Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
File: iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft (raw, json)
Hash identifier: 9ewb8oMk+D5t0axP0W8xzOo+4JLtCxfpgIz31dxoSzU=
Subject key identifier: 56:C2:63:84:05:6B:51:51:81:37:B3:F7:FF:CB:23:E6:E8:9D:01:20
Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Certificate issuer: /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Certificate serial: 0197B70EE33CAA79DF9E4C2FD695F571D378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:35 +0000
Manifest this update: Sat 28 Jun 2025 15:01:35 +0000
Manifest next update: Sun 29 Jun 2025 15:01:35 +0000
Files and hashes: 1: RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa (hash: pKnXAopaFCsi1rLxZMLLXoTv9xoOBoXWRjgeegBslqw=)
2: iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl (hash: +1wTNybO7WdpQi+jBoKKiC2kbNUjrOzHV4gQTpmm4xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e3:3c:aa:79:df:9e:4c:2f:d6:95:f5:71:d3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Validity
Not Before: Jun 28 15:01:35 2025 GMT
Not After : Jun 29 15:01:35 2025 GMT
Subject: CN=56c26384056b51518137b3f7ffcb23e6e89d0120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:c6:ab:2c:08:c9:13:c4:d3:ba:b1:78:8f:
bb:9a:25:8b:4d:27:03:b9:f0:86:b7:7c:50:7d:0f:
7e:1b:15:18:05:29:3c:4c:c7:8a:43:b5:7b:e1:77:
cb:2c:f4:74:cd:b1:57:7f:75:32:4b:ed:84:28:3d:
83:90:ad:d6:73:91:26:d6:22:c6:85:02:d9:ed:76:
48:2f:74:c9:26:ac:e5:15:58:0c:a6:ca:2f:dc:83:
4b:40:e9:63:33:15:c2:8d:00:ca:7d:98:d3:e2:24:
6b:3e:2f:65:ff:e5:2d:2d:50:2e:53:9f:0e:9c:21:
0d:b9:c3:20:af:8d:3b:ae:f8:b0:40:09:41:57:fd:
4f:94:9c:cb:96:d7:13:f3:e2:5f:7a:e6:a1:ab:3a:
6c:1e:ba:cc:8f:84:ac:02:6b:ed:23:b3:60:25:b8:
07:8b:7a:d0:b1:c8:80:25:36:44:c8:ed:3d:cb:71:
f4:48:dd:b0:3e:4b:c7:0e:08:ef:1a:31:ca:60:eb:
76:78:8f:91:9f:38:67:5a:fd:f5:91:69:9b:36:92:
1c:d3:88:95:68:86:ad:55:1b:31:91:ae:5a:87:91:
3b:b5:23:af:93:ca:f9:61:33:83:c4:20:33:cd:8b:
01:1e:a5:bf:c9:3d:c2:0c:dd:09:8f:a7:a6:59:78:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C2:63:84:05:6B:51:51:81:37:B3:F7:FF:CB:23:E6:E8:9D:01:20
X509v3 Authority Key Identifier:
keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e6:5f:6c:a0:d9:f2:65:b7:f8:f9:d5:3d:6f:f9:62:0a:ad:
e3:66:bb:07:9f:7f:cb:ca:54:55:58:39:16:2e:84:92:e0:7f:
7b:04:ee:73:f3:6e:c1:ed:8b:87:e4:89:97:58:f6:84:cc:dd:
c7:4d:d8:9b:c2:d7:f2:20:bc:d0:f3:91:a9:d4:c6:d7:54:04:
57:34:a9:c3:a8:23:a4:aa:91:ae:df:bb:58:50:79:e7:5f:c9:
6e:59:3a:06:3d:be:9d:b2:07:e8:6d:0e:18:55:f3:56:84:da:
6a:62:ac:bb:1d:f9:2e:fc:c6:34:1a:0c:12:ab:4f:f7:56:9d:
07:17:1e:bc:98:16:43:55:ae:d2:55:8f:da:ee:a9:14:e3:dd:
cb:49:9b:a2:fc:07:49:60:c8:66:78:ea:95:b1:9d:35:69:6b:
a1:20:a3:1e:23:5f:ae:c7:9d:07:e5:d1:39:fc:35:3a:51:7a:
2e:ca:df:97:cf:ac:f6:e0:af:6f:4f:2c:83:dd:93:54:0c:12:
a4:ed:55:61:0a:3b:0b:7c:b4:85:31:f0:d1:1d:37:1d:ba:ed:
e0:08:02:af:91:c0:2f:4e:2a:06:91:91:ee:de:c1:c0:94:d3:
87:80:84:74:c9:cb:65:d2:fc:14:c4:44:92:94:68:26:f6:ad:
7c:b9:77:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DuM8qnnfnkwv1pX1cdN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZDVlMDlhZjgyYTk2OTE4Yzg2YTY0N2I0ZWRjZDhlYmIy
MzgyMGQwHhcNMjUwNjI4MTUwMTM1WhcNMjUwNjI5MTUwMTM1WjAzMTEwLwYDVQQD
Eyg1NmMyNjM4NDA1NmI1MTUxODEzN2IzZjdmZmNiMjNlNmU4OWQwMTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHnGqywIyRPE07qxeI+7miWLTScD
ufCGt3xQfQ9+GxUYBSk8TMeKQ7V74XfLLPR0zbFXf3UyS+2EKD2DkK3Wc5Em1iLG
hQLZ7XZIL3TJJqzlFVgMpsov3INLQOljMxXCjQDKfZjT4iRrPi9l/+UtLVAuU58O
nCENucMgr407rviwQAlBV/1PlJzLltcT8+JfeuahqzpsHrrMj4SsAmvtI7NgJbgH
i3rQsciAJTZEyO09y3H0SN2wPkvHDgjvGjHKYOt2eI+RnzhnWv31kWmbNpIc04iV
aIatVRsxka5ah5E7tSOvk8r5YTODxCAzzYsBHqW/yT3CDN0Jj6emWXgJGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbCY4QFa1FRgTez9//LI+bonQEgMB8GA1UdIwQY
MBaAFIjV4Jr4KpaRjIamR7TtzY67I4INMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ZGJlOTMtNWRmOC00OGEzLTg2MTMt
MjkzYjYyNzk0ODUwLzEvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83ZGJlOTMtNWRmOC00OGEzLTg2MTMtMjkzYjYyNzk0ODUw
LzEvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+ZfbKDZ
8mW3+PnVPW/5Ygqt42a7B59/y8pUVVg5Fi6EkuB/ewTuc/Nuwe2Lh+SJl1j2hMzd
x03Ym8LX8iC80PORqdTG11QEVzSpw6gjpKqRrt+7WFB551/Jblk6Bj2+nbIH6G0O
GFXzVoTaamKsux35LvzGNBoMEqtP91adBxcevJgWQ1Wu0lWP2u6pFOPdy0mbovwH
SWDIZnjqlbGdNWlroSCjHiNfrsedB+XROfw1OlF6Lsrfl8+s9uCvb08sg92TVAwS
pO1VYQo7C3y0hTHw0R03Hbrt4AgCr5HAL04qBpGR7t7BwJTTh4CEdMnLZdL8FMRE
kpRoJvatfLl3og==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:31 2025 by rpki-client