Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
File: izTw-SddmAZir7tsr__k25ycnUc.mft (raw, json)
Hash identifier: 62gTXen5lc4ThRvc+eEQFCa5Lpw87Nnyv2etLhMfxtw=
Subject key identifier: 75:A1:6E:C1:9A:34:EF:F7:6D:4A:DE:DB:B2:49:B3:DE:7C:45:0C:10
Authority key identifier: 8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
Certificate issuer: /CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Certificate serial: 0197B9A1DCE42165F9C8E7F6AC88F0F83A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
Manifest number: 0A23
Signing time: Sun 29 Jun 2025 03:01:22 +0000
Manifest this update: Sun 29 Jun 2025 03:01:22 +0000
Manifest next update: Mon 30 Jun 2025 03:01:22 +0000
Files and hashes: 1: hJAJ_2fxLLSusp_yruUvCu2AhDE.roa (hash: 9Kpyn4uPgVd5tG1Jy8HfdjJb9f0PP8lWG2o85Fi6t4g=)
2: izTw-SddmAZir7tsr__k25ycnUc.crl (hash: TsN5/fD03EtxGD1gsk27njJd9unFPW7alTs516aVxGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:dc:e4:21:65:f9:c8:e7:f6:ac:88:f0:f8:3a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Validity
Not Before: Jun 29 03:01:22 2025 GMT
Not After : Jun 30 03:01:22 2025 GMT
Subject: CN=75a16ec19a34eff76d4adedbb249b3de7c450c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:01:d1:01:ab:5f:dd:73:09:9d:b9:31:50:
8c:61:c9:19:b7:c7:b4:78:8f:04:19:52:50:0c:58:
63:84:a1:1e:c7:f8:db:57:10:f8:20:2f:b5:71:0d:
5c:a6:dd:2f:9a:86:ea:99:4d:db:1b:25:31:4a:00:
22:ba:29:c1:71:ef:b0:53:f1:1b:08:5c:4b:9b:28:
05:47:f3:41:3b:f1:b5:38:9a:c1:f5:d7:e6:54:0b:
86:13:24:54:67:e8:f0:ee:39:ba:63:89:15:c7:12:
b6:72:75:b5:e4:d7:6e:b5:86:f8:e9:2d:19:b3:00:
98:de:df:3e:83:9c:d6:92:6f:16:02:0f:e7:78:ce:
e7:38:9c:ef:7f:e5:4d:23:77:b4:d0:5a:b0:20:de:
d3:8d:52:03:1e:ba:fb:af:03:b7:4c:ef:c7:29:35:
d3:06:b4:f9:df:fe:fa:af:76:43:03:a3:15:1d:60:
c1:7a:a5:6f:91:7b:8f:9a:fc:f5:fe:80:27:78:bd:
c2:f5:3e:36:cc:5b:c1:ab:da:00:2c:15:24:0a:2a:
4d:69:97:81:91:0c:03:e7:8d:50:70:98:95:71:7c:
87:90:e2:6d:e5:16:5a:69:86:d9:7f:42:6d:8e:f4:
39:5e:42:24:ac:1e:e0:5c:b9:c4:a5:99:c8:d0:31:
a8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A1:6E:C1:9A:34:EF:F7:6D:4A:DE:DB:B2:49:B3:DE:7C:45:0C:10
X509v3 Authority Key Identifier:
keyid:8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c1:db:6b:de:b0:11:6e:eb:e9:a4:f4:81:ff:9c:3d:5b:1e:
b4:7c:e1:46:d5:ae:53:c1:4c:29:e9:66:c9:34:f0:9a:c5:2e:
