Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
File: Ihm1ncLp80slUjDlYqPMph2usVU.mft (raw, json)
Hash identifier: ScSd/SWyn9JsAKuQwAXKRoScai2LbBfxpUHgXNoFiZM=
Subject key identifier: 5D:46:EF:62:36:56:2D:BB:25:D4:6F:90:54:81:D7:7A:6D:DC:96:44
Authority key identifier: 22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55
Certificate issuer: /CN=2219b59dc2e9f34b255230e562a3cca61daeb155
Certificate serial: 0197B7EA35CDEA12026347E042CC6A2A5BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
Manifest number: 1287
Signing time: Sat 28 Jun 2025 19:01:08 +0000
Manifest this update: Sat 28 Jun 2025 19:01:08 +0000
Manifest next update: Sun 29 Jun 2025 19:01:08 +0000
Files and hashes: 1: Ihm1ncLp80slUjDlYqPMph2usVU.crl (hash: bwj6cvp4Dq1ZTokK14Z0M7IPc2za8BFPOH5sRUTaxq0=)
2: Nk1hjqrpzwcKxMs_ejWJ395qXXo.roa (hash: uRWV+NR8DLzCaelMu4ig9EBtvA2PkzEXB7bjRzj91IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:35:cd:ea:12:02:63:47:e0:42:cc:6a:2a:5b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2219b59dc2e9f34b255230e562a3cca61daeb155
Validity
Not Before: Jun 28 19:01:08 2025 GMT
Not After : Jun 29 19:01:08 2025 GMT
Subject: CN=5d46ef6236562dbb25d46f905481d77a6ddc9644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:e7:93:e6:a8:41:04:b8:8f:54:34:82:ac:
cc:3d:89:9d:62:7f:7b:a6:24:05:be:0d:90:6c:b7:
57:b4:a2:04:28:5b:6a:5c:25:dd:e5:cc:df:f7:e4:
80:91:c6:d5:ec:a7:88:a6:2a:10:d2:bd:64:46:66:
43:60:99:dc:6e:b1:59:8a:c3:a0:a2:1d:b7:a3:af:
e5:e0:22:5c:da:72:b1:49:e0:7f:ea:4f:7d:c1:df:
47:20:fb:b2:5e:d5:6a:ce:10:0c:80:45:ae:c9:f8:
e9:df:9a:8c:65:d3:cf:20:68:e4:07:5d:79:d2:d3:
c8:8b:80:17:65:45:e5:85:02:1b:9d:ec:aa:a0:10:
59:75:d1:41:64:9f:b5:da:d4:04:25:8e:72:5b:74:
90:50:af:31:11:9a:19:91:98:b5:af:e1:cb:7c:96:
bf:76:b4:e1:3f:0c:7d:a1:8a:f3:c3:cc:17:3a:7c:
01:53:22:49:23:e9:f9:25:8a:b1:6f:b0:e5:fb:11:
de:71:fa:d8:c3:fe:1e:7a:31:3c:55:7e:96:59:4b:
d7:46:ed:6e:74:29:c1:4e:f8:26:37:c5:53:a8:55:
ec:28:9a:96:0e:fe:32:da:39:4a:9e:04:41:28:a7:
5e:6c:93:7d:b1:35:89:90:ed:da:6e:cb:e6:a8:60:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:46:EF:62:36:56:2D:BB:25:D4:6F:90:54:81:D7:7A:6D:DC:96:44
X509v3 Authority Key Identifier:
keyid:22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:69:03:0b:65:06:2f:99:e9:01:d6:34:2d:a9:b5:bc:85:11:
a0:fa:56:68:b2:07:a0:e3:af:e9:ae:c8:33:96:5d:96:fc:70:
