Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
File: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft (raw, json)
Hash identifier: dWEXZcjhTOfsDhyARR2P03VqZ0yT5X7IwRt9gbGawdU=
Subject key identifier: DF:0A:85:4D:84:61:AF:A9:94:C1:D8:52:3D:D7:02:E3:95:19:33:48
Authority key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
Certificate issuer: /CN=218af26f9a36653f4d996719d4a410fe84af4861
Certificate serial: 0197B7B2EF1B02CEE3134BB83E0215E93E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
Manifest number: 047A
Signing time: Sat 28 Jun 2025 18:00:46 +0000
Manifest this update: Sat 28 Jun 2025 18:00:46 +0000
Manifest next update: Sun 29 Jun 2025 18:00:46 +0000
Files and hashes: 1: 8aRFc9FMZuB39L9ezbDQe4rTWqI.roa (hash: d0kPdTmIfua7sOVHFgh6TKa6BfDr4mbqEziPITcO1vw=)
2: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl (hash: 16KkdY0rXdJX4nJinTBhz6xb7TWQOwvK+nQsFIQw/ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:ef:1b:02:ce:e3:13:4b:b8:3e:02:15:e9:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218af26f9a36653f4d996719d4a410fe84af4861
Validity
Not Before: Jun 28 18:00:46 2025 GMT
Not After : Jun 29 18:00:46 2025 GMT
Subject: CN=df0a854d8461afa994c1d8523dd702e395193348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b1:8c:f0:fa:55:c6:2a:c2:22:f7:19:38:32:
97:9e:32:7d:db:9d:73:30:2f:0d:cd:6f:6d:c8:b8:
4c:bc:c8:e1:f5:42:bf:40:8c:28:b1:86:87:13:b9:
0e:31:5e:32:dc:97:c9:6d:d8:dd:7f:1f:dd:b4:ec:
d7:7f:ec:5f:3a:b9:75:42:95:e7:e2:d0:6f:26:93:
a6:6e:fc:87:96:ea:d2:65:d1:bb:59:11:92:18:7d:
28:42:9f:3f:41:c0:ab:93:bc:f3:83:e0:ab:d5:fe:
58:ab:bf:23:c3:88:0b:0a:ec:77:ce:66:88:57:b9:
b8:62:00:6c:dc:24:86:2b:e1:75:83:44:63:af:93:
91:45:fc:86:ed:2c:bb:1b:29:a8:0e:99:75:26:a4:
45:0e:f3:98:a6:e6:10:10:8f:fa:fe:1a:f6:9d:c3:
46:aa:86:8d:7f:65:9c:8a:6b:66:4c:df:01:e1:86:
fe:6a:93:eb:1b:d4:09:09:cb:4d:98:70:85:6b:5e:
55:34:aa:e2:71:b7:1b:c7:6c:0f:6d:8c:cb:53:8c:
33:4b:46:14:fb:ee:64:53:bd:76:a8:17:38:c4:3d:
29:34:f4:a3:3b:d9:6c:f4:59:f8:b0:2e:1e:d9:d4:
34:47:71:6b:92:ff:66:98:2a:00:62:0b:57:33:88:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0A:85:4D:84:61:AF:A9:94:C1:D8:52:3D:D7:02:E3:95:19:33:48
X509v3 Authority Key Identifier:
keyid:21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5b:4d:91:87:e7:b8:1c:49:a7:1d:f6:59:c4:17:8b:bc:b8:
00:01:b2:3b:78:56:bc:cd:06:dc:ab:2a:c1:1c:fb:34:8a:88:
d7:a2:7d:0e:a6:2c:da:5f:23:aa:70:86:98:3e:2c:75:95:78:
44:65:5d:f2:67:0d:5c:22:89:6d:87:32:f7:95:c0:ab:7a:db:
26:f2:d4:48:ca:a4:e1:1f:4a:ee:46:97:16:5d:d5:69:c5:db:
5d:92:fd:3f:b1:b2:02:9e:a7:04:86:a9:67:d5:ea:52:8b:51:
5d:77:d2:e0:c5:da:76:1b:3c:00:47:1f:a4:02:39:67:11:6a:
2c:70:1a:6a:e4:b2:52:d7:af:ee:ae:7d:29:a2:c9:32:94:fe:
67:d0:9e:25:29:cb:fb:29:fc:2f:18:4c:80:9e:99:d7:3d:ac:
c0:ff:9c:66:83:a7:25:43:e7:9c:82:e8:24:7b:53:db:bc:d6:
53:01:75:ea:81:b3:7c:e9:4e:49:78:dc:72:26:d2:72:6b:7b:
d2:7f:31:75:be:32:cd:83:b6:73:20:11:72:ce:c3:e8:19:0d:
10:03:c6:3f:c0:34:ed:c7:c0:9e:99:8c:d4:63:a6:2b:e1:32:
96:03:bb:3d:e2:47:94:a2:bb:ab:e1:33:5f:21:16:0a:d1:ff:
c3:2f:81:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3su8bAs7jE0u4PgIV6T54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOGFmMjZmOWEzNjY1M2Y0ZDk5NjcxOWQ0YTQxMGZlODRh
ZjQ4NjEwHhcNMjUwNjI4MTgwMDQ2WhcNMjUwNjI5MTgwMDQ2WjAzMTEwLwYDVQQD
EyhkZjBhODU0ZDg0NjFhZmE5OTRjMWQ4NTIzZGQ3MDJlMzk1MTkzMzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LGM8PpVxirCIvcZODKXnjJ9251z
MC8NzW9tyLhMvMjh9UK/QIwosYaHE7kOMV4y3JfJbdjdfx/dtOzXf+xfOrl1QpXn
4tBvJpOmbvyHlurSZdG7WRGSGH0oQp8/QcCrk7zzg+Cr1f5Yq78jw4gLCux3zmaI
V7m4YgBs3CSGK+F1g0Rjr5ORRfyG7Sy7GymoDpl1JqRFDvOYpuYQEI/6/hr2ncNG
qoaNf2WcimtmTN8B4Yb+apPrG9QJCctNmHCFa15VNKricbcbx2wPbYzLU4wzS0YU
++5kU712qBc4xD0pNPSjO9ls9Fn4sC4e2dQ0R3Frkv9mmCoAYgtXM4iwjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8KhU2EYa+plMHYUj3XAuOVGTNIMB8GA1UdIwQY
MBaAFCGK8m+aNmU/TZlnGdSkEP6Er0hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zZTQxZDUtYzdmMS00NjM3LWI5MzAt
MTg0NTg2NjAyODg3LzEvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zZTQxZDUtYzdmMS00NjM3LWI5MzAtMTg0NTg2NjAyODg3
LzEvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApltNkYfn
uBxJpx32WcQXi7y4AAGyO3hWvM0G3KsqwRz7NIqI16J9DqYs2l8jqnCGmD4sdZV4
RGVd8mcNXCKJbYcy95XAq3rbJvLUSMqk4R9K7kaXFl3VacXbXZL9P7GyAp6nBIap
Z9XqUotRXXfS4MXadhs8AEcfpAI5ZxFqLHAaauSyUtev7q59KaLJMpT+Z9CeJSnL
+yn8LxhMgJ6Z1z2swP+cZoOnJUPnnILoJHtT27zWUwF16oGzfOlOSXjccibScmt7
0n8xdb4yzYO2cyARcs7D6BkNEAPGP8A07cfAnpmM1GOmK+EylgO7PeJHlKK7q+Ez
XyEWCtH/wy+BvA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:09:26 2025 by rpki-client