Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: OK887c2/n4YzDplIn/9v6qPAntPU3sL2c8OA4wWxKng=
Subject key identifier: FA:2E:B1:D4:57:8E:69:21:AA:D0:9F:D7:8D:14:D0:3A:3C:BB:B9:E4
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 0197C80359EDD16A79DA180743467B3450E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 15C0
Signing time: Tue 01 Jul 2025 22:02:32 +0000
Manifest this update: Tue 01 Jul 2025 22:02:32 +0000
Manifest next update: Wed 02 Jul 2025 22:02:32 +0000
Files and hashes: 1: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: Xsx1J2qCFJw17mD9vrWaZKv7d/RUwG+ZVL9Ow31Qk5g=)
2: qABhsOLWjcCV2-NCnGtwC8QlYyU.roa (hash: md9z/89P3sn3nXo5h/larqHDUL4eXCPfvLewxfl/iTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 22:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:03:59:ed:d1:6a:79:da:18:07:43:46:7b:34:50:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Jul 1 22:02:32 2025 GMT
Not After : Jul 2 22:02:32 2025 GMT
Subject: CN=fa2eb1d4578e6921aad09fd78d14d03a3cbbb9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:99:86:e3:6c:90:38:27:c3:a9:b9:b4:0a:3d:
15:d7:2a:3c:ac:36:b5:49:e5:9f:4d:c8:03:34:92:
71:07:42:9d:2a:c7:8e:61:a9:67:29:29:b7:e2:17:
dd:50:6d:84:11:2e:f1:44:41:05:dc:b5:d0:af:7f:
a0:31:ff:12:6b:62:5c:7b:0d:3b:e8:47:7e:c9:4c:
26:f3:9f:7f:05:56:c3:08:f9:2c:a5:ed:3c:3a:b0:
18:ef:04:d3:68:38:0c:3e:74:8a:75:2e:86:46:1a:
c6:57:18:a0:a9:76:06:5b:8e:4b:3c:b6:fa:e2:c5:
2f:25:87:08:0a:61:a7:ca:af:46:4d:cb:96:20:73:
91:a1:a8:bd:32:77:fd:6c:9d:9b:e8:83:c0:f0:ef:
87:e6:fd:16:57:a8:de:3c:34:6b:d2:14:74:c5:eb:
c0:35:f7:2b:b5:af:be:76:31:08:46:91:16:dc:fb:
d6:05:94:4a:7c:a2:7f:00:96:1d:d0:81:63:70:25:
f1:70:4a:3e:05:5e:2c:c7:df:a7:28:47:25:d3:35:
84:15:55:90:f4:33:4e:3a:e6:8f:d7:69:48:79:be:
b9:7b:46:26:03:8b:c7:0b:b6:f5:a3:ab:3e:d4:5e:
c8:f4:70:71:f1:21:e2:0d:08:93:d6:af:1d:dc:84:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2E:B1:D4:57:8E:69:21:AA:D0:9F:D7:8D:14:D0:3A:3C:BB:B9:E4
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:39:a5:e8:f1:cd:62:d4:a2:84:13:c2:67:7b:22:16:1c:02:
95:5c:75:f9:f9:05:d4:2e:9d:4c:ce:72:41:9b:a6:84:97:c3:
31:6a:c9:37:e7:20:bc:49:76:03:5f:84:83:5c:d0:48:78:57:
cd:0f:4d:f1:01:02:f9:0e:f9:21:aa:e4:ab:df:8e:1f:6b:b5:
03:44:f3:49:d2:cc:54:fe:95:41:1e:84:fc:fa:7b:52:bd:ff:
a5:72:2f:45:4f:a9:18:22:76:30:c3:c5:81:a8:e7:ea:33:c2:
7b:0c:e3:8e:8f:61:ad:4e:cc:58:64:19:08:2b:12:9f:51:6c:
04:cf:3b:1e:2f:eb:7d:5a:16:b0:bd:26:52:ad:72:b4:c4:6c:
a8:58:92:9e:52:3f:fc:71:9d:de:ca:bf:65:77:bc:53:e9:ee:
08:f7:0f:c1:de:e7:83:e7:a0:97:a7:3f:36:2f:0f:8a:b9:dc:
a0:db:e1:98:2e:3c:05:12:3c:d6:9b:f4:52:68:cf:3f:46:22:
6a:d8:0c:f2:51:ab:5f:d5:be:df:2c:54:8d:ce:43:94:cb:eb:
2d:9c:0a:98:ea:9b:f7:b9:0d:13:89:e7:ed:a8:9c:ff:3a:e5:
56:fa:21:d2:3b:81:23:6d:55:1a:14:4d:c3:c9:cc:e7:39:5a:
01:93:1e:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfIA1nt0Wp52hgHQ0Z7NFDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2QzMDExOTM1MTUwMGYyNTlhNTdlMmZmNjg1MDc5N2Qx
YjRlMWEwHhcNMjUwNzAxMjIwMjMyWhcNMjUwNzAyMjIwMjMyWjAzMTEwLwYDVQQD
EyhmYTJlYjFkNDU3OGU2OTIxYWFkMDlmZDc4ZDE0ZDAzYTNjYmJiOWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJmG42yQOCfDqbm0Cj0V1yo8rDa1
SeWfTcgDNJJxB0KdKseOYalnKSm34hfdUG2EES7xREEF3LXQr3+gMf8Sa2Jcew07
6Ed+yUwm859/BVbDCPkspe08OrAY7wTTaDgMPnSKdS6GRhrGVxigqXYGW45LPLb6
4sUvJYcICmGnyq9GTcuWIHORoai9Mnf9bJ2b6IPA8O+H5v0WV6jePDRr0hR0xevA
Nfcrta++djEIRpEW3PvWBZRKfKJ/AJYd0IFjcCXxcEo+BV4sx9+nKEcl0zWEFVWQ
9DNOOuaP12lIeb65e0YmA4vHC7b1o6s+1F7I9HBx8SHiDQiT1q8d3IQ/zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPousdRXjmkhqtCf140U0Do8u7nkMB8GA1UdIwQY
MBaAFIh9MBGTUVAPJZpX4v9oUHl9G04aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDct
Zjc0MDFiNGU0YjRhLzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDctZjc0MDFiNGU0YjRh
LzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDml6PHN
YtSihBPCZ3siFhwClVx1+fkF1C6dTM5yQZumhJfDMWrJN+cgvEl2A1+Eg1zQSHhX
zQ9N8QEC+Q75Iarkq9+OH2u1A0TzSdLMVP6VQR6E/Pp7Ur3/pXIvRU+pGCJ2MMPF
gajn6jPCewzjjo9hrU7MWGQZCCsSn1FsBM87Hi/rfVoWsL0mUq1ytMRsqFiSnlI/
/HGd3sq/ZXe8U+nuCPcPwd7ng+egl6c/Ni8PirncoNvhmC48BRI81pv0UmjPP0Yi
atgM8lGrX9W+3yxUjc5DlMvrLZwKmOqb97kNE4nn7aic/zrlVvoh0juBI21VGhRN
w8nM5zlaAZMemA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:56:45 2025 by rpki-client