Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: Aq+8ADmxUGtlFEcCYgOv/HzmxT8UcatvZFPInwboAt0=
Subject key identifier: DB:99:8F:DB:5A:8C:E8:54:55:8D:FE:36:76:3A:4E:DF:95:28:13:DC
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 0196B032E43238EDB39B0ACAC926EC8E31B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 11F4
Signing time: Thu 08 May 2025 14:00:47 +0000
Manifest this update: Thu 08 May 2025 14:00:47 +0000
Manifest next update: Fri 09 May 2025 14:00:47 +0000
Files and hashes: 1: HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa (hash: ty6hQDkhWUALNQQqzONCESXYcfpgf+zxWDRQRihR4ws=)
2: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: ApnW51Wi+8xXuwDzEl3F4DuRQnoeHtgLbi23/jJf0l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:32:e4:32:38:ed:b3:9b:0a:ca:c9:26:ec:8e:31:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: May 8 14:00:47 2025 GMT
Not After : May 9 14:00:47 2025 GMT
Subject: CN=db998fdb5a8ce854558dfe36763a4edf952813dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:83:a0:50:35:81:d0:ad:ed:74:b8:48:45:
56:67:32:13:94:e1:84:e0:ef:07:d1:81:0d:5c:63:
d3:27:9d:36:55:04:3a:d7:a8:1a:c0:3e:b2:89:2b:
5c:15:fd:16:1d:76:18:de:ad:de:cf:7f:29:54:fc:
6e:9d:2b:4f:7b:e4:47:5f:4b:53:55:3d:14:be:d5:
79:18:66:8d:77:44:38:1a:df:86:21:f6:24:e0:3b:
11:3b:53:69:2d:d5:86:1a:5c:87:52:8c:8d:b5:71:
46:16:64:62:f9:d4:49:9d:f7:49:93:4f:ae:65:70:
be:1f:83:78:3c:ac:28:7e:13:04:d0:3d:a3:c5:67:
16:3a:46:10:29:e4:aa:99:93:de:a8:74:f2:4c:2e:
ee:fe:0d:bb:7a:56:f4:b1:88:f7:08:99:ff:ca:0e:
82:b5:ed:25:b7:99:22:42:4a:0a:8b:18:df:6f:5f:
b4:c3:41:1d:92:e1:9c:75:d4:9d:d2:ce:12:5f:a4:
ce:e7:9f:50:55:72:51:0c:e2:b1:dc:1e:d6:a3:8d:
1d:16:94:de:97:d7:11:69:ad:a6:1e:fc:85:13:2b:
88:22:34:ff:2b:08:5a:2a:de:45:c1:81:55:eb:cf:
3b:27:8d:19:2a:27:ef:36:b6:83:f3:dd:fb:10:14:
c6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:99:8F:DB:5A:8C:E8:54:55:8D:FE:36:76:3A:4E:DF:95:28:13:DC
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:51:c2:fe:26:bc:1b:c5:aa:78:a5:7c:84:6e:28:b8:a2:f1:
fb:d8:98:7e:7e:26:76:8a:86:3a:a6:d5:e5:a0:57:a5:ec:98:
23:97:c4:ea:36:92:da:20:d8:b2:82:34:a9:9c:56:a8:2d:d6:
8f:4c:a2:8b:d3:1f:88:93:a8:7b:38:ae:8b:d8:50:9c:30:1f:
a5:16:3f:26:49:de:e3:87:69:3a:d7:bb:b3:90:bc:ba:34:cd:
92:83:5e:26:58:0c:73:3c:b9:cf:df:16:57:e0:29:d1:84:45:
2e:dc:7f:e5:c4:91:b4:9d:f7:23:46:54:9d:e4:0a:8d:41:15:
b9:3f:c5:31:9e:80:1b:a6:88:9c:47:89:f9:1f:ba:37:1d:b5:
2d:18:8f:26:13:09:e2:98:0e:f0:39:5f:c6:29:eb:45:74:27:
41:65:34:1c:74:fa:02:3a:bf:8a:40:fb:a3:78:f4:6f:d3:e8:
89:ef:f1:33:50:68:31:1d:0d:ee:49:98:41:52:3b:22:b5:a1:
08:fb:1d:0f:be:ad:07:63:67:c0:0e:5d:19:36:21:45:89:2d:
b5:f1:c1:8a:ee:ab:fb:26:62:b2:7a:41:3e:46:53:11:5d:bb:
5f:87:38:2b:ab:e1:04:ea:08:0c:ce:50:31:12:70:5a:4b:5a:
85:c9:76:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZawMuQyOO2zmwrKySbsjjG0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMDE4MTdkNDJjZmY4Yjg4MTRiYmQxNzAwYWRlOTE2NzQy
NjhlZDcwHhcNMjUwNTA4MTQwMDQ3WhcNMjUwNTA5MTQwMDQ3WjAzMTEwLwYDVQQD
EyhkYjk5OGZkYjVhOGNlODU0NTU4ZGZlMzY3NjNhNGVkZjk1MjgxM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqqDoFA1gdCt7XS4SEVWZzITlOGE
4O8H0YENXGPTJ502VQQ616gawD6yiStcFf0WHXYY3q3ez38pVPxunStPe+RHX0tT
VT0UvtV5GGaNd0Q4Gt+GIfYk4DsRO1NpLdWGGlyHUoyNtXFGFmRi+dRJnfdJk0+u
ZXC+H4N4PKwofhME0D2jxWcWOkYQKeSqmZPeqHTyTC7u/g27elb0sYj3CJn/yg6C
te0lt5kiQkoKixjfb1+0w0EdkuGcddSd0s4SX6TO559QVXJRDOKx3B7Wo40dFpTe
l9cRaa2mHvyFEyuIIjT/KwhaKt5FwYFV6887J40ZKifvNraD8937EBTGFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuZj9tajOhUVY3+NnY6Tt+VKBPcMB8GA1UdIwQY
MBaAFIsBgX1Cz/i4gUu9FwCt6RZ0Jo7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDct
ZDdhNjYwZDRjYWFkLzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDctZDdhNjYwZDRjYWFk
LzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1HC/ia8
G8WqeKV8hG4ouKLx+9iYfn4mdoqGOqbV5aBXpeyYI5fE6jaS2iDYsoI0qZxWqC3W
j0yii9MfiJOoeziui9hQnDAfpRY/Jkne44dpOte7s5C8ujTNkoNeJlgMczy5z98W
V+Ap0YRFLtx/5cSRtJ33I0ZUneQKjUEVuT/FMZ6AG6aInEeJ+R+6Nx21LRiPJhMJ
4pgO8DlfxinrRXQnQWU0HHT6Ajq/ikD7o3j0b9Poie/xM1BoMR0N7kmYQVI7IrWh
CPsdD76tB2NnwA5dGTYhRYkttfHBiu6r+yZisnpBPkZTEV27X4c4K6vhBOoIDM5Q
MRJwWktahcl28Q==
-----END CERTIFICATE-----
Generated at Thu May 8 17:07:27 2025 by rpki-client