Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json)
Hash identifier: RhMhhv/Lcrb+BA1F2zl58t8TPD00H5JcZjpPTdC39rs=
Subject key identifier: 24:69:38:8A:51:06:7B:A7:C8:D9:44:96:ED:A7:17:4D:97:A0:AC:B5
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial: 0197B820F30A97AF23EE44F1B87F4877B5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
Manifest number: 1193
Signing time: Sat 28 Jun 2025 20:00:56 +0000
Manifest this update: Sat 28 Jun 2025 20:00:56 +0000
Manifest next update: Sun 29 Jun 2025 20:00:56 +0000
Files and hashes: 1: 7ivcRbHUq4tA4Hz9Wb386VjaBS0.roa (hash: CGbH34TXJ114G1ywTRowOQ13NrG2LKX6vQJmgAwZZz4=)
2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: ssTcmJ8joUmU/WOfWYkdvVhl+ASgi1lReddb8WjE8Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f3:0a:97:af:23:ee:44:f1:b8:7f:48:77:b5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Validity
Not Before: Jun 28 20:00:56 2025 GMT
Not After : Jun 29 20:00:56 2025 GMT
Subject: CN=2469388a51067ba7c8d94496eda7174d97a0acb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:05:28:01:f6:1d:4e:cc:68:77:7a:74:ec:95:
09:26:f3:95:ce:c8:55:de:8b:fe:9d:38:a1:62:06:
a7:5d:e7:30:4c:7a:91:cc:0c:a1:d5:c9:9c:41:69:
07:84:ac:89:dd:a0:48:55:c2:44:a5:fc:c5:7f:af:
e3:1b:3f:d9:36:14:40:13:23:95:2c:9b:a0:86:cb:
9a:88:10:58:42:db:f7:ea:00:7a:ca:e9:2a:96:20:
eb:4e:6c:ca:41:da:0f:1e:89:62:9f:c5:3a:98:48:
fe:52:10:c4:65:2d:62:e8:0e:66:d4:d8:df:c6:0c:
7b:74:5e:ac:d8:64:f4:30:51:6c:e9:5c:52:9b:64:
5c:f6:48:2c:a8:37:0c:63:bf:08:57:d9:27:77:9e:
ec:96:1f:8f:2f:ff:35:bc:a1:ab:0d:dc:b5:6d:43:
94:fc:f6:1e:1b:4b:0f:8f:bd:c3:62:ee:71:fb:e9:
6c:23:ea:98:54:00:09:8b:70:13:b4:74:aa:a0:49:
ec:dc:bb:62:36:31:e6:ff:b2:76:4e:9e:ca:b7:09:
6a:ea:bc:2b:ca:ae:87:30:42:c5:b8:9f:07:36:93:
bb:04:4e:d1:bf:fc:ad:44:16:3b:81:54:f0:c0:2b:
fb:9d:40:de:d2:a1:9f:c7:41:f0:92:db:ff:61:9a:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:69:38:8A:51:06:7B:A7:C8:D9:44:96:ED:A7:17:4D:97:A0:AC:B5
X509v3 Authority Key Identifier:
keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:50:8a:53:4f:66:17:19:cc:45:09:dc:b5:4d:13:ea:8e:00:
fe:60:11:4d:81:78:34:1d:a7:e1:77:23:87:ab:83:c8:0e:4b:
60:4e:c1:a8:c3:0e:34:57:75:c1:f9:81:b6:97:08:19:49:dd:
1a:7f:6b:73:4f:6a:f3:3c:f1:c8:04:e6:09:74:ed:4e:9a:c5:
a1:ed:4d:e8:34:fa:b9:11:da:a0:8c:93:46:a8:c4:a7:10:67:
a2:f4:08:9c:db:86:ad:87:20:5a:63:e3:f3:c9:46:6c:98:ce:
4a:c8:ff:14:22:81:72:be:a3:74:22:2a:62:d2:b2:22:ad:c6:
5d:77:3e:06:43:d8:1e:85:84:05:7f:db:c2:0f:e2:3e:83:25:
c7:53:b0:ed:93:7c:87:55:89:78:b3:3e:30:fd:02:81:98:4e:
70:7f:7e:08:6f:e9:a7:c5:b4:83:65:96:db:61:25:1a:c9:a6:
cb:4b:a0:bf:e7:dd:5d:8a:02:e5:40:5e:40:c4:ac:b4:b2:ea:
fa:ee:9a:48:48:2a:52:da:ce:53:4e:61:00:73:91:a8:e1:20:
27:9c:5f:1f:4a:6c:b5:c4:3f:c2:75:a6:a5:86:dc:e6:ce:fd:
3c:7d:3d:9e:03:22:74:90:e2:28:7f:59:3d:36:57:76:f2:b4:
d1:29:91:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IPMKl68j7kTxuH9Id7XqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMjRmYjI4MTJhZTJmM2Q0ZDliYjQ1ODlkZDczMWU1NDY5
NzkxMDkwHhcNMjUwNjI4MjAwMDU2WhcNMjUwNjI5MjAwMDU2WjAzMTEwLwYDVQQD
EygyNDY5Mzg4YTUxMDY3YmE3YzhkOTQ0OTZlZGE3MTc0ZDk3YTBhY2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QUoAfYdTsxod3p07JUJJvOVzshV
3ov+nTihYganXecwTHqRzAyh1cmcQWkHhKyJ3aBIVcJEpfzFf6/jGz/ZNhRAEyOV
LJughsuaiBBYQtv36gB6yukqliDrTmzKQdoPHolin8U6mEj+UhDEZS1i6A5m1Njf
xgx7dF6s2GT0MFFs6VxSm2Rc9kgsqDcMY78IV9knd57slh+PL/81vKGrDdy1bUOU
/PYeG0sPj73DYu5x++lsI+qYVAAJi3ATtHSqoEns3LtiNjHm/7J2Tp7Ktwlq6rwr
yq6HMELFuJ8HNpO7BE7Rv/ytRBY7gVTwwCv7nUDe0qGfx0Hwktv/YZoRKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRpOIpRBnunyNlElu2nF02XoKy1MB8GA1UdIwQY
MBaAFP4k+ygSri89TZu0WJ3XMeVGl5EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jNjZmZjktMTBlYS00YjQ0LTkxNjkt
YzVmNjcwMjM5NzE4LzEvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jNjZmZjktMTBlYS00YjQ0LTkxNjktYzVmNjcwMjM5NzE4
LzEvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1CKU09m
FxnMRQnctU0T6o4A/mARTYF4NB2n4Xcjh6uDyA5LYE7BqMMONFd1wfmBtpcIGUnd
Gn9rc09q8zzxyATmCXTtTprFoe1N6DT6uRHaoIyTRqjEpxBnovQInNuGrYcgWmPj
88lGbJjOSsj/FCKBcr6jdCIqYtKyIq3GXXc+BkPYHoWEBX/bwg/iPoMlx1Ow7ZN8
h1WJeLM+MP0CgZhOcH9+CG/pp8W0g2WW22ElGsmmy0ugv+fdXYoC5UBeQMSstLLq
+u6aSEgqUtrOU05hAHORqOEgJ5xfH0pstcQ/wnWmpYbc5s79PH09ngMidJDiKH9Z
PTZXdvK00SmRHA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:35 2025 by rpki-client