Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
File: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json)
Hash identifier: XDi/G9lNhw02HfIx5NG+mJX5CMSKID1amgyKCs35GQc=
Subject key identifier: 1E:C8:B1:8A:58:FE:F9:67:AE:E4:A5:E4:87:CE:17:81:2F:19:9B:D1
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 0197D587991CB66F427E18AFC5D7B0773E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
Manifest number: 15C4
Signing time: Fri 04 Jul 2025 13:02:02 +0000
Manifest this update: Fri 04 Jul 2025 13:02:02 +0000
Manifest next update: Sat 05 Jul 2025 13:02:02 +0000
Files and hashes: 1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: 6d9F1oF7iBZeJn8ONxBUPSEuS+/rNTm2PxlQjEkoNZA=)
2: d-g1g1WIQH2eW5zQOoLECyf2CbU.roa (hash: 4hlHKC2roVEpNMRQA5ne6l615543DSp4qxsP/od40+A=)
3: kHVwAjV50K04XcEC52VZ9Z8xRlA.roa (hash: 2Boh063HYNHe4qTfS7TAeZC6aTKdY96/vHBa+9B6mso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:87:99:1c:b6:6f:42:7e:18:af:c5:d7:b0:77:3e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: Jul 4 13:02:02 2025 GMT
Not After : Jul 5 13:02:02 2025 GMT
Subject: CN=1ec8b18a58fef967aee4a5e487ce17812f199bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:20:75:69:02:61:c6:f4:6f:c0:a6:ea:f2:f4:
6b:fe:e3:92:fc:24:1c:b4:6e:98:f8:67:97:96:6f:
e9:b8:36:e8:47:80:b2:ce:d2:38:5c:80:b0:ce:2b:
47:e3:46:ca:9a:94:c8:f0:03:85:e2:c5:cc:75:3a:
04:23:c6:69:f4:62:d3:02:dd:e0:d2:75:bd:d6:5f:
d3:62:36:6d:47:6e:5a:a9:04:ba:0a:ec:6f:50:3a:
d8:fc:f2:9f:e1:9e:0b:03:90:48:a9:40:eb:3a:ec:
28:87:23:c4:2c:30:a4:59:66:e8:9e:81:56:4e:9d:
4b:32:39:6f:8f:1d:17:73:cc:fc:1c:44:b6:c8:a7:
44:ef:75:01:be:e6:2f:97:79:18:b1:cb:da:ef:fe:
0b:b6:2b:07:09:7f:75:e3:cf:1e:34:6d:50:09:ba:
e3:d6:bd:40:f4:cc:b3:88:88:bf:40:89:c3:01:57:
fd:71:17:77:0e:b2:a5:20:7a:ba:c9:26:5a:9a:e1:
01:40:17:b0:6f:02:28:c3:27:6c:22:5f:e6:66:4a:
a6:b1:ea:47:e5:4c:9a:7f:53:14:b1:10:ba:01:95:
0d:c1:1a:64:d9:bd:9b:7a:29:a6:b9:c1:f4:4d:f2:
a5:72:f2:7c:2b:a0:26:d4:f9:49:f2:74:db:dc:cc:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C8:B1:8A:58:FE:F9:67:AE:E4:A5:E4:87:CE:17:81:2F:19:9B:D1
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:23:05:62:63:17:be:96:be:70:23:13:8e:1b:22:6d:ef:4e:
b3:2f:bc:6b:e5:77:09:fa:81:52:31:5f:ad:bc:d6:21:b7:74:
1a:4e:eb:a2:82:a3:b5:bd:d1:bc:64:05:08:38:7a:37:93:f7:
18:a3:96:05:87:3b:ce:65:6b:5c:50:b8:fa:fe:81:ab:c6:6a:
45:1e:66:95:1f:56:ee:41:60:13:30:bb:88:5a:96:d1:d9:c7:
d5:97:38:38:55:9b:61:80:8f:48:77:5e:ca:20:b4:25:05:05:
6f:e7:5d:d2:a2:15:6b:f5:89:f9:9c:11:a6:19:54:87:08:2b:
95:b2:45:4c:e2:29:4f:64:80:8b:83:b3:20:4d:13:ee:42:a2:
28:ed:7a:9e:a0:99:aa:77:21:87:df:61:41:cd:0b:fb:3b:c9:
40:8e:d1:90:48:43:21:85:1b:a5:ae:6d:96:0b:94:d1:8a:48:
8d:e9:19:25:4e:98:e4:d7:59:b3:d2:02:12:f7:16:dc:e6:54:
a3:20:61:61:fc:69:dd:55:55:58:36:7a:1a:af:8c:6e:2e:2d:
1a:22:fb:22:fc:b7:e0:88:d1:39:2f:f4:30:37:38:c2:aa:0a:
86:24:ae:9b:0d:20:7c:1c:b5:fa:21:66:06:64:f0:91:98:9a:
c5:4e:f2:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfVh5kctm9Cfhivxdewdz51MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMmJlZDNmMzdjZDcyODI2NTExYzU3NDU2MGRlYjU1NTQy
NTUwZTQwHhcNMjUwNzA0MTMwMjAyWhcNMjUwNzA1MTMwMjAyWjAzMTEwLwYDVQQD
EygxZWM4YjE4YTU4ZmVmOTY3YWVlNGE1ZTQ4N2NlMTc4MTJmMTk5YmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iB1aQJhxvRvwKbq8vRr/uOS/CQc
tG6Y+GeXlm/puDboR4CyztI4XICwzitH40bKmpTI8AOF4sXMdToEI8Zp9GLTAt3g
0nW91l/TYjZtR25aqQS6CuxvUDrY/PKf4Z4LA5BIqUDrOuwohyPELDCkWWbonoFW
Tp1LMjlvjx0Xc8z8HES2yKdE73UBvuYvl3kYscva7/4LtisHCX91488eNG1QCbrj
1r1A9MyziIi/QInDAVf9cRd3DrKlIHq6ySZamuEBQBewbwIowydsIl/mZkqmsepH
5Uyaf1MUsRC6AZUNwRpk2b2beimmucH0TfKlcvJ8K6Am1PlJ8nTb3MzYQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7IsYpY/vlnruSl5IfOF4EvGZvRMB8GA1UdIwQY
MBaAFPIr7T83zXKCZRHFdFYN61VUJVDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGl2dFB6Zk5jb0psRWNWMFZnM3JWVlFsVU9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yOTRmYTEtZTkzOC00Y2QyLTlhODkt
MjkwNjJlODcwYjY0LzEvOGl2dFB6Zk5jb0psRWNWMFZnM3JWVlFsVU9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8yOTRmYTEtZTkzOC00Y2QyLTlhODktMjkwNjJlODcwYjY0
LzEvOGl2dFB6Zk5jb0psRWNWMFZnM3JWVlFsVU9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyMFYmMX
vpa+cCMTjhsibe9Osy+8a+V3CfqBUjFfrbzWIbd0Gk7rooKjtb3RvGQFCDh6N5P3
GKOWBYc7zmVrXFC4+v6Bq8ZqRR5mlR9W7kFgEzC7iFqW0dnH1Zc4OFWbYYCPSHde
yiC0JQUFb+dd0qIVa/WJ+ZwRphlUhwgrlbJFTOIpT2SAi4OzIE0T7kKiKO16nqCZ
qnchh99hQc0L+zvJQI7RkEhDIYUbpa5tlguU0YpIjekZJU6Y5NdZs9ICEvcW3OZU
oyBhYfxp3VVVWDZ6Gq+Mbi4tGiL7Ivy34IjROS/0MDc4wqoKhiSumw0gfBy1+iFm
BmTwkZiaxU7yhw==
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:21:51 2025 by rpki-client