Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File: ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier: MieWSa1T+x/qbhCGMX34kr8HtBX0jRTNlbSzV0hYsXE=
Subject key identifier: 3E:5B:B0:53:C2:D3:23:38:50:18:05:5F:0E:E5:D5:B8:BD:49:DC:F1
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial: 0197C0483DFAF56A6406AB43FC931456A9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number: 0EE7
Signing time: Mon 30 Jun 2025 10:00:48 +0000
Manifest this update: Mon 30 Jun 2025 10:00:48 +0000
Manifest next update: Tue 01 Jul 2025 10:00:48 +0000
Files and hashes: 1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: cz1I3Mg3te00hUZfY1mh1puFBaOt0jo+CCnJAWDNlEs=)
2: iwkNh3UdWwUz0vScU_NmxlT_kd8.roa (hash: qTLgYZEDj5/iSNL5ILw19yNSQMcWNUWUNm12d5bZdjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:3d:fa:f5:6a:64:06:ab:43:fc:93:14:56:a9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Validity
Not Before: Jun 30 10:00:48 2025 GMT
Not After : Jul 1 10:00:48 2025 GMT
Subject: CN=3e5bb053c2d323385018055f0ee5d5b8bd49dcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:8c:d9:dd:db:3a:82:82:bf:aa:6c:4d:60:
cb:01:ea:cd:97:a5:90:a0:a4:5b:c4:a5:9e:fb:d5:
65:34:62:92:f3:c8:90:bc:74:f1:1c:8a:0e:a3:07:
81:51:19:2c:36:5a:0a:c2:bf:28:4f:12:88:f7:d3:
7b:bb:69:eb:d4:cc:45:98:52:f6:00:77:16:6d:aa:
77:75:ba:e6:cb:4e:59:82:33:f2:07:00:f1:bb:3f:
7e:49:e4:e6:36:3c:5e:fe:af:3e:8d:cb:0e:6a:95:
f5:20:55:fd:4e:f4:64:0d:63:7a:c7:69:ce:fe:55:
dc:38:92:8f:c0:63:40:80:9d:94:34:42:1b:53:1a:
a2:5d:bb:4a:78:64:05:7e:6c:e7:12:5b:40:9f:e4:
f3:62:ca:98:a5:30:fb:15:d5:85:01:b1:84:f0:7b:
47:c7:3c:73:3a:2d:6f:3c:e7:c5:0e:88:db:44:b7:
99:12:f1:78:74:ae:63:0f:64:ac:df:c2:83:a0:f7:
68:89:50:d1:b6:83:0b:90:bd:73:fe:b8:8d:c5:9f:
53:6d:00:e8:00:ee:ca:c8:c2:61:a7:ef:5d:d2:38:
4e:b0:10:94:3d:25:fc:8e:49:1b:39:65:01:22:0a:
a8:b5:99:bf:12:85:78:8d:59:ee:79:15:ea:2c:ba:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5B:B0:53:C2:D3:23:38:50:18:05:5F:0E:E5:D5:B8:BD:49:DC:F1
X509v3 Authority Key Identifier:
keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b7:07:3c:88:71:13:37:5c:dc:7a:c1:c3:40:ad:f2:32:52:
a8:9c:7e:16:15:6e:ad:20:3a:88:d8:41:76:36:64:3a:a9:4d:
b3:0b:02:01:46:07:2d:7b:f0:df:9b:a5:78:81:8a:f1:c6:a1:
e1:bc:1d:bc:36:85:44:c1:9f:40:2e:b9:68:12:e1:67:7a:77:
98:2d:09:25:87:7c:7d:c6:65:56:5e:45:dc:90:e2:dc:54:15:
17:5e:28:16:f7:c4:f8:1e:48:ab:4c:18:a2:ca:fe:55:b4:2a:
2c:4b:51:c3:5f:33:c7:26:79:4a:54:58:8a:14:30:1e:5c:d3:
18:61:f0:72:91:3f:ac:97:83:58:fe:d0:a6:95:a7:9a:54:e3:
f4:f5:f5:c7:50:24:2a:5c:d8:40:27:ef:fd:4c:a5:19:c1:35:
ae:36:b9:ef:22:bf:2d:06:a1:4d:7a:df:75:d8:71:62:3f:f8:
2b:3c:b2:c1:49:e9:e3:96:81:e9:1b:e4:da:6c:74:c4:0e:cf:
01:e2:53:94:7f:2f:cb:74:e7:a2:ce:2b:df:11:03:88:c5:3e:
19:fd:1b:87:82:be:73:9a:f6:72:60:9f:1f:5a:7a:93:3f:e5:
ea:1e:14:6e:0d:fc:90:09:30:ba:f9:7e:06:11:38:32:02:0d:
cc:fa:db:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfASD369WpkBqtD/JMUVqnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWUzZjhkMmY5NDJkOGZjMTE2ZWY4ZTU3NTliYzM3Njdm
YjBiMDYwHhcNMjUwNjMwMTAwMDQ4WhcNMjUwNzAxMTAwMDQ4WjAzMTEwLwYDVQQD
EygzZTViYjA1M2MyZDMyMzM4NTAxODA1NWYwZWU1ZDViOGJkNDlkY2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm2M2d3bOoKCv6psTWDLAerNl6WQ
oKRbxKWe+9VlNGKS88iQvHTxHIoOoweBURksNloKwr8oTxKI99N7u2nr1MxFmFL2
AHcWbap3dbrmy05ZgjPyBwDxuz9+SeTmNjxe/q8+jcsOapX1IFX9TvRkDWN6x2nO
/lXcOJKPwGNAgJ2UNEIbUxqiXbtKeGQFfmznEltAn+TzYsqYpTD7FdWFAbGE8HtH
xzxzOi1vPOfFDojbRLeZEvF4dK5jD2Ss38KDoPdoiVDRtoMLkL1z/riNxZ9TbQDo
AO7KyMJhp+9d0jhOsBCUPSX8jkkbOWUBIgqotZm/EoV4jVnueRXqLLrZrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5bsFPC0yM4UBgFXw7l1bi9SdzxMB8GA1UdIwQY
MBaAFIoeP40vlC2PwRbvjldZvDdn+wsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQt
MjVjMTFiNzk2OTgyLzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQtMjVjMTFiNzk2OTgy
LzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7cHPIhx
Ezdc3HrBw0Ct8jJSqJx+FhVurSA6iNhBdjZkOqlNswsCAUYHLXvw35uleIGK8cah
4bwdvDaFRMGfQC65aBLhZ3p3mC0JJYd8fcZlVl5F3JDi3FQVF14oFvfE+B5Iq0wY
osr+VbQqLEtRw18zxyZ5SlRYihQwHlzTGGHwcpE/rJeDWP7QppWnmlTj9PX1x1Ak
KlzYQCfv/UylGcE1rja57yK/LQahTXrfddhxYj/4KzyywUnp45aB6Rvk2mx0xA7P
AeJTlH8vy3Tnos4r3xEDiMU+Gf0bh4K+c5r2cmCfH1p6kz/l6h4Ubg38kAkwuvl+
BhE4MgINzPrb8g==
-----END CERTIFICATE-----
Generated at Mon Jun 30 15:27:03 2025 by rpki-client