67:53:a1:0b:b3:f1:87:4f:f8:2c:2a:b2:60:4c:f6:62:55:87:
fb:6e:a6:de:3d:56:69:0e:5b:d9:b0:ca:b2:83:38:a8:ab:b1:
86:49:43:05:b9:bf:9a:11:4e:36:fa:6c:8e:5a:48:0b:53:5f:
40:4a:b1:cb:96:59:ae:e1:a0:a7:f6:af:4f:84:c3:90:13:2d:
41:c6:16:4c:07:5c:9e:5f:88:a6:6a:88:14:f8:67:fa:11:5b:
2d:60:35:03:16:54:36:4c:57:11:70:e1:0d:46:e1:85:cc:f1:
7f:1f:70:5e:47:2a:d3:c0:87:57:4e:88:15:23:ae:59:72:c0:
b9:db:ae:49:50:b1:5f:9a:67:24:a2:38:8a:f1:20:13:57:87:
a3:91:b8:7b:e2:3f:ff:3a:be:bb:d2:66:44:dd:7b:34:bc:30:
55:8e:88:16:d5:ad:04:c2:ef:16:6b:43:9b:37:43:12:f5:64:
1b:27:5e:d8:f6:cd:48:85:c3:8e:bd:1a:bc:46:37:0e:28:1b:
e7:3d:4c:39:a6:cd:c0:02:fc:61:41:3d:0d:ba:dd:01:ef:7e:
d7:8d:20:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36jXN6hICY0fgQsxqKlvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMTliNTlkYzJlOWYzNGIyNTUyMzBlNTYyYTNjY2E2MWRh
ZWIxNTUwHhcNMjUwNjI4MTkwMTA4WhcNMjUwNjI5MTkwMTA4WjAzMTEwLwYDVQQD
Eyg1ZDQ2ZWY2MjM2NTYyZGJiMjVkNDZmOTA1NDgxZDc3YTZkZGM5NjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPnnk+aoQQS4j1Q0gqzMPYmdYn97
piQFvg2QbLdXtKIEKFtqXCXd5czf9+SAkcbV7KeIpioQ0r1kRmZDYJncbrFZisOg
oh23o6/l4CJc2nKxSeB/6k99wd9HIPuyXtVqzhAMgEWuyfjp35qMZdPPIGjkB115
0tPIi4AXZUXlhQIbneyqoBBZddFBZJ+12tQEJY5yW3SQUK8xEZoZkZi1r+HLfJa/
drThPwx9oYrzw8wXOnwBUyJJI+n5JYqxb7Dl+xHecfrYw/4eejE8VX6WWUvXRu1u
dCnBTvgmN8VTqFXsKJqWDv4y2jlKngRBKKdebJN9sTWJkO3absvmqGA4DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1G72I2Vi27JdRvkFSB13pt3JZEMB8GA1UdIwQY
MBaAFCIZtZ3C6fNLJVIw5WKjzKYdrrFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWhtMW5jTHA4MHNsVWpEbFlxUE1waDJ1c1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8zYmIzYTgtMWMzZS00MTU0LTkwYTkt
MDA2ZGUwZmE1MzQyLzEvSWhtMW5jTHA4MHNsVWpEbFlxUE1waDJ1c1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8zYmIzYTgtMWMzZS00MTU0LTkwYTktMDA2ZGUwZmE1MzQy
LzEvSWhtMW5jTHA4MHNsVWpEbFlxUE1waDJ1c1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmkDC2UG
L5npAdY0Lam1vIURoPpWaLIHoOOv6a7IM5ZdlvxwZ1OhC7Pxh0/4LCqyYEz2YlWH
+26m3j1WaQ5b2bDKsoM4qKuxhklDBbm/mhFONvpsjlpIC1NfQEqxy5ZZruGgp/av
T4TDkBMtQcYWTAdcnl+IpmqIFPhn+hFbLWA1AxZUNkxXEXDhDUbhhczxfx9wXkcq
08CHV06IFSOuWXLAuduuSVCxX5pnJKI4ivEgE1eHo5G4e+I//zq+u9JmRN17NLww
VY6IFtWtBMLvFmtDmzdDEvVkGyde2PbNSIXDjr0avEY3Digb5z1MOabNwAL8YUE9
DbrdAe9+140gZA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:09:30 2025 by rpki-client