Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json)
Hash identifier: 5JZX8uAXTmnRD/FUhs1XTybR+OTvudxWgi6vsU7CDDM=
Subject key identifier: 67:B0:73:32:B1:1B:E9:5B:E8:29:53:5F:6B:26:92:5F:B8:B0:A5:43
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 0197D2BCD46939FF2264255257AE97B8AB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
Manifest number: 15CA
Signing time: Fri 04 Jul 2025 00:01:19 +0000
Manifest this update: Fri 04 Jul 2025 00:01:19 +0000
Manifest next update: Sat 05 Jul 2025 00:01:19 +0000
Files and hashes: 1: ExfUqNEW3Lyq9Nl7Jq22WcfJ1rw.roa (hash: 6SjZfPEMGV4QZNr6XzSlmm+VNkfjjPfYSSMSKKIpL5E=)
2: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: 3KADOWOLwrXgjuxfPIWmPVhvg8JjRxLwtB/dveM6eIg=)
3: vuckuXbmedLIJWITtJ1gJzQY8X0.roa (hash: BujWwxtiu31OcVkERDwp6qXjCF/qZpedTzNgbY+R4ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:bc:d4:69:39:ff:22:64:25:52:57:ae:97:b8:ab:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Jul 4 00:01:19 2025 GMT
Not After : Jul 5 00:01:19 2025 GMT
Subject: CN=67b07332b11be95be829535f6b26925fb8b0a543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:3d:ec:7a:65:39:de:eb:02:0b:4c:d0:22:
c8:18:dd:99:13:88:02:4c:20:4b:03:ab:57:31:cf:
53:f8:64:21:49:ff:82:71:62:fe:3b:3f:a5:ce:50:
6b:8c:bf:4b:ec:e6:ac:47:24:4c:ea:a7:c9:bb:b1:
9a:88:a8:69:99:bc:f3:f1:79:38:e0:1b:e8:f3:57:
d0:30:4b:ce:1f:90:71:32:45:02:64:76:e7:31:f4:
6d:52:01:03:f3:d0:3b:f1:4b:5c:10:3c:83:7f:69:
8f:17:b5:99:49:0a:08:24:8e:6a:85:26:f7:fc:75:
13:65:a2:55:77:2d:6f:23:b3:f5:04:c0:68:3e:d8:
ca:71:9a:21:ab:e3:c0:4c:42:43:0a:e8:5a:d4:50:
be:dc:f8:67:26:9b:47:77:2a:24:df:60:b2:a1:1e:
7a:1b:17:66:01:47:70:c8:61:07:9b:47:22:2e:ea:
98:76:f0:33:ab:38:b5:7b:75:d2:0a:78:8f:fb:18:
8e:57:43:0b:09:7a:62:d9:4e:e2:f8:ac:6a:d2:54:
f4:59:8b:22:73:67:c9:54:7f:a6:b1:f7:a0:a5:64:
53:bb:2b:c8:fe:80:8f:68:cf:ea:6f:c5:be:69:09:
a2:de:19:7f:ed:ec:0a:b9:92:02:47:b5:af:b0:60:
70:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B0:73:32:B1:1B:E9:5B:E8:29:53:5F:6B:26:92:5F:B8:B0:A5:43
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a5:2f:b4:b7:e1:d5:a3:21:cc:88:c1:1c:cb:fb:16:e0:b2:
d0:ef:74:91:f6:dd:a8:63:34:79:5d:63:5c:c3:18:42:14:fd:
9a:94:d6:c7:ce:d0:ff:23:d7:f4:c0:9c:ac:f7:04:35:e2:bb:
e7:0e:45:f8:d0:74:4d:dc:ac:a6:f6:9d:c8:21:ec:9d:95:9e:
fa:7a:e8:8d:2c:78:c2:9a:aa:ce:84:be:3f:3d:2a:7d:13:ca:
9a:92:50:8d:33:b7:d3:97:7c:5c:b0:59:ad:ee:7e:f5:81:2e:
91:2e:77:99:9a:51:aa:bc:0f:cd:f4:44:b1:93:6f:49:18:47:
b5:38:48:64:cf:4e:72:95:1f:5a:f4:cd:31:8f:40:4e:eb:59:
87:ca:88:08:5e:69:61:a8:81:fa:bf:88:0c:71:99:a4:85:a6:
4f:8a:75:af:b6:28:7c:f0:d7:c0:a0:22:35:41:dd:94:5e:19:
44:75:db:fb:4d:aa:45:0f:9e:ef:f6:e9:d1:ca:e0:18:1a:ef:
fe:d3:83:34:ab:13:1e:7e:02:b8:35:83:77:29:97:4c:a7:14:
15:f7:11:bb:54:d6:d5:74:17:07:76:8d:51:18:f2:be:21:55:
dc:77:01:cf:e5:31:e3:db:ab:cc:da:13:c1:52:37:6c:1c:28:
10:52:00:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfSvNRpOf8iZCVSV66XuKtuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMTY2MThiNzFmZmM4MGUxYzNmNDFlZDBkZmM4OWFiNWU5
NjNmZDIwHhcNMjUwNzA0MDAwMTE5WhcNMjUwNzA1MDAwMTE5WjAzMTEwLwYDVQQD
Eyg2N2IwNzMzMmIxMWJlOTViZTgyOTUzNWY2YjI2OTI1ZmI4YjBhNTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2k97HplOd7rAgtM0CLIGN2ZE4gC
TCBLA6tXMc9T+GQhSf+CcWL+Oz+lzlBrjL9L7OasRyRM6qfJu7GaiKhpmbzz8Xk4
4Bvo81fQMEvOH5BxMkUCZHbnMfRtUgED89A78UtcEDyDf2mPF7WZSQoIJI5qhSb3
/HUTZaJVdy1vI7P1BMBoPtjKcZohq+PATEJDCuha1FC+3PhnJptHdyok32CyoR56
GxdmAUdwyGEHm0ciLuqYdvAzqzi1e3XSCniP+xiOV0MLCXpi2U7i+Kxq0lT0WYsi
c2fJVH+msfegpWRTuyvI/oCPaM/qb8W+aQmi3hl/7ewKuZICR7WvsGBwlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGewczKxG+lb6ClTX2smkl+4sKVDMB8GA1UdIwQY
MBaAFIoWYYtx/8gOHD9B7Q38iatelj/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUt
MjkxYWFlZGQ1OGNjLzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUtMjkxYWFlZGQ1OGNj
LzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKUvtLfh
1aMhzIjBHMv7FuCy0O90kfbdqGM0eV1jXMMYQhT9mpTWx87Q/yPX9MCcrPcENeK7
5w5F+NB0TdyspvadyCHsnZWe+nrojSx4wpqqzoS+Pz0qfRPKmpJQjTO305d8XLBZ
re5+9YEukS53mZpRqrwPzfREsZNvSRhHtThIZM9OcpUfWvTNMY9ATutZh8qICF5p
YaiB+r+IDHGZpIWmT4p1r7YofPDXwKAiNUHdlF4ZRHXb+02qRQ+e7/bp0crgGBrv
/tODNKsTHn4CuDWDdymXTKcUFfcRu1TW1XQXB3aNURjyviFV3HcBz+Ux49urzNoT
wVI3bBwoEFIAtA==
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:22:59 2025 by rpki-client