Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft
File: Ivlg_e70BzVat4Nty2uQJvRCk-o.mft (raw, json)
Hash identifier: h30a2KTF9mhpxA7vpoqZya3wJgO+H+SVPyaC23SIu7A=
Subject key identifier: 0C:97:3C:CC:93:AC:5D:C9:19:FA:8E:54:F1:F8:A5:57:D8:32:9D:62
Authority key identifier: 22:F9:60:FD:EE:F4:07:35:5A:B7:83:6D:CB:6B:90:26:F4:42:93:EA
Certificate issuer: /CN=22f960fdeef407355ab7836dcb6b9026f44293ea
Certificate serial: 0197B9D8BE146F505D4CF765C284CAB9284A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ivlg_e70BzVat4Nty2uQJvRCk-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft
Manifest number: 091F
Signing time: Sun 29 Jun 2025 04:01:18 +0000
Manifest this update: Sun 29 Jun 2025 04:01:18 +0000
Manifest next update: Mon 30 Jun 2025 04:01:18 +0000
Files and hashes: 1: 294sEvFCPZcpapErUdpT5vNPLKY.roa (hash: K9zx63RQ0E6LnQ5ZYnogejedGoy5yi5fVZmpZbGiuTU=)
2: Ivlg_e70BzVat4Nty2uQJvRCk-o.crl (hash: CLkQVOL9LVuFg7D1O0xEgqRZdKCF1urkOTMXSEhlWCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ivlg_e70BzVat4Nty2uQJvRCk-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:be:14:6f:50:5d:4c:f7:65:c2:84:ca:b9:28:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f960fdeef407355ab7836dcb6b9026f44293ea
Validity
Not Before: Jun 29 04:01:18 2025 GMT
Not After : Jun 30 04:01:18 2025 GMT
Subject: CN=0c973ccc93ac5dc919fa8e54f1f8a557d8329d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:76:c1:bc:90:e6:e3:8c:c9:5e:ce:d8:97:
f2:59:dd:b7:df:62:3c:c0:6c:f7:1e:f2:e0:a0:03:
da:b7:47:94:e9:08:ba:b8:e4:f8:29:1d:82:f0:24:
7c:c9:ec:18:df:2b:b4:6a:b2:0d:84:2e:35:d4:54:
fc:0b:12:d2:c8:ac:18:0b:17:0a:76:47:8f:4e:43:
cf:60:97:0c:00:b2:bf:46:d7:7b:66:77:6f:99:ce:
13:ac:04:1d:95:66:07:01:74:38:22:b1:f3:eb:b0:
1d:51:bc:89:21:5f:5e:b3:97:57:19:c8:22:6b:5d:
e2:42:74:69:8d:a3:a5:ba:6f:55:e6:67:5e:17:1b:
62:ae:8c:ea:42:da:a8:e6:8f:f1:f4:a4:b3:35:bf:
8d:9a:f2:80:be:05:cc:0e:6d:ce:68:5b:57:c8:a0:
35:99:9c:41:58:f2:29:ef:21:4c:8e:45:38:27:4f:
af:6d:b4:55:16:13:d9:08:88:15:1e:4f:ac:5e:09:
f2:05:c5:25:3a:c9:f6:7c:89:1c:3a:73:0d:e5:fc:
26:e2:67:38:a8:b8:8f:77:22:fc:28:82:1b:f6:1e:
f5:c7:28:84:96:c1:d1:14:1d:f2:46:8f:06:a3:19:
3a:de:a7:c9:24:26:2c:0c:b7:19:18:cd:f2:e1:fa:
0c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:97:3C:CC:93:AC:5D:C9:19:FA:8E:54:F1:F8:A5:57:D8:32:9D:62
X509v3 Authority Key Identifier:
keyid:22:F9:60:FD:EE:F4:07:35:5A:B7:83:6D:CB:6B:90:26:F4:42:93:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ivlg_e70BzVat4Nty2uQJvRCk-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a3:58:1e:fa:ac:f0:34:d5:d7:0e:55:43:ba:2a:f1:c3:ff:
