Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
File: Iyrza5wHnaCRgn2j0HycilI2y1Q.mft (raw, json)
Hash identifier: pof5mj3YRITmPGOu0yQJYz3guuG0AYGw2fMEM4uhaxo=
Subject key identifier: 99:8A:80:A7:3B:19:03:52:01:B7:E4:F9:14:C7:62:10:3B:84:0A:12
Authority key identifier: 23:2A:F3:6B:9C:07:9D:A0:91:82:7D:A3:D0:7C:9C:8A:52:36:CB:54
Certificate issuer: /CN=232af36b9c079da091827da3d07c9c8a5236cb54
Certificate serial: 0196BB92B79B1C608E495358829E529C4EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
Manifest number: 0D4E
Signing time: Sat 10 May 2025 19:01:16 +0000
Manifest this update: Sat 10 May 2025 19:01:16 +0000
Manifest next update: Sun 11 May 2025 19:01:16 +0000
Files and hashes: 1: Iyrza5wHnaCRgn2j0HycilI2y1Q.crl (hash: 77zjvBLe2exvIubkmB2iXMidEMD3GNN6cne6ZEign4E=)
2: toxMffac8SzL_TQxr2hjL5YSY6Q.roa (hash: 6J4RpW4+KTEJ80i/ugBSVSbYDP6MfdImgKDioGx9tw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:b7:9b:1c:60:8e:49:53:58:82:9e:52:9c:4e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232af36b9c079da091827da3d07c9c8a5236cb54
Validity
Not Before: May 10 19:01:16 2025 GMT
Not After : May 11 19:01:16 2025 GMT
Subject: CN=998a80a73b19035201b7e4f914c762103b840a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:51:8e:51:5f:59:da:53:3f:c8:48:f6:f0:
06:c8:67:42:9a:c8:86:80:ae:17:3e:67:75:fc:68:
e3:22:c3:70:57:9f:25:fe:ce:88:98:9c:1a:14:93:
57:cd:0e:e7:56:6c:a3:27:84:8b:ea:ef:d8:94:59:
ae:ab:df:d2:7a:86:6a:ab:83:bc:22:b6:c6:f2:c3:
1b:a3:1f:fd:71:bf:9a:07:32:04:71:33:f1:d7:43:
a9:46:03:85:64:63:6e:84:33:67:f8:67:22:58:92:
8a:53:bc:76:06:c6:fe:4b:bd:ca:a7:33:61:42:2a:
c0:88:8e:fa:02:31:44:21:cd:32:d3:c6:97:99:d7:
0c:32:29:3f:c3:e4:83:5f:b3:37:bb:46:6e:98:85:
39:6c:c4:91:46:fc:38:1d:6c:20:c2:a1:7b:bb:93:
87:6d:96:8f:6f:9b:2c:8e:be:db:a9:c5:59:93:03:
de:8e:81:07:a3:55:cf:9b:de:68:05:a7:a3:8a:be:
84:b7:31:71:dc:89:3d:c5:06:c9:c0:18:b5:f7:f8:
02:6d:bd:9f:fe:4c:57:b9:af:8f:5f:9f:5a:98:3e:
9f:8c:84:ba:71:be:66:45:1b:cd:f1:cb:23:1e:80:
e5:8c:69:4b:0e:19:2c:c8:10:64:c0:cf:af:fc:9e:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8A:80:A7:3B:19:03:52:01:B7:E4:F9:14:C7:62:10:3B:84:0A:12
X509v3 Authority Key Identifier:
keyid:23:2A:F3:6B:9C:07:9D:A0:91:82:7D:A3:D0:7C:9C:8A:52:36:CB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dd:f2:62:61:25:d3:f8:2d:10:8b:ff:7e:c8:fa:fb:3f:6b:
