Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: 4PXMagxdBxJJTHs801E6qGw9PEFEuexl9f6q2N6bLyg=
Subject key identifier: F8:F9:F6:23:B5:A2:98:00:B6:58:30:CA:7B:86:A4:74:D9:2B:C8:70
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 0197C492FB9C55227D2CE02EB1CC8ED40BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 06:00:56 +0000
Manifest this update: Tue 01 Jul 2025 06:00:56 +0000
Manifest next update: Wed 02 Jul 2025 06:00:56 +0000
Files and hashes: 1: ThUJ8aSmMtP4aHcJCzzypfLa8ic.roa (hash: dNkVlGDZVTIktuBX7rmx/RdrVxwALHhLlc8K3va90zE=)
2: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: ddwdD2N/K3dcCmgth1WM/X6L7StG+cWpbS3MozujLe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:92:fb:9c:55:22:7d:2c:e0:2e:b1:cc:8e:d4:0b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Jul 1 06:00:56 2025 GMT
Not After : Jul 2 06:00:56 2025 GMT
Subject: CN=f8f9f623b5a29800b65830ca7b86a474d92bc870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ff:88:df:fe:c4:9a:30:5d:6c:07:17:20:07:
7b:76:f7:15:e0:a9:12:9e:61:1c:29:ff:dd:85:6d:
7b:74:30:d6:a9:d4:42:1d:66:99:4b:5c:73:a0:11:
cb:98:2b:54:cf:11:55:00:57:e6:42:1a:ec:86:66:
47:b6:eb:8e:d8:51:ac:a9:92:57:f6:f8:b4:19:1c:
d8:35:f2:bb:97:86:d6:9d:5c:a9:43:5e:8e:44:ac:
0e:8a:7d:8f:e1:1b:21:77:92:12:45:b7:8c:ac:03:
d2:b2:16:57:3f:6d:a2:b5:7e:1e:c9:52:c9:1e:56:
67:1d:1d:c2:2c:3c:5a:65:ae:02:60:f6:6d:7b:03:
a5:63:b0:04:38:9a:81:4c:92:38:d8:0c:ab:57:36:
bb:f6:15:0c:67:31:ca:2a:13:da:81:66:17:d2:bc:
b4:78:c2:c4:fc:db:ad:04:7d:8e:0e:0e:94:2a:69:
75:65:9c:71:c5:e8:63:e5:d7:1a:28:1f:8c:8c:b7:
21:b0:22:53:5b:07:4c:ad:71:1e:32:ed:b4:aa:38:
54:2d:cb:b3:c0:b9:2c:d0:05:fd:08:cc:95:cb:5e:
ae:ea:6e:54:48:f0:00:35:77:9c:85:90:67:74:ad:
43:ce:06:cd:37:6d:69:47:bb:ae:d3:24:bb:44:70:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F9:F6:23:B5:A2:98:00:B6:58:30:CA:7B:86:A4:74:D9:2B:C8:70
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fc:85:0e:63:58:1e:5c:23:20:4e:b6:9f:99:41:e9:88:84:
32:e2:7f:a8:5b:ce:da:04:75:e1:2a:eb:65:59:6e:f5:93:37:
97:8a:fc:90:95:a6:ae:33:ca:94:a7:42:43:37:9c:b6:84:82:
80:7f:f6:4f:d3:3b:0d:d1:f2:f2:f6:f4:b3:8e:d2:69:69:2c:
db:b8:ca:3f:dd:21:d2:0a:76:0e:c3:4e:9e:f9:e9:59:ea:6e:
22:7a:1a:32:54:da:fe:17:c5:d1:f3:dc:c2:d4:b7:ac:46:bc:
98:0a:bf:a5:92:09:33:ba:e5:b6:6f:87:5d:7e:4f:80:9c:83:
f9:51:c8:07:f9:9b:08:d9:43:f0:63:09:a1:00:3a:a4:d3:0e:
fb:83:b7:04:42:e0:b5:e1:5d:d6:49:7b:98:96:4f:58:71:5f:
a0:92:03:db:9f:c1:b9:f7:4c:7a:7e:d6:4d:d0:f2:f3:eb:55:
63:0a:ea:48:15:08:74:f3:44:8e:f9:0a:66:16:09:3d:6a:3e:
cd:9f:73:0c:2c:1a:71:00:96:db:45:79:bb:60:7d:39:84:f7:
81:d8:c0:62:b8:70:50:c4:9f:90:ba:34:83:a5:a2:c1:00:e2:
78:e0:1f:dd:2a:97:83:b0:b4:b2:c5:e7:04:02:70:5a:e5:ec:
96:75:dc:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEkvucVSJ9LOAuscyO1AvYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MWFmODVmODFkZDNmM2IyNGFiMTRlZDFmNDJjN2NjNDY2
NTAyZjAwHhcNMjUwNzAxMDYwMDU2WhcNMjUwNzAyMDYwMDU2WjAzMTEwLwYDVQQD
EyhmOGY5ZjYyM2I1YTI5ODAwYjY1ODMwY2E3Yjg2YTQ3NGQ5MmJjODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v+I3/7EmjBdbAcXIAd7dvcV4KkS
nmEcKf/dhW17dDDWqdRCHWaZS1xzoBHLmCtUzxFVAFfmQhrshmZHtuuO2FGsqZJX
9vi0GRzYNfK7l4bWnVypQ16ORKwOin2P4Rshd5ISRbeMrAPSshZXP22itX4eyVLJ
HlZnHR3CLDxaZa4CYPZtewOlY7AEOJqBTJI42AyrVza79hUMZzHKKhPagWYX0ry0
eMLE/NutBH2ODg6UKml1ZZxxxehj5dcaKB+MjLchsCJTWwdMrXEeMu20qjhULcuz
wLks0AX9CMyVy16u6m5USPAANXechZBndK1DzgbNN21pR7uu0yS7RHA7bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPj59iO1opgAtlgwynuGpHTZK8hwMB8GA1UdIwQY
MBaAFIga+F+B3T87JKsU7R9Cx8xGZQLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUt
ZjI1NTY1OGJiODgxLzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUtZjI1NTY1OGJiODgx
LzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPyFDmNY
HlwjIE62n5lB6YiEMuJ/qFvO2gR14SrrZVlu9ZM3l4r8kJWmrjPKlKdCQzectoSC
gH/2T9M7DdHy8vb0s47SaWks27jKP90h0gp2DsNOnvnpWepuInoaMlTa/hfF0fPc
wtS3rEa8mAq/pZIJM7rltm+HXX5PgJyD+VHIB/mbCNlD8GMJoQA6pNMO+4O3BELg
teFd1kl7mJZPWHFfoJID25/BufdMen7WTdDy8+tVYwrqSBUIdPNEjvkKZhYJPWo+
zZ9zDCwacQCW20V5u2B9OYT3gdjAYrhwUMSfkLo0g6WiwQDieOAf3SqXg7C0ssXn
BAJwWuXslnXcsg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 14:27:13 2025 by rpki-client