Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
File: Iet_m1iVK56Ar897vboysmo00KE.mft (raw, json)
Hash identifier: DO+Q3IMtZnohB10wJY7q4aJbb3zWbasOb8pqn2W38YQ=
Subject key identifier: 08:92:65:1A:22:A6:AA:67:A6:B1:6D:D6:E5:0D:4D:6E:2F:6D:D8:23
Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
Certificate issuer: /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Certificate serial: 0197B77CBEC7A57FD5F87438C82093B50BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
Manifest number: 1289
Signing time: Sat 28 Jun 2025 17:01:35 +0000
Manifest this update: Sat 28 Jun 2025 17:01:35 +0000
Manifest next update: Sun 29 Jun 2025 17:01:35 +0000
Files and hashes: 1: Iet_m1iVK56Ar897vboysmo00KE.crl (hash: ceU5qcIx+DX/ld7syE+x9SEvIhEH2tj35/LvV7gzoi0=)
2: awEUUsb69K1CqabOYZXpO61MCTg.roa (hash: 9PPvHVQ3Mjg4T1Rer/rBY6hN8ex1RSBq3SwkRV1OUrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:be:c7:a5:7f:d5:f8:74:38:c8:20:93:b5:0b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Validity
Not Before: Jun 28 17:01:35 2025 GMT
Not After : Jun 29 17:01:35 2025 GMT
Subject: CN=0892651a22a6aa67a6b16dd6e50d4d6e2f6dd823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9f:91:7d:54:60:ee:7b:0e:28:10:a2:7b:a6:
58:4a:2f:f7:76:b3:07:9b:d6:f9:03:ee:74:c4:8f:
15:a0:bd:d8:38:bb:8a:6a:33:a7:9a:dd:60:cf:96:
ac:47:8b:09:b6:75:20:e2:3b:bd:73:13:18:37:8e:
92:7d:1d:6a:03:73:19:6c:e7:b2:ba:f0:2a:6e:4c:
f5:cb:b0:f2:46:c7:f1:41:45:8f:14:cb:fc:e6:fe:
ba:80:db:82:cc:42:69:a9:b9:cc:52:66:db:23:ba:
3a:61:a8:70:2b:38:75:a9:07:8e:ef:b5:8d:be:b4:
74:8b:e6:03:6f:e9:c3:9c:02:55:d7:f2:96:eb:2f:
6a:91:9b:db:5d:b4:33:01:9d:fc:47:ec:14:8f:8d:
ea:3f:ad:a3:7d:c2:66:b9:a7:a6:ba:5b:a9:f3:17:
de:8b:85:55:c7:4f:cc:b8:e1:1f:7b:61:50:2d:3c:
ad:47:59:06:32:2e:d1:22:ff:c9:96:44:dd:57:9d:
04:4b:4b:5f:6c:ef:50:3a:50:23:3f:64:0c:d8:48:
29:5d:8c:b2:4b:9b:1b:bd:92:9b:50:2c:9b:a2:bd:
f9:c2:5e:9d:9e:ca:da:79:09:f6:37:ab:81:28:d3:
60:81:99:6f:5f:e5:e6:c2:2e:3f:de:fb:38:de:5c:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:92:65:1A:22:A6:AA:67:A6:B1:6D:D6:E5:0D:4D:6E:2F:6D:D8:23
X509v3 Authority Key Identifier:
keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:72:90:41:c0:2f:28:72:a2:d2:66:b5:1b:20:9b:8b:79:3a:
bd:ec:5b:fb:c9:12:e4:64:01:7a:c4:7f:47:a6:4c:51:d5:8a:
41:c3:41:80:7d:8c:84:f4:c5:f9:eb:d5:dc:6f:94:73:ab:0f:
db:d5:b1:ab:51:91:1e:23:19:6d:e6:aa:23:f9:2f:63:f7:9f:
98:c6:bb:e1:af:27:fa:d6:40:65:f0:52:00:43:21:95:ad:0b:
e4:75:d5:47:5e:bb:71:a3:42:3e:ff:30:a8:24:bf:35:e1:b2:
c1:10:48:7f:3f:db:20:0b:64:39:55:69:75:66:bb:f9:46:89:
6a:ff:ad:ab:8c:cf:6c:ed:5b:8d:51:3c:87:bb:a6:d1:2e:68:
f1:14:50:7e:29:de:ae:6a:42:7d:78:42:47:ad:69:30:43:a4:
33:11:3f:82:00:1c:bb:22:24:71:09:94:d8:1a:3f:dd:16:00:
bf:6e:8e:96:e4:f7:78:27:de:a6:6e:22:1a:2b:94:69:d7:bd:
1d:18:bd:f1:e7:c5:ca:2a:4b:66:8d:d2:83:fb:0f:69:43:42:
0e:5e:d7:2c:0f:f0:a0:9a:b9:82:c1:ed:2f:65:2b:f6:d4:84:
73:d2:0f:a4:55:b8:fb:eb:fe:9b:95:b5:49:88:ae:33:f9:32:
3d:57:6a:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fL7HpX/V+HQ4yCCTtQvZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZWI3ZjliNTg5NTJiOWU4MGFmY2Y3YmJkYmEzMmIyNmEz
NGQwYTEwHhcNMjUwNjI4MTcwMTM1WhcNMjUwNjI5MTcwMTM1WjAzMTEwLwYDVQQD
EygwODkyNjUxYTIyYTZhYTY3YTZiMTZkZDZlNTBkNGQ2ZTJmNmRkODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z+RfVRg7nsOKBCie6ZYSi/3drMH
m9b5A+50xI8VoL3YOLuKajOnmt1gz5asR4sJtnUg4ju9cxMYN46SfR1qA3MZbOey
uvAqbkz1y7DyRsfxQUWPFMv85v66gNuCzEJpqbnMUmbbI7o6YahwKzh1qQeO77WN
vrR0i+YDb+nDnAJV1/KW6y9qkZvbXbQzAZ38R+wUj43qP62jfcJmuaemulup8xfe
i4VVx0/MuOEfe2FQLTytR1kGMi7RIv/JlkTdV50ES0tfbO9QOlAjP2QM2EgpXYyy
S5sbvZKbUCybor35wl6dnsraeQn2N6uBKNNggZlvX+Xmwi4/3vs43lznbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiSZRoipqpnprFt1uUNTW4vbdgjMB8GA1UdIwQY
MBaAFCHrf5tYlSuegK/Pe726MrJqNNChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kNmRiNDYtODViMS00MjBjLThjZTct
ZjdkYWJiMGQyNzg3LzEvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kNmRiNDYtODViMS00MjBjLThjZTctZjdkYWJiMGQyNzg3
LzEvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3KQQcAv
KHKi0ma1GyCbi3k6vexb+8kS5GQBesR/R6ZMUdWKQcNBgH2MhPTF+evV3G+Uc6sP
29Wxq1GRHiMZbeaqI/kvY/efmMa74a8n+tZAZfBSAEMhla0L5HXVR167caNCPv8w
qCS/NeGywRBIfz/bIAtkOVVpdWa7+UaJav+tq4zPbO1bjVE8h7um0S5o8RRQfine
rmpCfXhCR61pMEOkMxE/ggAcuyIkcQmU2Bo/3RYAv26OluT3eCfepm4iGiuUade9
HRi98efFyipLZo3Sg/sPaUNCDl7XLA/woJq5gsHtL2Ur9tSEc9IPpFW4++v+m5W1
SYiuM/kyPVdqNA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:16 2025 by rpki-client