d6:c0:5c:a2:6d:db:a7:e5:8b:59:b1:78:48:9e:4f:9f:8b:a0:
01:c4:0b:b7:39:c7:be:d2:87:b6:89:0d:d4:b1:ad:44:85:8c:
c1:37:c1:06:b2:b5:85:9a:1f:91:28:f4:22:e0:a8:72:ee:51:
72:fc:96:4a:8e:25:31:b5:28:6b:88:fb:be:db:3d:45:41:3d:
ae:35:f0:b0:61:e6:ec:66:d9:a2:23:e7:13:b2:0c:fd:c6:25:
83:64:51:8a:22:31:29:d4:55:1e:60:61:00:66:48:77:40:f0:
f1:d2:38:aa:c4:ed:58:aa:14:90:ae:43:19:b1:00:6e:b2:4d:
ca:6a:d3:8f:84:8e:5c:6a:cf:e8:86:bb:ea:bc:ef:25:2b:32:
60:86:0d:a2:36:84:fb:69:d1:ee:5a:a2:37:e3:14:1f:a0:e7:
c6:e0:cf:63:f8:5d:65:22:98:a1:c0:24:a5:42:d0:b9:23:bb:
c1:23:59:b3:b3:ab:85:4b:6f:eb:b5:66:cf:3a:dd:76:0b:17:
c5:d6:38:e4:b4:54:43:00:0d:a9:18:d9:63:79:e0:4d:6f:1a:
95:a8:f2:bc:b2:a0:e4:5e:84:b0:6e:44:02:fe:47:2a:e5:9b:
89:d4:7b:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52L4Ub1BdTPdlwoTKuShKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjk2MGZkZWVmNDA3MzU1YWI3ODM2ZGNiNmI5MDI2ZjQ0
MjkzZWEwHhcNMjUwNjI5MDQwMTE4WhcNMjUwNjMwMDQwMTE4WjAzMTEwLwYDVQQD
EygwYzk3M2NjYzkzYWM1ZGM5MTlmYThlNTRmMWY4YTU1N2Q4MzI5ZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugB2wbyQ5uOMyV7O2JfyWd2332I8
wGz3HvLgoAPat0eU6Qi6uOT4KR2C8CR8yewY3yu0arINhC411FT8CxLSyKwYCxcK
dkePTkPPYJcMALK/Rtd7Zndvmc4TrAQdlWYHAXQ4IrHz67AdUbyJIV9es5dXGcgi
a13iQnRpjaOlum9V5mdeFxtirozqQtqo5o/x9KSzNb+NmvKAvgXMDm3OaFtXyKA1
mZxBWPIp7yFMjkU4J0+vbbRVFhPZCIgVHk+sXgnyBcUlOsn2fIkcOnMN5fwm4mc4
qLiPdyL8KIIb9h71xyiElsHRFB3yRo8Goxk63qfJJCYsDLcZGM3y4foM8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyXPMyTrF3JGfqOVPH4pVfYMp1iMB8GA1UdIwQY
MBaAFCL5YP3u9Ac1WreDbctrkCb0QpPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZsZ19lNzBCelZhdDROdHkydVFKdlJDay1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zMTU1YmYtYzg4MS00Mzk2LWFlZmQt
MjM2YmE5ZWU0MDU2LzEvSXZsZ19lNzBCelZhdDROdHkydVFKdlJDay1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zMTU1YmYtYzg4MS00Mzk2LWFlZmQtMjM2YmE5ZWU0MDU2
LzEvSXZsZ19lNzBCelZhdDROdHkydVFKdlJDay1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6NYHvqs
8DTV1w5VQ7oq8cP/1sBcom3bp+WLWbF4SJ5Pn4ugAcQLtznHvtKHtokN1LGtRIWM
wTfBBrK1hZofkSj0IuCocu5RcvyWSo4lMbUoa4j7vts9RUE9rjXwsGHm7GbZoiPn
E7IM/cYlg2RRiiIxKdRVHmBhAGZId0Dw8dI4qsTtWKoUkK5DGbEAbrJNymrTj4SO
XGrP6Ia76rzvJSsyYIYNojaE+2nR7lqiN+MUH6DnxuDPY/hdZSKYocAkpULQuSO7
wSNZs7OrhUtv67VmzzrddgsXxdY45LRUQwANqRjZY3ngTW8alajyvLKg5F6EsG5E
Av5HKuWbidR7dQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:34:08 2025 by rpki-client