Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
File: I_IfcxbhvXj4bupkJdXCKbmA-aw.mft (raw, json)
Hash identifier: BKzBdW3GgvDNAfHHViz816aEhhgJifnV3QBvdcpLGuI=
Subject key identifier: 6D:25:DA:ED:1C:DC:56:AA:13:0D:A5:AD:00:D1:50:A7:4E:1A:7E:B9
Authority key identifier: 23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
Certificate issuer: /CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Certificate serial: 0196CB3BBBB7BCC73AA16527998874E9F5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 20:00:11 +0000
Manifest this update: Tue 13 May 2025 20:00:11 +0000
Manifest next update: Wed 14 May 2025 20:00:11 +0000
Files and hashes: 1: 15gQ3l_CTz5DpsQh5tCstrbwJks.roa (hash: NBh6zaBQW3FImxNGTreLJET3gJwOeBKW+FttZU4GhEA=)
2: I_IfcxbhvXj4bupkJdXCKbmA-aw.crl (hash: dtxvICc7764pLnbRerxnp6/duAIoNpKhy5r4vkZ8YTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3b:bb:b7:bc:c7:3a:a1:65:27:99:88:74:e9:f5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Validity
Not Before: May 13 20:00:11 2025 GMT
Not After : May 14 20:00:11 2025 GMT
Subject: CN=6d25daed1cdc56aa130da5ad00d150a74e1a7eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:38:90:11:4d:56:0b:d2:02:41:fe:5b:f8:
55:e8:1c:7e:97:6d:c7:3c:4b:76:3a:8c:e2:ad:d6:
5e:bd:ab:13:77:bf:e6:52:08:1f:41:1f:f5:fc:0d:
1c:c4:aa:67:33:71:4b:95:90:6b:9b:ce:ef:89:81:
11:cd:17:62:3d:33:b7:b1:3f:e7:1e:8c:89:86:bd:
7c:b5:61:c9:0d:8d:11:df:c1:7d:46:c6:39:0b:c2:
a0:01:fb:d7:d2:f8:9c:c6:75:ac:75:92:95:96:e2:
1f:95:32:ff:e2:c6:5e:da:2f:df:76:bf:b8:bb:c5:
30:5d:c1:17:f6:e7:c2:fc:51:a1:f1:16:26:70:62:
c6:25:cb:c0:b6:7f:d0:dd:28:65:57:f6:2d:33:48:
a0:2c:a7:c5:e9:64:ef:e0:e9:3c:f4:eb:19:92:87:
ab:cb:fa:27:fe:40:1d:33:a2:88:94:f5:a0:35:84:
5d:41:01:f0:70:82:7a:45:b9:0e:c6:60:8d:0f:b5:
37:9e:c1:24:d4:3f:8b:da:2a:e4:6d:0a:2f:49:68:
4d:3f:30:be:af:5c:91:c1:c7:05:84:f5:0c:27:3d:
a1:93:bb:30:7f:01:ed:c1:c5:57:79:90:76:e1:43:
23:89:9d:60:e5:b6:fa:5d:bc:8b:c2:ca:53:cd:a5:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:25:DA:ED:1C:DC:56:AA:13:0D:A5:AD:00:D1:50:A7:4E:1A:7E:B9
X509v3 Authority Key Identifier:
keyid:23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f8:a5:34:ba:56:a5:16:23:be:6c:bd:21:9e:78:23:5d:f7:
8c:07:52:0c:ea:88:e5:61:a9:0a:14:dc:18:69:5c:10:c3:f7:
09:f7:c4:c1:a8:1d:b2:45:84:1c:64:b0:0a:06:dc:89:a5:b3:
11:d7:b0:5c:4a:b2:c3:c0:09:c2:54:17:fe:4d:af:f2:ee:f0:
61:79:f2:9c:47:fa:01:e2:02:ba:cd:b6:c8:94:3a:e5:3d:bc:
74:75:a2:a6:67:07:a5:d5:04:8e:97:0c:d9:7c:cf:a6:fd:12:
82:28:82:30:3d:d7:6a:9a:6f:c1:9d:6c:15:1a:72:70:47:db:
5a:2b:21:ab:2d:20:a9:45:59:d5:c5:74:32:f0:6f:be:81:96:
3e:32:ad:5b:49:21:e4:6a:b9:05:9f:54:e5:9b:a4:42:e9:70:
a0:1a:48:7c:5c:f9:3d:8d:e5:d2:5c:6b:9d:13:91:70:46:06:
bc:d3:7b:fb:d5:e7:ac:ad:ea:e0:e5:bd:2d:ee:44:2f:00:41:
39:c3:6c:3a:f2:c5:f9:d6:85:27:9d:bc:1d:c9:d1:a5:96:46:
4e:8f:a6:61:7a:d2:e8:06:81:43:df:fa:b2:30:4b:d1:92:17:
95:e7:c9:ba:2b:7b:97:48:80:de:2a:50:cc:b3:60:ec:ad:11:
b4:17:df:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLO7u3vMc6oWUnmYh06fX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjIxZjczMTZlMWJkNzhmODZlZWE2NDI1ZDVjMjI5Yjk4
MGY5YWMwHhcNMjUwNTEzMjAwMDExWhcNMjUwNTE0MjAwMDExWjAzMTEwLwYDVQQD
Eyg2ZDI1ZGFlZDFjZGM1NmFhMTMwZGE1YWQwMGQxNTBhNzRlMWE3ZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAA4kBFNVgvSAkH+W/hV6Bx+l23H
PEt2OozirdZevasTd7/mUggfQR/1/A0cxKpnM3FLlZBrm87viYERzRdiPTO3sT/n
HoyJhr18tWHJDY0R38F9RsY5C8KgAfvX0vicxnWsdZKVluIflTL/4sZe2i/fdr+4
u8UwXcEX9ufC/FGh8RYmcGLGJcvAtn/Q3ShlV/YtM0igLKfF6WTv4Ok89OsZkoer
y/on/kAdM6KIlPWgNYRdQQHwcIJ6RbkOxmCND7U3nsEk1D+L2irkbQovSWhNPzC+
r1yRwccFhPUMJz2hk7swfwHtwcVXeZB24UMjiZ1g5bb6XbyLwspTzaU0LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0l2u0c3FaqEw2lrQDRUKdOGn65MB8GA1UdIwQY
MBaAFCPyH3MW4b14+G7qZCXVwim5gPmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YTU5Y2YtNTA5Mi00NzRkLTgxY2Yt
OTc0YzMxZjI2NjBiLzEvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84YTU5Y2YtNTA5Mi00NzRkLTgxY2YtOTc0YzMxZjI2NjBi
LzEvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvilNLpW
pRYjvmy9IZ54I133jAdSDOqI5WGpChTcGGlcEMP3CffEwagdskWEHGSwCgbciaWz
EdewXEqyw8AJwlQX/k2v8u7wYXnynEf6AeICus22yJQ65T28dHWipmcHpdUEjpcM
2XzPpv0SgiiCMD3XappvwZ1sFRpycEfbWishqy0gqUVZ1cV0MvBvvoGWPjKtW0kh
5Gq5BZ9U5ZukQulwoBpIfFz5PY3l0lxrnRORcEYGvNN7+9XnrK3q4OW9Le5ELwBB
OcNsOvLF+daFJ528HcnRpZZGTo+mYXrS6AaBQ9/6sjBL0ZIXlefJuit7l0iA3ipQ
zLNg7K0RtBffSg==
-----END CERTIFICATE-----
Generated at Tue May 13 22:48:37 2025 by rpki-client