
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
File: iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json)
Hash identifier: W74xG3CTPlQMbYgRyW88/KX+ewBU+timg7na5UsjFHM=
Subject key identifier: 35:51:58:AF:B6:5D:2B:78:54:9A:CD:F2:60:90:5C:07:0A:FF:B8:A8
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Certificate issuer: /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial: 0197B8FD0B9AF7BD7C11A0944DB821AB7F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
Manifest number: 02F4
Signing time: Sun 29 Jun 2025 00:01:20 +0000
Manifest this update: Sun 29 Jun 2025 00:01:20 +0000
Manifest next update: Mon 30 Jun 2025 00:01:20 +0000
Files and hashes: 1: 5ROabaZ0IQjGvjydG24dxkFdbIw.roa (hash: VZzap9WlH6EGkLU7RiUuipaz7yv8laZyaoXJmwbYxFo=)
2: KNoplKbnalbBlNJ0HrGiOS5fwgk.roa (hash: 6g25L6YriR7F4NqmIjLUqgHXTaSIa9NMu6Z6ggsvzHE=)
3: alNy-myxrA734TUoeZ1JVeikh6c.roa (hash: OCkDLXElKJB9eMUhsdq5dMT5WhX6caAwH3DuhC8oZvM=)
4: gdHjw5BAYBUGiQIKDf_rANYjbqo.roa (hash: rBCOEGXMkDk7MH6Epcgax70EgSCg7o0cp931QH6ZEmk=)
5: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: 9pY8japdnZz8rzvdkaA8cy+eHbFWTOTCRZmyHsZuQig=)
6: y7BcwDEAXqOJr6z4aNGCsX7xfw0.roa (hash: NHC7ZwJSkEI3d9bNJO6OCWV6hxqIR1IsXwJaROvY2+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:0b:9a:f7:bd:7c:11:a0:94:4d:b8:21:ab:7f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Validity
Not Before: Jun 29 00:01:20 2025 GMT
Not After : Jun 30 00:01:20 2025 GMT
Subject: CN=355158afb65d2b78549acdf260905c070affb8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:a9:a3:a4:cc:3b:c6:a2:42:9b:68:b3:fb:
e9:d2:2f:06:e5:e4:4e:c0:ab:0b:b9:b6:24:a8:3f:
72:53:18:36:d3:8c:59:a6:90:d4:5c:4e:9c:17:6b:
53:f6:32:fd:a3:1d:ae:7b:51:e9:a3:93:82:f7:cb:
d8:27:d5:0a:f9:00:1c:55:25:f1:d0:b6:94:16:65:
f0:4f:15:5c:23:3f:0a:84:40:32:e4:6c:7b:f8:1e:
18:98:8e:2a:bd:8c:f5:9e:e3:c6:bf:91:be:50:35:
17:75:6c:72:49:d8:16:95:10:1b:53:5f:6b:96:a5:
0b:b6:1c:5b:0b:05:1d:ae:ab:38:bd:f7:ed:45:21:
54:65:f8:ba:af:e6:2c:70:84:b1:e5:50:5f:79:02:
55:b6:77:09:df:fc:cd:8f:dd:eb:f6:4e:db:52:b6:
a2:e7:0e:d6:a7:ac:cd:95:50:95:b1:34:5f:cd:b0:
bd:8a:58:25:ee:74:c3:d7:4e:d8:93:ba:74:36:d0:
98:fb:3b:8a:d8:e5:d8:be:02:9f:d3:05:c1:91:2f:
36:c0:94:c1:2e:5a:71:eb:f2:6a:9c:9e:fc:50:e2:
ed:00:53:ea:4e:49:62:b5:1d:94:49:29:ad:89:b0:
0c:c7:11:dc:1e:78:03:c4:b8:b2:e0:fb:a7:a8:ca:
17:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:51:58:AF:B6:5D:2B:78:54:9A:CD:F2:60:90:5C:07:0A:FF:B8:A8
X509v3 Authority Key Identifier:
keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3c:1d:ea:59:7f:02:3c:e2:14:67:0f:c8:c7:7d:1e:e5:35:
84:c3:9a:bd:05:4b:97:23:dd:c7:0b:d4:fa:0f:e6:65:79:e9:
b0:08:48:5d:e7:59:4a:c0:2a:74:0c:ad:3a:91:d2:7b:47:a5:
d8:48:53:fa:7d:fd:1e:0a:b5:92:b9:84:67:2d:63:dd:cd:f3:
09:93:7f:ee:28:05:6e:33:aa:77:bc:7d:7a:34:09:85:28:e2:
8c:13:0a:12:58:f3:02:99:d3:ea:35:0f:f6:1f:6a:76:6b:09:
e2:b8:c5:7f:17:42:7b:3a:0f:f1:92:f8:2d:39:8d:89:9b:5a:
5f:34:c0:a4:c3:c4:a9:d3:a0:97:e5:4e:09:9e:4f:eb:35:5b:
b0:da:99:78:f9:34:ce:35:1b:42:af:cf:cc:59:7a:1a:6d:97:
31:6b:83:55:ea:76:32:0b:5f:ad:74:31:67:79:eb:ad:f2:94:
f3:d5:fb:58:d8:8f:4f:94:ac:90:61:29:54:a1:2c:a8:54:40:
1f:ae:97:60:e7:ee:b8:9e:5e:9f:32:5f:8d:f1:d9:a3:a5:ba:
1e:ce:ad:79:37:37:27:91:3b:92:43:e3:cf:80:bf:20:0e:59:
c3:87:59:f5:20:79:db:66:cc:66:2b:3c:e8:50:a0:9a:85:12:
76:3b:13:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/Qua9718EaCUTbghq38MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYWI0YzBjZjIxYzFhM2Q2ZWE0MTA2OGNiZTkwOGJlMzg4
ZTQ1MGEwHhcNMjUwNjI5MDAwMTIwWhcNMjUwNjMwMDAwMTIwWjAzMTEwLwYDVQQD
EygzNTUxNThhZmI2NWQyYjc4NTQ5YWNkZjI2MDkwNWMwNzBhZmZiOGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrepo6TMO8aiQptos/vp0i8G5eRO
wKsLubYkqD9yUxg204xZppDUXE6cF2tT9jL9ox2ue1Hpo5OC98vYJ9UK+QAcVSXx
0LaUFmXwTxVcIz8KhEAy5Gx7+B4YmI4qvYz1nuPGv5G+UDUXdWxySdgWlRAbU19r
lqULthxbCwUdrqs4vfftRSFUZfi6r+YscISx5VBfeQJVtncJ3/zNj93r9k7bUrai
5w7Wp6zNlVCVsTRfzbC9ilgl7nTD107Yk7p0NtCY+zuK2OXYvgKf0wXBkS82wJTB
Llpx6/JqnJ78UOLtAFPqTklitR2USSmtibAMxxHcHngDxLiy4PunqMoX9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVRWK+2XSt4VJrN8mCQXAcK/7ioMB8GA1UdIwQY
MBaAFIqrTAzyHBo9bqQQaMvpCL44jkUKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXF0TURQSWNHajF1cEJCb3kta0l2amlPUlFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NDBjMWUtMWE0Yy00Y2EyLWJkNTMt
NTM3YjFiNDlkZmU3LzEvaXF0TURQSWNHajF1cEJCb3kta0l2amlPUlFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NDBjMWUtMWE0Yy00Y2EyLWJkNTMtNTM3YjFiNDlkZmU3
LzEvaXF0TURQSWNHajF1cEJCb3kta0l2amlPUlFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsDwd6ll/
AjziFGcPyMd9HuU1hMOavQVLlyPdxwvU+g/mZXnpsAhIXedZSsAqdAytOpHSe0el
2EhT+n39Hgq1krmEZy1j3c3zCZN/7igFbjOqd7x9ejQJhSjijBMKEljzApnT6jUP
9h9qdmsJ4rjFfxdCezoP8ZL4LTmNiZtaXzTApMPEqdOgl+VOCZ5P6zVbsNqZePk0
zjUbQq/PzFl6Gm2XMWuDVep2MgtfrXQxZ3nrrfKU89X7WNiPT5SskGEpVKEsqFRA
H66XYOfuuJ5enzJfjfHZo6W6Hs6teTc3J5E7kkPjz4C/IA5Zw4dZ9SB522bMZis8
6FCgmoUSdjsTXQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:20:13 2025 by rpki-client