Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
File: IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json)
Hash identifier: siA0SCqEtPNYhlc1QpiWoU2DukGLvFxsf2pz9Mz6YGU=
Subject key identifier: 84:18:91:C4:4E:7C:79:FC:9D:9A:95:9B:7A:E6:E2:5B:FF:E3:D4:30
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 0197B745B2C1E1E62AC85ECB585D48BF6C52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
Manifest number: 15C3
Signing time: Sat 28 Jun 2025 16:01:27 +0000
Manifest this update: Sat 28 Jun 2025 16:01:27 +0000
Manifest next update: Sun 29 Jun 2025 16:01:27 +0000
Files and hashes: 1: 43AxQadttxpukdA8vcrVdRW-t5w.roa (hash: kF6ocnoDs/XQiaEmG2F7DKuzq9j+uOFKWVL4Npen2L8=)
2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: tu/2TZnAA9ok9ARjw0Bm+dKHXiV5gwqajvppa3w8Jec=)
3: hSxMBu_igMJgBtfSOfQQ4Pj49pw.roa (hash: bffcp9BhaMHMTNVqsuxgb/xO/YYHeGPregGtKUrYEWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b2:c1:e1:e6:2a:c8:5e:cb:58:5d:48:bf:6c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Jun 28 16:01:27 2025 GMT
Not After : Jun 29 16:01:27 2025 GMT
Subject: CN=841891c44e7c79fc9d9a959b7ae6e25bffe3d430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:f8:ad:a4:8f:54:dd:10:17:d0:6a:ed:aa:
80:32:fc:d5:0f:31:58:ab:c6:db:8a:87:bc:6a:cc:
34:04:e2:be:2c:20:0b:d5:60:c8:9b:27:77:47:cd:
d8:cc:15:22:99:0f:c1:f4:27:5f:8c:87:b6:d0:e9:
0b:b8:8b:58:27:a3:c3:7e:cb:a7:15:9f:d1:fa:fd:
7f:d1:ff:f9:a5:93:eb:93:f1:ad:33:98:61:b9:e7:
45:fa:2e:b8:3d:23:34:81:c6:21:bf:e2:fe:87:63:
98:e1:16:d4:6a:59:b9:0a:53:b5:66:01:85:97:c5:
25:aa:bf:ef:cd:91:6e:12:44:ad:13:2b:d6:05:f7:
ea:69:53:a7:60:27:8a:77:1e:05:e9:48:f5:75:c8:
61:3f:19:dd:de:0d:ee:c5:b9:f1:30:6b:59:32:5f:
b5:b6:89:f9:d9:4b:8e:9f:3f:11:2f:8c:41:c4:82:
90:ea:cb:25:6a:13:90:df:8c:4d:c4:88:c6:d7:61:
5f:89:f5:a2:b7:ff:a5:f6:c1:83:c7:49:3d:2f:6f:
f5:10:f6:23:e8:55:ab:6e:fb:e0:5d:50:7f:94:e2:
b9:08:ef:94:f2:55:9c:89:98:ed:b8:8d:44:58:88:
4c:2e:7f:fe:63:b4:ac:77:f5:d9:fb:38:ba:0e:89:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:18:91:C4:4E:7C:79:FC:9D:9A:95:9B:7A:E6:E2:5B:FF:E3:D4:30
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:02:eb:87:a3:cb:6b:d6:6a:d8:df:17:74:24:e6:dc:10:dd:
8d:5d:22:73:24:23:16:ed:cd:a6:94:3f:5f:55:ba:19:37:0e:
24:36:bf:80:80:d4:8a:6b:22:86:28:99:7d:b3:31:b9:82:2b:
df:29:19:3f:ba:36:ff:eb:28:27:38:c3:f5:6b:69:c3:93:81:
3a:e8:0e:25:e5:e6:f6:d0:4f:f8:1e:c0:6a:25:23:b8:f7:cb:
e8:e5:f0:66:c4:b7:43:f0:bc:b0:12:92:e0:7a:43:dd:f6:3d:
38:f2:e4:28:14:e1:03:9a:f2:8a:a1:34:60:b8:6a:61:4b:c8:
f1:ac:41:72:c4:c3:99:3e:1d:57:99:78:c8:8a:96:92:36:2b:
c0:ec:ec:2a:45:3b:6c:59:41:51:e5:de:56:a4:09:3b:4f:11:
82:8f:07:7e:0b:76:79:10:12:47:df:0c:2b:bc:74:2c:84:c7:
a4:ba:89:a6:10:86:9e:c8:97:5c:67:93:bf:b5:b4:61:02:13:
99:21:08:c1:74:10:c7:40:6b:50:e7:40:92:b6:8e:8b:9c:d8:
17:8d:28:e5:eb:4c:18:99:c6:9b:df:4e:f6:82:21:b1:d7:bd:
89:a9:da:1a:72:30:1a:99:b0:d3:5c:cb:c5:1d:11:bd:14:f2:
cb:42:e6:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RbLB4eYqyF7LWF1Iv2xSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMzk0YTEyNWZhM2FjZTBjNDdhNmZlMzRmNDA4NmI0ZDNi
YTU1ODgwHhcNMjUwNjI4MTYwMTI3WhcNMjUwNjI5MTYwMTI3WjAzMTEwLwYDVQQD
Eyg4NDE4OTFjNDRlN2M3OWZjOWQ5YTk1OWI3YWU2ZTI1YmZmZTNkNDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3z4raSPVN0QF9Bq7aqAMvzVDzFY
q8bbioe8asw0BOK+LCAL1WDImyd3R83YzBUimQ/B9CdfjIe20OkLuItYJ6PDfsun
FZ/R+v1/0f/5pZPrk/GtM5hhuedF+i64PSM0gcYhv+L+h2OY4RbUalm5ClO1ZgGF
l8Ulqr/vzZFuEkStEyvWBffqaVOnYCeKdx4F6Uj1dchhPxnd3g3uxbnxMGtZMl+1
ton52UuOnz8RL4xBxIKQ6sslahOQ34xNxIjG12FfifWit/+l9sGDx0k9L2/1EPYj
6FWrbvvgXVB/lOK5CO+U8lWciZjtuI1EWIhMLn/+Y7Ssd/XZ+zi6DolguQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQYkcROfHn8nZqVm3rm4lv/49QwMB8GA1UdIwQY
MBaAFCM5ShJfo6zgxHpv409AhrTTulWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXpsS0VsLWpyT0RFZW1falQwQ0d0Tk82VllnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hZmQ0MTUtMGE4Ni00MzFmLWJjM2Et
ZDQzMjA3ZDYyZGZlLzEvSXpsS0VsLWpyT0RFZW1falQwQ0d0Tk82VllnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9hZmQ0MTUtMGE4Ni00MzFmLWJjM2EtZDQzMjA3ZDYyZGZl
LzEvSXpsS0VsLWpyT0RFZW1falQwQ0d0Tk82VllnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQLrh6PL
a9Zq2N8XdCTm3BDdjV0icyQjFu3NppQ/X1W6GTcOJDa/gIDUimsihiiZfbMxuYIr
3ykZP7o2/+soJzjD9Wtpw5OBOugOJeXm9tBP+B7AaiUjuPfL6OXwZsS3Q/C8sBKS
4HpD3fY9OPLkKBThA5ryiqE0YLhqYUvI8axBcsTDmT4dV5l4yIqWkjYrwOzsKkU7
bFlBUeXeVqQJO08Rgo8Hfgt2eRASR98MK7x0LITHpLqJphCGnsiXXGeTv7W0YQIT
mSEIwXQQx0BrUOdAkraOi5zYF40o5etMGJnGm99O9oIhsde9ianaGnIwGpmw01zL
xR0RvRTyy0LmwA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:15 2025 by rpki-client