Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
File: iib0dtYIYlrR_gblK5dKn2bwFBo.mft (raw, json)
Hash identifier: hkoALmOLLbF+j4BW93KRI982vgHcZL7DpqtLe+VBtko=
Subject key identifier: 17:55:28:AA:29:F8:24:A8:B7:8C:35:3B:E9:63:BB:95:90:77:9C:04
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial: 0197B6D7A3577406B763108CCE1AB4D6E451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 14:01:14 +0000
Manifest this update: Sat 28 Jun 2025 14:01:14 +0000
Manifest next update: Sun 29 Jun 2025 14:01:14 +0000
Files and hashes: 1: VGVyrg_KWe6qJVf2EFW5rg282l8.roa (hash: no1Xp/fKJZHQHLgUjaAU6HFgcxae88YxDTT3wdaVfTw=)
2: iib0dtYIYlrR_gblK5dKn2bwFBo.crl (hash: 04diqH+n6dP5CBund20MC2wVr3ykIvFnXHPufr5Zfg8=)
3: jmjQM-Af7YixW0lhj7IQRUe7D0c.roa (hash: Tb54ESX/F3Guxq8pdf9XF/gmXcXHx+T4/bKA3b9RF5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a3:57:74:06:b7:63:10:8c:ce:1a:b4:d6:e4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Validity
Not Before: Jun 28 14:01:14 2025 GMT
Not After : Jun 29 14:01:14 2025 GMT
Subject: CN=175528aa29f824a8b78c353be963bb9590779c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:67:19:b7:60:21:b2:98:d6:0d:b7:cf:a5:
00:f2:87:e3:ca:d9:03:44:02:1f:78:0e:26:80:e9:
58:d5:ec:b2:88:be:88:4f:97:12:1b:d8:ca:9e:d0:
cf:85:8e:7d:97:86:76:5b:38:70:d9:c5:2c:d2:d6:
78:c0:06:41:97:1e:b2:a1:65:2a:04:1c:19:fb:fa:
32:95:ce:e7:18:02:22:a8:1c:db:c0:5d:5d:db:2d:
bc:ce:58:6a:bf:3c:45:4a:cb:c8:f5:20:be:32:70:
7d:f6:f8:b9:b0:61:48:a8:15:4c:26:7d:36:59:43:
1f:2f:e7:04:ca:e8:a5:ba:79:f0:21:99:64:83:c0:
80:cb:19:38:32:f7:d2:26:34:17:06:9e:d5:a0:c5:
26:80:0b:3b:92:92:30:6e:f7:e8:61:29:57:61:4f:
a4:5c:a2:a9:ff:c7:80:8d:e1:93:f2:20:38:97:db:
e9:1e:dd:49:cf:62:b8:b8:db:89:6f:7c:4f:a0:be:
df:9c:97:ca:be:86:7b:b9:a9:71:2c:4f:5e:f5:62:
46:57:96:bb:75:04:24:66:7a:2b:a6:69:0c:29:08:
3c:c8:d4:e1:74:44:33:c5:52:b9:41:18:1f:52:ea:
ba:36:55:bd:1a:03:08:ec:3a:a5:d9:7e:f3:8c:47:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:55:28:AA:29:F8:24:A8:B7:8C:35:3B:E9:63:BB:95:90:77:9C:04
X509v3 Authority Key Identifier:
keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2f:88:31:eb:d0:48:57:5b:e1:a7:3a:36:b5:33:0b:54:aa:
ef:a1:e3:c6:17:7a:2c:19:31:81:bc:9c:96:33:a0:a8:e4:8d:
93:6b:21:73:8b:c9:8d:ae:51:5d:15:14:58:d7:66:27:83:84:
0b:72:61:c4:fe:9e:b7:09:5c:0e:ce:16:ad:31:4f:12:7f:93:
a3:22:40:e0:07:42:4b:42:2e:d6:9c:38:01:de:1b:90:a3:60:
04:74:8a:51:6a:6b:03:bb:e7:93:62:a7:8c:18:e3:63:5f:32:
95:8e:9e:4f:cb:c7:99:a3:88:4b:11:5c:ee:12:15:89:ac:1e:
81:12:94:74:fe:62:55:79:69:97:07:c2:86:6f:9d:63:ce:4c:
66:60:1e:e3:71:f1:61:1a:d4:65:7b:db:25:5a:a0:b3:82:c8:
f9:72:72:b2:82:9c:ed:ae:b6:03:fa:37:26:42:3e:56:26:00:
a0:12:b2:17:8e:03:73:f0:3f:a1:ea:24:c1:ce:f7:51:cb:ee:
a0:eb:3a:dd:82:0c:e2:e8:1c:e7:e4:98:c2:8a:20:5b:a1:ff:
0c:87:fc:6a:b7:21:59:0d:36:3e:50:bb:0f:55:e2:34:ad:42:
56:f0:90:5a:fc:64:27:7b:07:52:e8:8c:86:7d:f2:ef:f0:d5:
c6:8b:a0:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216NXdAa3YxCMzhq01uRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMjZmNDc2ZDYwODYyNWFkMWZlMDZlNTJiOTc0YTlmNjZm
MDE0MWEwHhcNMjUwNjI4MTQwMTE0WhcNMjUwNjI5MTQwMTE0WjAzMTEwLwYDVQQD
EygxNzU1MjhhYTI5ZjgyNGE4Yjc4YzM1M2JlOTYzYmI5NTkwNzc5YzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusFnGbdgIbKY1g23z6UA8ofjytkD
RAIfeA4mgOlY1eyyiL6IT5cSG9jKntDPhY59l4Z2Wzhw2cUs0tZ4wAZBlx6yoWUq
BBwZ+/oylc7nGAIiqBzbwF1d2y28zlhqvzxFSsvI9SC+MnB99vi5sGFIqBVMJn02
WUMfL+cEyuilunnwIZlkg8CAyxk4MvfSJjQXBp7VoMUmgAs7kpIwbvfoYSlXYU+k
XKKp/8eAjeGT8iA4l9vpHt1Jz2K4uNuJb3xPoL7fnJfKvoZ7ualxLE9e9WJGV5a7
dQQkZnorpmkMKQg8yNThdEQzxVK5QRgfUuq6NlW9GgMI7Dql2X7zjEeqEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdVKKop+CSot4w1O+lju5WQd5wEMB8GA1UdIwQY
MBaAFIom9HbWCGJa0f4G5SuXSp9m8BQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWliMGR0WUlZbHJSX2dibEs1ZEtuMmJ3RkJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2It
ZDg0NmQxMDZiNWY3LzEvaWliMGR0WUlZbHJSX2dibEs1ZEtuMmJ3RkJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2ItZDg0NmQxMDZiNWY3
LzEvaWliMGR0WUlZbHJSX2dibEs1ZEtuMmJ3RkJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqS+IMevQ
SFdb4ac6NrUzC1Sq76Hjxhd6LBkxgbycljOgqOSNk2shc4vJja5RXRUUWNdmJ4OE
C3JhxP6etwlcDs4WrTFPEn+ToyJA4AdCS0Iu1pw4Ad4bkKNgBHSKUWprA7vnk2Kn
jBjjY18ylY6eT8vHmaOISxFc7hIViawegRKUdP5iVXlplwfChm+dY85MZmAe43Hx
YRrUZXvbJVqgs4LI+XJysoKc7a62A/o3JkI+ViYAoBKyF44Dc/A/oeokwc73Ucvu
oOs63YIM4ugc5+SYwoogW6H/DIf8archWQ02PlC7D1XiNK1CVvCQWvxkJ3sHUuiM
hn3y7/DVxougjg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:45:53 2025 by rpki-client