78:f1:e7:c9:61:72:c8:70:4c:06:5f:46:b7:3d:68:68:65:4b:
41:e5:04:bd:26:fe:f8:70:50:96:97:16:89:da:24:05:61:a3:
f9:bd:98:fd:83:37:fe:0d:42:04:63:6e:6c:ee:11:a2:1b:04:
e3:4c:e6:a7:09:e9:2c:55:dc:26:39:1b:5f:80:68:51:58:ba:
f5:41:cb:3c:5e:8c:a7:07:06:aa:90:d1:2c:6d:0b:10:05:9f:
5a:a6:fb:b6:8e:0a:6b:86:a4:d2:c0:91:a7:70:b6:48:bd:ad:
30:23:ef:c5:06:d0:b1:9d:9e:66:4c:de:82:5a:4d:f1:62:a5:
17:a1:0f:54:29:6b:05:5c:1b:bc:8a:cc:6a:8a:72:b2:11:73:
59:37:78:63:7e:30:de:c4:44:1b:4e:ba:9a:4a:b7:33:1d:38:
99:a2:0c:0c:5f:ef:97:71:b4:e6:37:f5:35:19:c6:c2:84:a4:
d0:60:cd:4e:57:6d:3c:0e:ca:62:37:79:ab:63:04:87:4d:6e:
e0:55:27:48:83:9b:25:86:4a:9d:68:91:74:a1:98:a0:bd:b9:
57:e4:db:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5odzkIWX5yOf2rIjw+DonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMzRmMGY5Mjc1ZDk4MDY2MmFmYmI2Y2FmZmZlNGRiOWM5
YzlkNDcwHhcNMjUwNjI5MDMwMTIyWhcNMjUwNjMwMDMwMTIyWjAzMTEwLwYDVQQD
Eyg3NWExNmVjMTlhMzRlZmY3NmQ0YWRlZGJiMjQ5YjNkZTdjNDUwYzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfAB0QGrX91zCZ25MVCMYckZt8e0
eI8EGVJQDFhjhKEex/jbVxD4IC+1cQ1cpt0vmobqmU3bGyUxSgAiuinBce+wU/Eb
CFxLmygFR/NBO/G1OJrB9dfmVAuGEyRUZ+jw7jm6Y4kVxxK2cnW15NdutYb46S0Z
swCY3t8+g5zWkm8WAg/neM7nOJzvf+VNI3e00FqwIN7TjVIDHrr7rwO3TO/HKTXT
BrT53/76r3ZDA6MVHWDBeqVvkXuPmvz1/oAneL3C9T42zFvBq9oALBUkCipNaZeB
kQwD541QcJiVcXyHkOJt5RZaaYbZf0JtjvQ5XkIkrB7gXLnEpZnI0DGo6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWhbsGaNO/3bUre27JJs958RQwQMB8GA1UdIwQY
MBaAFIs08PknXZgGYq+7bK//5NucnJ1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXpUdy1TZGRtQVppcjd0c3JfX2syNXljblVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9kYzkzMDktY2EwOC00MThlLWI1MTgt
MWFhMDE2NmUzN2U0LzEvaXpUdy1TZGRtQVppcjd0c3JfX2syNXljblVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9kYzkzMDktY2EwOC00MThlLWI1MTgtMWFhMDE2NmUzN2U0
LzEvaXpUdy1TZGRtQVppcjd0c3JfX2syNXljblVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcHba96w
EW7r6aT0gf+cPVsetHzhRtWuU8FMKelmyTTwmsUuePHnyWFyyHBMBl9Gtz1oaGVL
QeUEvSb++HBQlpcWidokBWGj+b2Y/YM3/g1CBGNubO4RohsE40zmpwnpLFXcJjkb
X4BoUVi69UHLPF6MpwcGqpDRLG0LEAWfWqb7to4Ka4ak0sCRp3C2SL2tMCPvxQbQ
sZ2eZkzeglpN8WKlF6EPVClrBVwbvIrMaopyshFzWTd4Y34w3sREG066mkq3Mx04
maIMDF/vl3G05jf1NRnGwoSk0GDNTldtPA7KYjd5q2MEh01u4FUnSIObJYZKnWiR
dKGYoL25V+TbYw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:09:58 2025 by rpki-client