Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: Vu3ztr9L89xQ77ZgabYJgVHrfLHB0lVKSS9zzKEypZI=
Subject key identifier: B8:E2:84:C2:BF:B0:E0:57:66:B0:A7:BE:56:7C:81:EF:20:F4:11:96
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 0197CB711116EADD7AE92C2F2F0157FCEEF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: C5
Signing time: Wed 02 Jul 2025 14:01:14 +0000
Manifest this update: Wed 02 Jul 2025 14:01:14 +0000
Manifest next update: Thu 03 Jul 2025 14:01:14 +0000
Files and hashes: 1: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: qoD9XnPGTmSfatnj9wx1UvrY7hpt1sQhygU2r7nDi5s=)
2: w8pMwx-vyyole256lyQ0C_5-WOI.roa (hash: K+srURRGs/DsNg/JW4KWXf2QN5EAfkcbY2aU8MAMJS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:71:11:16:ea:dd:7a:e9:2c:2f:2f:01:57:fc:ee:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Jul 2 14:01:14 2025 GMT
Not After : Jul 3 14:01:14 2025 GMT
Subject: CN=b8e284c2bfb0e05766b0a7be567c81ef20f41196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:83:69:b4:6f:6b:22:f3:4c:c6:d2:64:7f:7e:
32:25:65:ff:e9:a8:8e:3e:75:14:9c:d8:72:a2:a0:
7b:07:b1:46:d6:a7:14:94:d4:a4:56:b9:15:57:96:
b9:0c:d7:38:3c:ca:8d:07:cb:d0:96:5e:bc:4b:fb:
20:65:40:21:9f:fe:c5:61:91:f5:5b:d1:42:42:62:
83:a1:bf:7c:0d:57:6f:e5:5b:e9:e1:e6:c7:64:37:
b4:e4:11:9d:f3:51:04:d3:a3:fa:59:f4:06:9f:dd:
2c:4b:71:03:b5:bd:b4:d7:0f:15:44:c6:e9:54:2d:
97:43:f3:06:f2:20:75:db:54:a3:f5:61:2f:12:00:
21:a6:ad:ad:a3:ad:e0:96:09:80:6e:e9:13:dd:d8:
96:87:4a:37:a1:3c:94:91:9f:34:3a:f0:a0:8e:21:
e1:5a:10:c3:08:c7:12:da:5b:b6:06:d1:04:b6:d1:
c4:2e:d2:2e:13:6c:ee:bf:ac:49:77:3a:5d:c9:92:
ef:8f:5f:af:0c:54:c8:42:b4:db:f6:0c:91:39:25:
5d:e3:e2:d2:d3:6f:75:c1:1c:1d:fa:a4:49:f3:1e:
2e:fc:e7:c7:4a:9d:e3:ae:65:60:39:79:0d:a0:56:
f6:fd:9a:6d:a1:3b:60:85:80:4b:9c:d5:21:ac:50:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E2:84:C2:BF:B0:E0:57:66:B0:A7:BE:56:7C:81:EF:20:F4:11:96
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ed:8f:d0:04:7f:cc:ab:f7:ab:a0:e9:2f:55:92:ba:e6:b2:
78:b2:d1:e9:39:61:4f:00:9d:b7:90:d7:e7:3e:f4:47:3d:4d:
0b:b6:04:57:4b:86:8b:f4:01:b9:2c:e2:5f:d4:19:78:1e:9c:
97:de:99:c3:ee:46:dc:31:81:5a:6c:05:15:67:1d:fb:a2:c2:
a4:26:2f:a7:70:fe:94:29:9b:67:26:97:28:67:7a:02:c2:2b:
a6:33:a7:cb:3f:1f:dd:2a:e0:e2:a6:84:68:21:25:c6:93:97:
dc:97:f7:fd:ef:73:6e:ef:6f:99:7d:d7:85:33:46:6c:36:a2:
ba:4a:ee:48:ff:57:3f:87:4f:d0:f1:83:1d:0d:7b:d6:3b:74:
5a:ae:a6:4f:05:61:81:ac:92:fd:d0:3e:10:90:76:ef:0a:8f:
85:e4:51:b8:42:97:ed:39:22:df:06:80:e8:ed:45:4a:26:09:
9c:c5:ef:fe:b6:79:97:bd:8d:11:05:28:c9:19:14:b2:e5:34:
f5:6a:d8:a0:05:2c:25:5b:c5:03:71:61:12:e3:d1:46:49:dd:
65:13:50:2a:d6:0f:e3:7d:87:b8:a2:f5:59:dd:20:94:31:de:
6a:5a:3e:67:af:31:28:80:16:77:11:a9:6d:05:01:25:68:07:
96:42:89:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfLcREW6t166SwvLwFX/O75MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZjhhMjk4MTQxZmMyZjQ1YzA3MmQyN2EwYmYyNjI2NTVj
YjZmNWEwHhcNMjUwNzAyMTQwMTE0WhcNMjUwNzAzMTQwMTE0WjAzMTEwLwYDVQQD
EyhiOGUyODRjMmJmYjBlMDU3NjZiMGE3YmU1NjdjODFlZjIwZjQxMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloNptG9rIvNMxtJkf34yJWX/6aiO
PnUUnNhyoqB7B7FG1qcUlNSkVrkVV5a5DNc4PMqNB8vQll68S/sgZUAhn/7FYZH1
W9FCQmKDob98DVdv5Vvp4ebHZDe05BGd81EE06P6WfQGn90sS3EDtb201w8VRMbp
VC2XQ/MG8iB121Sj9WEvEgAhpq2to63glgmAbukT3diWh0o3oTyUkZ80OvCgjiHh
WhDDCMcS2lu2BtEEttHELtIuE2zuv6xJdzpdyZLvj1+vDFTIQrTb9gyROSVd4+LS
0291wRwd+qRJ8x4u/OfHSp3jrmVgOXkNoFb2/ZptoTtghYBLnNUhrFBdFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjihMK/sOBXZrCnvlZ8ge8g9BGWMB8GA1UdIwQY
MBaAFIv4opgUH8L0XActJ6C/JiZVy29aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80OTY0NDItYWFiNy00MDljLTllZmYt
ZDQ2ZWQ1NjhmODcxLzEvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My80OTY0NDItYWFiNy00MDljLTllZmYtZDQ2ZWQ1NjhmODcx
LzEvaV9paW1CUWZ3dlJjQnkwbm9MOG1KbFhMYjFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALO2P0AR/
zKv3q6DpL1WSuuayeLLR6TlhTwCdt5DX5z70Rz1NC7YEV0uGi/QBuSziX9QZeB6c
l96Zw+5G3DGBWmwFFWcd+6LCpCYvp3D+lCmbZyaXKGd6AsIrpjOnyz8f3Srg4qaE
aCElxpOX3Jf3/e9zbu9vmX3XhTNGbDaiukruSP9XP4dP0PGDHQ171jt0Wq6mTwVh
gayS/dA+EJB27wqPheRRuEKX7Tki3waA6O1FSiYJnMXv/rZ5l72NEQUoyRkUsuU0
9WrYoAUsJVvFA3FhEuPRRkndZRNQKtYP432HuKL1Wd0glDHealo+Z68xKIAWdxGp
bQUBJWgHlkKJuQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:25:14 2025 by rpki-client