Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json)
Hash identifier: RJRZHtoQBVvJ9NzIJquDn8KFGscPxSxlV9G7jXv7zOY=
Subject key identifier: 16:E1:FD:62:D3:94:9D:C9:8D:1E:C5:E1:12:8B:EC:E7:D1:85:5C:05
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial: 0196BE5C715007BED6069D6C80EC2C575DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
Manifest number: 03B9
Signing time: Sun 11 May 2025 08:00:51 +0000
Manifest this update: Sun 11 May 2025 08:00:51 +0000
Manifest next update: Mon 12 May 2025 08:00:51 +0000
Files and hashes: 1: 65OBtTjCvSppmw7kLz43nf5_Bv0.roa (hash: gdoaQ1Q9gp77JEHF6QFUxphPMS2cWPxD6n6ohLQUaSY=)
2: 7KVtKRza7VDnZMrMe02kpGBrUpg.roa (hash: eDnVdL3nLyal8dEfu0dA+KtEtGPaNa6zd/fLOYxM2vg=)
3: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: iWEGEcmrUvlQzh5PRDSvD8/xQvZ01lgxcljqVu6qAcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:71:50:07:be:d6:06:9d:6c:80:ec:2c:57:5d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Validity
Not Before: May 11 08:00:51 2025 GMT
Not After : May 12 08:00:51 2025 GMT
Subject: CN=16e1fd62d3949dc98d1ec5e1128bece7d1855c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:dd:6b:18:63:09:f7:f9:e6:32:99:1c:c4:
7a:f0:11:1e:1a:a5:46:fd:46:ca:18:55:7c:f9:87:
2c:dc:38:7f:69:d8:e3:22:bb:ba:34:f5:82:f5:b3:
c5:85:45:4a:71:c7:83:25:d0:be:12:37:06:27:a9:
e5:53:5e:f0:af:3d:b0:f8:17:c1:57:e6:ec:e9:32:
21:fd:c5:fe:73:d3:31:78:8b:4c:07:ed:07:ee:ed:
89:fb:90:f0:48:c4:c0:2e:27:e6:aa:cb:3b:ce:ce:
19:8c:4c:b3:d6:cd:88:02:3f:bc:77:1d:15:e5:2c:
67:fa:09:13:0c:87:b1:78:71:26:95:61:f8:2e:bd:
25:bb:87:ac:43:dd:f8:12:bf:d5:32:ab:88:ea:1c:
15:de:31:ba:fe:dc:20:02:39:2a:e3:65:cb:cf:6b:
a2:7e:4e:05:00:10:cc:c8:8a:b9:cc:72:07:2a:15:
cc:df:61:7b:72:c9:2d:b9:78:d4:ab:0d:8e:a2:30:
ae:6c:01:70:6b:db:86:f3:25:ad:19:62:41:47:67:
55:a4:9b:c9:21:fe:c1:f1:16:31:88:52:72:56:53:
e5:83:68:f3:2d:20:84:04:d8:9b:d5:a3:8c:59:4a:
b2:35:a3:4a:a0:7a:6d:a9:5f:0e:29:02:69:e7:66:
63:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E1:FD:62:D3:94:9D:C9:8D:1E:C5:E1:12:8B:EC:E7:D1:85:5C:05
X509v3 Authority Key Identifier:
keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2d:68:19:d9:c0:29:66:63:94:78:3e:be:e9:a7:7f:89:dd:
1f:d6:40:69:05:09:49:15:1b:0e:bb:8e:7b:31:27:14:24:e2:
d7:fc:62:28:26:a9:ff:bc:6b:a3:9e:3c:76:12:d8:bd:dd:9e:
0b:37:22:13:87:73:f3:ab:ba:65:8b:8d:b2:bb:31:b4:e5:b3:
d9:b0:5d:c5:23:e0:23:e3:66:5e:03:45:5d:f4:c5:e2:d5:29:
72:85:da:ba:2b:ed:30:47:49:49:ad:cd:04:2f:c0:81:c8:9a:
e0:4f:d3:8d:2f:b5:e4:da:3d:da:7c:fa:9c:f1:3a:a8:7f:04:
b6:d4:ba:e7:17:3e:98:b9:73:d6:89:75:16:09:98:78:c8:3b:
ea:0a:78:0d:52:3b:a0:04:c8:5d:96:10:e6:e1:37:1d:96:69:
1f:29:e0:8b:9c:65:9e:9d:d7:d1:90:2a:41:48:c4:ea:ad:89:
c6:1c:24:f2:7e:e7:15:9b:12:43:60:e0:a9:f8:19:c2:75:0a:
36:65:f0:f7:9e:57:8c:d7:12:d8:cf:b4:f5:c9:05:f2:16:84:
79:31:cc:e0:bf:f8:36:9c:63:b2:47:7f:85:45:18:7c:cb:84:
95:26:e7:d1:e1:cc:05:b5:22:70:2b:8b:4d:c7:2a:f6:46:1f:
27:d2:a6:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XHFQB77WBp1sgOwsV12yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNDZlNTYwYTNmNWNhYzdjNjRmZTBmMTNiZTY2M2Q5NGM4
NzE0NTMwHhcNMjUwNTExMDgwMDUxWhcNMjUwNTEyMDgwMDUxWjAzMTEwLwYDVQQD
EygxNmUxZmQ2MmQzOTQ5ZGM5OGQxZWM1ZTExMjhiZWNlN2QxODU1YzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow7daxhjCff55jKZHMR68BEeGqVG
/UbKGFV8+Ycs3Dh/adjjIru6NPWC9bPFhUVKcceDJdC+EjcGJ6nlU17wrz2w+BfB
V+bs6TIh/cX+c9MxeItMB+0H7u2J+5DwSMTALifmqss7zs4ZjEyz1s2IAj+8dx0V
5Sxn+gkTDIexeHEmlWH4Lr0lu4esQ934Er/VMquI6hwV3jG6/twgAjkq42XLz2ui
fk4FABDMyIq5zHIHKhXM32F7csktuXjUqw2OojCubAFwa9uG8yWtGWJBR2dVpJvJ
If7B8RYxiFJyVlPlg2jzLSCEBNib1aOMWUqyNaNKoHptqV8OKQJp52ZjyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbh/WLTlJ3JjR7F4RKL7OfRhVwFMB8GA1UdIwQY
MBaAFCFG5WCj9crHxk/g8TvmY9lMhxRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTkt
NWJlNDY3NGI0NjdjLzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTktNWJlNDY3NGI0Njdj
LzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWS1oGdnA
KWZjlHg+vumnf4ndH9ZAaQUJSRUbDruOezEnFCTi1/xiKCap/7xro548dhLYvd2e
CzciE4dz86u6ZYuNsrsxtOWz2bBdxSPgI+NmXgNFXfTF4tUpcoXauivtMEdJSa3N
BC/Agcia4E/TjS+15No92nz6nPE6qH8EttS65xc+mLlz1ol1FgmYeMg76gp4DVI7
oATIXZYQ5uE3HZZpHyngi5xlnp3X0ZAqQUjE6q2Jxhwk8n7nFZsSQ2DgqfgZwnUK
NmXw955XjNcS2M+09ckF8haEeTHM4L/4Npxjskd/hUUYfMuElSbn0eHMBbUicCuL
Tccq9kYfJ9KmhA==
-----END CERTIFICATE-----
Generated at Sun May 11 10:46:43 2025 by rpki-client