Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
File: Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft (raw, json)
Hash identifier: xiI96tvbniBEjkNo9RPGJvClsZZiFGPWKocS15A5dUc=
Subject key identifier: 51:4F:FF:61:B3:0E:27:6F:32:5C:74:44:18:23:5D:5F:69:50:26:1E
Authority key identifier: 23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
Certificate issuer: /CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Certificate serial: 0196A79D892C41FC7A7F65637CD550FEE020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
Manifest number: 11D6
Signing time: Tue 06 May 2025 22:00:41 +0000
Manifest this update: Tue 06 May 2025 22:00:41 +0000
Manifest next update: Wed 07 May 2025 22:00:41 +0000
Files and hashes: 1: Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl (hash: U5S4A/lMnzy1a6jMLKBpot/UTJI6tyHllueKUWiwgMk=)
2: NCoehdmUvbF9hjrmMyI6BY_y1Tg.roa (hash: oKUbCP0RxT560oSwid+jhRboIkVkQAnDdP+HNoQNqUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:9d:89:2c:41:fc:7a:7f:65:63:7c:d5:50:fe:e0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Validity
Not Before: May 6 22:00:41 2025 GMT
Not After : May 7 22:00:41 2025 GMT
Subject: CN=514fff61b30e276f325c744418235d5f6950261e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:63:90:74:70:5e:6d:99:89:60:7d:19:60:3c:
1d:39:61:d5:5d:55:9d:36:d7:3d:9c:e2:b4:2e:34:
39:5b:a1:75:f7:5c:e8:ac:a6:a5:69:7e:1d:b0:20:
e6:4f:72:f3:6a:84:47:87:27:87:c6:52:e7:be:d4:
7d:37:8e:4a:54:a7:79:1f:b9:63:ef:30:c0:6b:1f:
e5:67:0a:61:71:b6:35:12:d7:ba:01:56:66:db:3c:
4a:9f:01:4c:21:54:fc:f7:64:27:69:59:f3:d5:8d:
b3:84:7e:a0:ab:e3:47:0f:d9:38:72:ba:67:72:fa:
64:e2:76:d1:c9:6e:5d:77:31:56:1e:ed:b4:5a:15:
6c:cc:12:79:25:fd:bd:50:27:80:d4:43:68:78:16:
84:03:28:7e:ca:29:56:b0:69:f8:54:a6:09:e9:8d:
d7:9f:5a:42:da:4c:52:e0:0f:2d:75:bc:db:72:70:
e3:e6:3a:18:a9:27:f3:3e:06:36:83:35:f6:00:29:
e9:90:53:15:41:a6:42:a6:92:22:3e:59:da:97:22:
6e:fd:d2:0d:c9:4d:5c:f4:e4:07:5d:6d:6e:37:ff:
3e:5e:d8:f9:88:ea:c2:45:55:e7:3d:8b:ac:d7:3b:
3d:ec:98:c4:bf:af:1c:50:d3:51:3d:f0:e8:e1:e4:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4F:FF:61:B3:0E:27:6F:32:5C:74:44:18:23:5D:5F:69:50:26:1E
X509v3 Authority Key Identifier:
keyid:23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e2:b1:05:c9:3d:72:7c:c4:6b:e5:12:1d:fd:f4:16:b4:68:
ba:d1:52:6d:fc:2b:13:cf:a4:7a:f1:65:5c:c7:f4:6f:73:1e:
24:92:c6:d3:e0:94:ef:db:10:55:20:44:6c:80:96:ef:bb:7a:
fa:ee:36:be:37:83:9b:a4:c0:39:31:fc:b1:f6:48:e8:dc:9e:
c4:31:6e:a8:25:df:8e:ed:96:42:8e:3e:27:f5:ad:08:d1:af:
aa:9a:76:d2:d0:13:46:2a:c6:89:87:97:f3:42:94:e1:cd:55:
13:64:03:a0:2b:cf:bd:63:61:84:4f:00:6b:b0:91:fd:d8:61:
b8:45:67:5b:79:d1:95:ec:29:d4:98:14:ad:59:7f:96:86:9e:
6c:a2:8e:ac:be:9c:b7:7c:1c:35:a5:3a:bb:9d:ba:1f:af:65:
c1:f0:26:80:4e:c7:6c:58:75:ab:fd:95:d4:7d:47:2f:90:dc:
83:c4:af:63:08:79:74:7a:5c:93:0e:e2:ae:92:74:f8:fa:59:
ab:08:5f:77:d1:36:38:92:8c:f3:01:2c:c6:6b:8c:42:e6:45:
ff:aa:28:37:b7:10:92:f1:6d:c2:03:9a:e3:df:cd:a8:fc:b7:
53:f5:5c:76:e0:d7:f6:38:cb:29:95:5a:84:8b:b6:06:0e:c0:
40:e9:7b:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZannYksQfx6f2VjfNVQ/uAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzM2UzODI4NDExYmFmYWIwMDZlNzVmZDBkZDVmNWY5ZWY1
NWVjMjUwHhcNMjUwNTA2MjIwMDQxWhcNMjUwNTA3MjIwMDQxWjAzMTEwLwYDVQQD
Eyg1MTRmZmY2MWIzMGUyNzZmMzI1Yzc0NDQxODIzNWQ1ZjY5NTAyNjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2OQdHBebZmJYH0ZYDwdOWHVXVWd
Ntc9nOK0LjQ5W6F191zorKalaX4dsCDmT3LzaoRHhyeHxlLnvtR9N45KVKd5H7lj
7zDAax/lZwphcbY1Ete6AVZm2zxKnwFMIVT892QnaVnz1Y2zhH6gq+NHD9k4crpn
cvpk4nbRyW5ddzFWHu20WhVszBJ5Jf29UCeA1ENoeBaEAyh+yilWsGn4VKYJ6Y3X
n1pC2kxS4A8tdbzbcnDj5joYqSfzPgY2gzX2ACnpkFMVQaZCppIiPlnalyJu/dIN
yU1c9OQHXW1uN/8+Xtj5iOrCRVXnPYus1zs97JjEv68cUNNRPfDo4eSgHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFP/2GzDidvMlx0RBgjXV9pUCYeMB8GA1UdIwQY
MBaAFCM+OChBG6+rAG51/Q3V9fnvVewlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNmNmZmMtYmU2NC00ZDA4LTk0YTYt
YTE1ZjBlNzhhNWE5LzEvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNmNmZmMtYmU2NC00ZDA4LTk0YTYtYTE1ZjBlNzhhNWE5
LzEvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuKxBck9
cnzEa+USHf30FrRoutFSbfwrE8+kevFlXMf0b3MeJJLG0+CU79sQVSBEbICW77t6
+u42vjeDm6TAOTH8sfZI6NyexDFuqCXfju2WQo4+J/WtCNGvqpp20tATRirGiYeX
80KU4c1VE2QDoCvPvWNhhE8Aa7CR/dhhuEVnW3nRlewp1JgUrVl/loaebKKOrL6c
t3wcNaU6u526H69lwfAmgE7HbFh1q/2V1H1HL5Dcg8SvYwh5dHpckw7irpJ0+PpZ
qwhfd9E2OJKM8wEsxmuMQuZF/6ooN7cQkvFtwgOa49/NqPy3U/VcduDX9jjLKZVa
hIu2Bg7AQOl7Zw==
-----END CERTIFICATE-----
Generated at Wed May 7 07:41:38 2025 by rpki-client