Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
File: iOpSVfiNS5VxicFC-KxWgcUMaKY.mft (raw, json)
Hash identifier: clrvBAt+Zoaa7dNL2rSjBYoFBb6J/2M91YwgGygSdEo=
Subject key identifier: 40:CF:B5:65:01:76:FB:DE:F3:E1:6A:80:6B:43:7F:2B:8B:5B:DD:4F
Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Certificate serial: 0197CDCE5883C3A2BDBD37D4412A4C438389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
Manifest number: 0845
Signing time: Thu 03 Jul 2025 01:02:21 +0000
Manifest this update: Thu 03 Jul 2025 01:02:21 +0000
Manifest next update: Fri 04 Jul 2025 01:02:21 +0000
Files and hashes: 1: OdavAlmZTVSUEn8DEUG0x7Aup4c.roa (hash: zvm6Bet4M7SswbKtgyqQXpZEDV7VAUhO/RsUj5lDxjA=)
2: iOpSVfiNS5VxicFC-KxWgcUMaKY.crl (hash: c0G2tvn38GAE+cY4BL34coOKroNVoWiJJQZ5uz8SeCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:ce:58:83:c3:a2:bd:bd:37:d4:41:2a:4c:43:83:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Validity
Not Before: Jul 3 01:02:21 2025 GMT
Not After : Jul 4 01:02:21 2025 GMT
Subject: CN=40cfb5650176fbdef3e16a806b437f2b8b5bdd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:2d:ab:75:84:2c:7c:81:09:33:05:e4:91:
48:8f:7d:6d:7a:13:f6:eb:99:9c:9b:6f:7c:c1:2a:
27:86:62:c1:7b:30:f6:2b:8e:58:e7:5c:f8:29:42:
70:12:c4:2c:06:e4:fb:f4:e3:c5:e1:4e:28:52:ab:
b8:95:8f:9e:60:c1:1c:e9:6b:2c:4f:13:f6:5b:e8:
dc:8d:31:64:68:41:29:46:91:0e:29:f7:34:48:9d:
20:7b:f7:a6:ca:d4:95:31:e0:c9:12:c2:09:d4:65:
2d:b1:f1:e5:63:03:49:8d:c7:69:7f:9e:05:2f:ae:
2e:fd:e7:63:50:03:d2:d5:e9:20:f6:29:b6:0b:dc:
6c:b4:80:c3:21:37:ed:0d:83:05:0e:86:df:e2:65:
03:b6:0b:1b:af:f7:6b:f8:35:04:2e:1a:ee:5e:bd:
f7:37:03:ac:43:c4:5b:42:f5:d1:76:81:57:25:85:
b6:94:f7:e7:cb:71:22:a1:fb:cf:d1:e0:de:5e:50:
97:b9:30:38:0b:f8:05:bd:19:de:19:b7:68:5a:21:
48:35:bb:fc:f4:19:3c:d8:eb:9a:39:74:b9:d8:1d:
93:e2:9b:c2:50:18:08:0c:31:f9:82:cb:2e:2b:5a:
37:b4:34:f5:bb:ad:a3:b0:2f:76:a3:5e:f2:52:75:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CF:B5:65:01:76:FB:DE:F3:E1:6A:80:6B:43:7F:2B:8B:5B:DD:4F
X509v3 Authority Key Identifier:
keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:48:bf:b2:ab:d2:be:0b:7a:bd:9b:24:6c:5e:3d:1e:d9:1d:
05:3d:1d:59:18:b6:45:2a:d7:2a:04:c2:fa:77:df:0a:3b:f9:
c6:c2:5d:26:f6:df:9d:69:58:8b:c6:db:8c:50:fa:64:6f:50:
26:05:58:4c:d4:a1:5e:b7:ef:9e:4a:3c:26:51:fc:79:1b:be:
8b:dc:b3:36:24:99:6d:69:1f:63:87:1a:ab:ee:b1:ff:0d:ed:
f4:38:31:2c:75:4f:2b:4b:1a:ea:cd:34:2c:96:c9:0f:f5:dc:
46:38:25:a0:61:ec:ac:05:4c:b0:b3:1b:92:a0:fd:d4:94:71:
f9:f6:6a:58:08:0f:92:c5:a9:3b:86:b6:7e:15:73:7c:a4:a5:
c5:1e:78:ab:8f:64:2c:b8:45:e6:8d:86:2f:6a:a6:cd:33:a2:
02:8b:c8:1d:60:72:3e:31:8b:7f:ef:21:21:b9:26:b9:2f:73:
e8:53:80:cd:92:b2:0f:45:9c:9c:f2:65:3a:6e:7f:2c:fb:52:
39:ac:eb:c1:6f:03:d7:b9:46:d5:8a:46:28:3e:16:a0:a9:8d:
7c:1a:f1:2d:e6:3e:e5:27:c4:92:04:21:6f:7b:0e:ab:58:cc:
66:c1:64:d1:51:04:51:3c:95:ed:1d:e3:b3:0c:1c:41:d5:6a:
31:8f:51:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfNzliDw6K9vTfUQSpMQ4OJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZWE1MjU1Zjg4ZDRiOTU3MTg5YzE0MmY4YWM1NjgxYzUw
YzY4YTYwHhcNMjUwNzAzMDEwMjIxWhcNMjUwNzA0MDEwMjIxWjAzMTEwLwYDVQQD
Eyg0MGNmYjU2NTAxNzZmYmRlZjNlMTZhODA2YjQzN2YyYjhiNWJkZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroctq3WELHyBCTMF5JFIj31tehP2
65mcm298wSonhmLBezD2K45Y51z4KUJwEsQsBuT79OPF4U4oUqu4lY+eYMEc6Wss
TxP2W+jcjTFkaEEpRpEOKfc0SJ0ge/emytSVMeDJEsIJ1GUtsfHlYwNJjcdpf54F
L64u/edjUAPS1ekg9im2C9xstIDDITftDYMFDobf4mUDtgsbr/dr+DUELhruXr33
NwOsQ8RbQvXRdoFXJYW2lPfny3EiofvP0eDeXlCXuTA4C/gFvRneGbdoWiFINbv8
9Bk82OuaOXS52B2T4pvCUBgIDDH5gssuK1o3tDT1u62jsC92o17yUnXS8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDPtWUBdvve8+FqgGtDfyuLW91PMB8GA1UdIwQY
MBaAFIjqUlX4jUuVcYnBQvisVoHFDGimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iYjg3MjctNzhmNy00MDFmLTkzMzkt
ZTdjZTI2ODg0YmU2LzEvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9iYjg3MjctNzhmNy00MDFmLTkzMzktZTdjZTI2ODg0YmU2
LzEvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEi/sqvS
vgt6vZskbF49HtkdBT0dWRi2RSrXKgTC+nffCjv5xsJdJvbfnWlYi8bbjFD6ZG9Q
JgVYTNShXrfvnko8JlH8eRu+i9yzNiSZbWkfY4caq+6x/w3t9DgxLHVPK0sa6s00
LJbJD/XcRjgloGHsrAVMsLMbkqD91JRx+fZqWAgPksWpO4a2fhVzfKSlxR54q49k
LLhF5o2GL2qmzTOiAovIHWByPjGLf+8hIbkmuS9z6FOAzZKyD0WcnPJlOm5/LPtS
OazrwW8D17lG1YpGKD4WoKmNfBrxLeY+5SfEkgQhb3sOq1jMZsFk0VEEUTyV7R3j
swwcQdVqMY9RKw==
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:12:09 2025 by rpki-client