Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
File: Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft (raw, json)
Hash identifier: 381/09Bf6chsYdBM7yZMmI6p7f2lZVMoIMJ6nXyJgQ0=
Subject key identifier: 8E:C6:35:23:C4:4E:8D:20:29:0B:48:81:7C:93:B5:1E:36:68:6A:19
Authority key identifier: 23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
Certificate issuer: /CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Certificate serial: 0197B7EA8E917F093569E0D5FE59592CB907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
Manifest number: 1263
Signing time: Sat 28 Jun 2025 19:01:31 +0000
Manifest this update: Sat 28 Jun 2025 19:01:31 +0000
Manifest next update: Sun 29 Jun 2025 19:01:31 +0000
Files and hashes: 1: Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl (hash: 2HYU2xL9kLP6CqgplokrUzZnaUZWUeZLq91g3ADeDBQ=)
2: NCoehdmUvbF9hjrmMyI6BY_y1Tg.roa (hash: oKUbCP0RxT560oSwid+jhRboIkVkQAnDdP+HNoQNqUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:8e:91:7f:09:35:69:e0:d5:fe:59:59:2c:b9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Validity
Not Before: Jun 28 19:01:31 2025 GMT
Not After : Jun 29 19:01:31 2025 GMT
Subject: CN=8ec63523c44e8d20290b48817c93b51e36686a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:66:4a:39:df:89:c4:9e:6c:fc:1f:51:d1:
d7:4e:d7:27:f4:df:84:aa:85:05:41:11:d6:a4:c3:
a3:be:15:a5:c0:f9:9b:68:d5:ff:a2:6a:fa:16:1a:
56:47:3c:e8:61:ec:27:a0:f0:7f:6a:12:e6:2a:37:
51:cf:3b:69:d1:f1:b3:21:34:82:40:fc:e6:65:67:
dd:91:eb:5c:3e:2e:0f:d1:e7:90:f7:41:51:52:95:
07:c8:c3:dc:80:00:63:37:4a:b9:84:49:6d:30:8d:
3c:3c:28:17:cd:82:9f:a9:e2:e7:ad:b2:9e:63:66:
cc:8b:de:7d:67:6b:d0:45:94:70:8c:23:0c:f0:09:
c2:83:cb:cb:e6:97:84:33:e7:bd:d2:3c:88:21:8e:
cf:85:3a:71:12:1b:f7:c9:01:0c:a4:26:75:68:83:
a2:33:95:30:02:4c:94:c1:43:c7:00:b3:0e:95:0e:
75:c6:4f:77:7e:6a:e6:69:20:1e:04:e8:73:43:28:
f8:ac:26:48:f8:2a:8f:4f:31:af:61:f9:dd:1f:41:
10:39:17:b5:23:41:50:6e:66:17:30:4b:29:ca:57:
7f:51:6e:f0:1e:e0:84:80:25:3d:c2:95:ab:c6:f1:
7e:56:09:9a:47:76:0b:37:ba:55:d8:2f:fd:f3:4b:
f4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C6:35:23:C4:4E:8D:20:29:0B:48:81:7C:93:B5:1E:36:68:6A:19
X509v3 Authority Key Identifier:
keyid:23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0d:4f:fa:58:5b:3d:14:ad:f9:86:05:86:38:df:83:f1:b1:
02:50:70:77:a2:af:7e:3f:cc:50:6e:ac:35:f9:0b:88:89:db:
7d:e2:bf:a0:31:61:07:54:84:b4:15:e7:c6:27:af:f8:22:83:
1e:1b:60:35:43:d4:fe:21:20:1f:23:b4:50:69:3c:0d:68:53:
0a:de:18:45:5c:6c:20:6a:3d:ed:44:c7:df:2c:53:71:fd:5c:
1d:e9:1d:aa:a2:9d:b3:3c:0c:29:a3:03:7d:f7:71:7d:8e:fe:
74:8e:ff:e6:43:6a:43:e5:eb:5c:8d:b4:14:64:2a:b5:54:3f:
c7:f3:62:88:9e:97:ce:62:a7:75:d1:18:13:a1:18:30:96:08:
e6:28:9b:89:65:03:38:08:5f:73:82:79:85:3f:92:5e:71:28:
32:ba:82:88:f1:89:db:68:d9:ee:bb:fe:7c:4f:7d:71:09:75:
c2:2f:c3:f7:72:55:7f:8d:c7:43:5c:20:46:a7:be:3a:0f:72:
ef:8a:62:02:b8:6e:76:f7:d4:9a:aa:f2:6b:c7:a9:15:42:0f:
05:c4:f8:5d:27:6f:5d:e6:b6:60:2f:97:cf:2a:a0:e8:79:ef:
b0:9c:11:c9:5f:ea:de:ac:28:18:02:1d:e5:4e:cb:d1:5a:28:
08:06:16:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36o6Rfwk1aeDV/llZLLkHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzM2UzODI4NDExYmFmYWIwMDZlNzVmZDBkZDVmNWY5ZWY1
NWVjMjUwHhcNMjUwNjI4MTkwMTMxWhcNMjUwNjI5MTkwMTMxWjAzMTEwLwYDVQQD
Eyg4ZWM2MzUyM2M0NGU4ZDIwMjkwYjQ4ODE3YzkzYjUxZTM2Njg2YTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo5mSjnficSebPwfUdHXTtcn9N+E
qoUFQRHWpMOjvhWlwPmbaNX/omr6FhpWRzzoYewnoPB/ahLmKjdRzztp0fGzITSC
QPzmZWfdketcPi4P0eeQ90FRUpUHyMPcgABjN0q5hEltMI08PCgXzYKfqeLnrbKe
Y2bMi959Z2vQRZRwjCMM8AnCg8vL5peEM+e90jyIIY7PhTpxEhv3yQEMpCZ1aIOi
M5UwAkyUwUPHALMOlQ51xk93fmrmaSAeBOhzQyj4rCZI+CqPTzGvYfndH0EQORe1
I0FQbmYXMEspyld/UW7wHuCEgCU9wpWrxvF+VgmaR3YLN7pV2C/980v0ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7GNSPETo0gKQtIgXyTtR42aGoZMB8GA1UdIwQY
MBaAFCM+OChBG6+rAG51/Q3V9fnvVewlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNmNmZmMtYmU2NC00ZDA4LTk0YTYt
YTE1ZjBlNzhhNWE5LzEvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNmNmZmMtYmU2NC00ZDA4LTk0YTYtYTE1ZjBlNzhhNWE5
LzEvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkA1P+lhb
PRSt+YYFhjjfg/GxAlBwd6Kvfj/MUG6sNfkLiInbfeK/oDFhB1SEtBXnxiev+CKD
HhtgNUPU/iEgHyO0UGk8DWhTCt4YRVxsIGo97UTH3yxTcf1cHekdqqKdszwMKaMD
ffdxfY7+dI7/5kNqQ+XrXI20FGQqtVQ/x/NiiJ6XzmKnddEYE6EYMJYI5iibiWUD
OAhfc4J5hT+SXnEoMrqCiPGJ22jZ7rv+fE99cQl1wi/D93JVf43HQ1wgRqe+Og9y
74piArhudvfUmqrya8epFUIPBcT4XSdvXea2YC+Xzyqg6HnvsJwRyV/q3qwoGAId
5U7L0VooCAYW4Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:28 2025 by rpki-client