:aa:55:f0:56:a7:cd:60:bc:b6:7a:47:93:a3:
56:d8:8f:d3:ec:59:51:46:c0:e7:7c:d1:54:f0:62:1f:ca:40:
50:de:d2:2e:9e:68:5d:95:73:67:96:c8:da:2f:bc:7c:b0:d3:
e7:b6:49:1f:5a:26:04:f7:c2:f1:88:23:cc:fb:fd:65:8f:fe:
7b:e3:ae:dd:ab:75:dc:10:0c:23:9f:00:68:c9:60:86:6f:f4:
72:c9:0d:6d:59:d7:0a:23:e7:9a:a5:f3:f3:87:17:f5:3d:24:
87:66:7e:f5:b8:77:2a:f9:d9:d5:78:0b:e7:56:18:bf:bb:92:
ed:3c:17:fc:58:b0:37:ba:da:76:d7:22:10:4d:fa:71:6e:9e:
f9:62:33:32:69:1a:be:62:46:63:62:af:eb:2a:ef:d0:ac:20:
18:c5:4f:68:fd:5f:60:92:98:98:6b:58:a8:c9:24:0f:b0:41:
37:a5:e2:51:81:d0:4b:75:1a:0c:56:39:3c:32:0a:2f:6c:71:
ce:37:cf:1c:7f:ef:90:95:a0:5d:25:62:d9:be:bc:5e:b1:4e:
27:26:26:f5:41:c1:9f:87:90:7d:3c:82:34:e7:d0:1c:27:0f:
6a:ce:44:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oUabm00HoHx5/WqHBBIWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzOWM0NWU0MzYyNTUyMjA4MGFlYzUzOTUyOTg5YTEzYTI4
YWJkMDAwHhcNMjUwNjI4MTMwMTUyWhcNMjUwNjI5MTMwMTUyWjAzMTEwLwYDVQQD
Eyg0NDg4ZmFmNGZhZjVlOTJjN2Y2MjZmNTMwMzE0ZTkzN2VlNDQ3MTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXGPQ5zrWq3ULIqmqt27N4N6yZvm
nS7D9ZIhn6MbM8zefO+bN8hu5gaI2XRxayn8ZIMNZp9gcXeYwpnA49khaN852pZh
mZrnUyuqbyG3u77Uo2qwlwl2Wn/RGBEFsEg/yQL0iHw1z7Aa9JgHvpss0lTGXOlg
lt6pIEBrFt7BeivFlvNJ84ocS3XVeng84jImIZPQvaUil/otdmvLRWoWxlGUYqlz
Zu7uP7HxBdW8eBEfZVoIZIfKJ7NO9F1lN5h46wG5OCxT33wMxpEgZt3vw+Qwj834
bMSEVE1AOIbi0bJng7G88gyxxjppkAgwXMZYOEowfq6l+ncKqMQggoG1CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESI+vT69eksf2JvUwMU6TfuRHGDMB8GA1UdIwQY
MBaAFCOcReQ2JVIggK7FOVKYmhOiir0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2Njgt
OTc1YTIzN2VjZDA2LzEvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2NjgtOTc1YTIzN2VjZDA2
LzEvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqAEfj5g
vigeXgOFZS4qGuz6bfOOq7iqVfBWp81gvLZ6R5OjVtiP0+xZUUbA53zRVPBiH8pA
UN7SLp5oXZVzZ5bI2i+8fLDT57ZJH1omBPfC8YgjzPv9ZY/+e+Ou3at13BAMI58A
aMlghm/0cskNbVnXCiPnmqXz84cX9T0kh2Z+9bh3KvnZ1XgL51YYv7uS7TwX/Fiw
N7radtciEE36cW6e+WIzMmkavmJGY2Kv6yrv0KwgGMVPaP1fYJKYmGtYqMkkD7BB
N6XiUYHQS3UaDFY5PDIKL2xxzjfPHH/vkJWgXSVi2b68XrFOJyYm9UHBn4eQfTyC
NOfQHCcPas5EOw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:06 2025 by rpki-client