Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json)
Hash identifier: 2PXOsC01PMsBrT0WBYdwFv/49h3mzili0gilczc/BfE=
Subject key identifier: D2:19:42:1C:E4:45:0C:55:54:1B:2A:AD:3D:1F:62:B2:49:99:46:B4
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 0197BA0FB96AEACBD1AEB8CF2E991E415AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
Manifest number: 1194
Signing time: Sun 29 Jun 2025 05:01:21 +0000
Manifest this update: Sun 29 Jun 2025 05:01:21 +0000
Manifest next update: Mon 30 Jun 2025 05:01:21 +0000
Files and hashes: 1: 1-nMAZc-5nMETLGR20qQodJXwzWs.roa (hash: eYA8AUyf83NJ/62tL4Gk8TX1qXmPj/b3h3AkumPPTzQ=)
2: 7PCtQ5R_w0udczv79LfUn6Szs8E.roa (hash: UeOrmKK9TH1L4E/SbRA8TvqgXT96VYfRkeusRGYVXmU=)
3: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: AHXF/nIMdsuLlMSRPJEYOPyoTALHRhyrBLfUKkFPooI=)
4: ayyHxivjLEoLFlxHs79jNQaOed8.roa (hash: QQS+fGK9P+7C6sfs4vGiJ9dFO6N+wnkemR+q8OHEfUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:b9:6a:ea:cb:d1:ae:b8:cf:2e:99:1e:41:5a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Jun 29 05:01:21 2025 GMT
Not After : Jun 30 05:01:21 2025 GMT
Subject: CN=d219421ce4450c55541b2aad3d1f62b2499946b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:8d:65:69:7f:f0:e7:9a:df:09:27:94:4c:
4c:00:2a:58:83:29:5d:c9:fd:cb:73:ab:13:e3:7b:
f7:a8:31:2d:b4:f1:df:d2:bf:a9:50:44:26:65:1d:
0b:9c:8e:2f:de:9d:a6:e0:dc:4f:af:64:25:60:8b:
84:ab:64:38:60:14:98:67:89:01:f4:f6:db:1a:e5:
08:cd:21:4b:a9:54:c5:59:34:91:05:0d:9d:67:29:
c3:e7:2c:4b:e3:25:b3:58:03:34:4a:00:67:2b:50:
02:04:53:43:7a:33:7f:73:e2:84:95:76:f2:92:56:
ad:05:14:ec:04:e9:29:e9:b5:b9:f0:00:1c:12:53:
1e:1d:76:22:e5:0b:66:c5:12:c6:3e:2c:a0:b2:8a:
dc:f9:6a:71:33:fe:cb:1c:58:b8:ab:0a:28:d9:b4:
47:1f:3b:dc:94:d6:2c:a8:0d:17:ac:72:e7:c2:df:
34:9b:d1:11:5a:19:91:fb:9a:90:f2:e7:db:74:9d:
bd:46:fb:8a:6a:ec:3a:bf:43:24:33:bb:3b:ae:35:
a2:8c:39:25:7e:53:f3:14:6d:45:72:1c:87:7a:8e:
3e:a9:0d:ea:de:c8:70:3b:f8:26:09:aa:0e:a7:e7:
87:c0:f4:54:f0:01:73:7d:5c:37:1a:f6:1e:35:94:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:19:42:1C:E4:45:0C:55:54:1B:2A:AD:3D:1F:62:B2:49:99:46:B4
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:36:b1:9f:83:df:34:65:00:7c:fb:1b:8a:0c:47:62:a3:e1:
69:a5:62:ef:d8:e1:ad:6c:f1:7e:21:b9:2f:ab:f6:9e:4a:c3:
fd:53:63:0a:b1:23:33:91:3d:4b:68:d0:ac:7e:2e:bd:7b:f4:
6d:c9:42:e8:c5:18:38:74:b7:2d:af:86:bf:a2:59:83:a8:c6:
10:e3:9c:32:a3:1c:9b:bf:68:7a:50:e7:20:21:c2:a6:18:b6:
3d:d7:a7:34:28:73:4c:b8:db:8d:03:31:cd:f7:98:36:85:b9:
d5:a0:7d:87:e5:c3:4c:e5:55:d7:6a:85:c4:e9:f1:28:8a:c9:
39:f4:3e:54:86:17:4f:55:ca:d2:e3:c6:7b:53:72:45:77:fd:
6a:dd:e8:05:b1:da:6c:3f:46:36:37:c6:4e:13:c0:4c:0e:06:
aa:e0:38:77:d6:0a:c9:4e:1f:12:2d:89:4b:76:00:7f:d7:43:
e9:31:e0:3f:3b:25:68:39:74:73:e3:59:6d:1c:83:09:0a:68:
49:36:b3:27:4d:02:cb:64:78:a2:45:08:18:84:c5:65:f7:66:
e4:2a:66:f2:4d:ee:99:f9:35:4e:54:47:63:32:e2:ce:90:54:
65:39:0d:24:ab:74:6d:f7:01:ac:af:aa:df:21:13:8e:32:67:
1d:2a:59:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6D7lq6svRrrjPLpkeQVr9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM1YzYxMWMyOTIzNGJmNGI0MGIzNTk5MGRkZmEyOTNh
NTM3ZjkwHhcNMjUwNjI5MDUwMTIxWhcNMjUwNjMwMDUwMTIxWjAzMTEwLwYDVQQD
EyhkMjE5NDIxY2U0NDUwYzU1NTQxYjJhYWQzZDFmNjJiMjQ5OTk0NmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiqNZWl/8Oea3wknlExMACpYgyld
yf3Lc6sT43v3qDEttPHf0r+pUEQmZR0LnI4v3p2m4NxPr2QlYIuEq2Q4YBSYZ4kB
9PbbGuUIzSFLqVTFWTSRBQ2dZynD5yxL4yWzWAM0SgBnK1ACBFNDejN/c+KElXby
klatBRTsBOkp6bW58AAcElMeHXYi5QtmxRLGPiygsorc+WpxM/7LHFi4qwoo2bRH
HzvclNYsqA0XrHLnwt80m9ERWhmR+5qQ8ufbdJ29RvuKauw6v0MkM7s7rjWijDkl
flPzFG1FchyHeo4+qQ3q3shwO/gmCaoOp+eHwPRU8AFzfVw3GvYeNZTB3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIZQhzkRQxVVBsqrT0fYrJJmUa0MB8GA1UdIwQY
MBaAFCLzXGEcKSNL9LQLNZkN36KTpTf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUt
MTYzMjQ3ZWIwZTA3LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mOGNkYTQtYzgxOC00ZGMwLWI2MDUtMTYzMjQ3ZWIwZTA3
LzEvSXZOY1lSd3BJMHYwdEFzMW1RM2ZvcE9sTl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDaxn4Pf
NGUAfPsbigxHYqPhaaVi79jhrWzxfiG5L6v2nkrD/VNjCrEjM5E9S2jQrH4uvXv0
bclC6MUYOHS3La+Gv6JZg6jGEOOcMqMcm79oelDnICHCphi2PdenNChzTLjbjQMx
zfeYNoW51aB9h+XDTOVV12qFxOnxKIrJOfQ+VIYXT1XK0uPGe1NyRXf9at3oBbHa
bD9GNjfGThPATA4GquA4d9YKyU4fEi2JS3YAf9dD6THgPzslaDl0c+NZbRyDCQpo
STazJ00Cy2R4okUIGITFZfdm5Cpm8k3umfk1TlRHYzLizpBUZTkNJKt0bfcBrK+q
3yETjjJnHSpZFQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:34:24 2025 by rpki-client