a2:5d:24:2b:9b:ea:4f:fb:57:2d:f9:ba:4f:70:89:9c:18:53:
0b:2e:07:02:38:17:c7:4c:65:b4:9d:83:79:b3:85:02:8b:b4:
0b:9d:18:8b:d7:6d:26:ba:fb:f5:af:86:f2:0e:89:98:4e:11:
37:6d:b8:b6:2c:a3:d4:00:0f:da:ca:58:c3:b0:d9:b4:d0:1e:
46:f6:53:95:dd:0e:c5:6c:74:22:d3:f1:87:3b:ed:19:87:5b:
29:c1:63:3c:6a:3d:85:66:53:17:8d:e4:0d:76:1b:45:27:8c:
19:c1:3a:86:be:3a:ab:f2:7b:54:63:db:47:dc:56:74:44:33:
d0:33:c7:f9:e0:59:3b:3f:ca:66:bb:be:1b:f6:10:85:b4:72:
ce:23:49:e6:9e:82:71:4b:51:a7:67:a2:55:8b:17:56:f2:95:
72:7a:44:37:ff:e9:8b:f5:15:b9:6a:d2:b0:95:b3:7d:41:0e:
99:29:99:62:d5:59:68:35:9d:d0:5e:fa:bd:7b:05:6b:63:81:
c1:96:3c:05:20:60:78:1c:4e:98:d4:75:59:e2:18:ba:a7:4c:
67:a3:e0:f3:94:ea:66:57:1d:a4:41:7e:f4:b8:c5:20:59:f7:
99:62:7c:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7krebHGCOSVNYgp5SnE7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMmFmMzZiOWMwNzlkYTA5MTgyN2RhM2QwN2M5YzhhNTIz
NmNiNTQwHhcNMjUwNTEwMTkwMTE2WhcNMjUwNTExMTkwMTE2WjAzMTEwLwYDVQQD
Eyg5OThhODBhNzNiMTkwMzUyMDFiN2U0ZjkxNGM3NjIxMDNiODQwYTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3dRjlFfWdpTP8hI9vAGyGdCmsiG
gK4XPmd1/GjjIsNwV58l/s6ImJwaFJNXzQ7nVmyjJ4SL6u/YlFmuq9/SeoZqq4O8
IrbG8sMbox/9cb+aBzIEcTPx10OpRgOFZGNuhDNn+GciWJKKU7x2Bsb+S73KpzNh
QirAiI76AjFEIc0y08aXmdcMMik/w+SDX7M3u0ZumIU5bMSRRvw4HWwgwqF7u5OH
bZaPb5ssjr7bqcVZkwPejoEHo1XPm95oBaejir6EtzFx3Ik9xQbJwBi19/gCbb2f
/kxXua+PX59amD6fjIS6cb5mRRvN8csjHoDljGlLDhksyBBkwM+v/J57dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmKgKc7GQNSAbfk+RTHYhA7hAoSMB8GA1UdIwQY
MBaAFCMq82ucB52gkYJ9o9B8nIpSNstUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXlyemE1d0huYUNSZ24yajBIeWNpbEkyeTFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jMmZkMzMtZmQ0NC00ZTA4LWI0MjQt
YWExMDQ1MjIwYjViLzEvSXlyemE1d0huYUNSZ24yajBIeWNpbEkyeTFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jMmZkMzMtZmQ0NC00ZTA4LWI0MjQtYWExMDQ1MjIwYjVi
LzEvSXlyemE1d0huYUNSZ24yajBIeWNpbEkyeTFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM93yYmEl
0/gtEIv/fsj6+z9rol0kK5vqT/tXLfm6T3CJnBhTCy4HAjgXx0xltJ2DebOFAou0
C50Yi9dtJrr79a+G8g6JmE4RN224tiyj1AAP2spYw7DZtNAeRvZTld0OxWx0ItPx
hzvtGYdbKcFjPGo9hWZTF43kDXYbRSeMGcE6hr46q/J7VGPbR9xWdEQz0DPH+eBZ
Oz/KZru+G/YQhbRyziNJ5p6CcUtRp2eiVYsXVvKVcnpEN//pi/UVuWrSsJWzfUEO
mSmZYtVZaDWd0F76vXsFa2OBwZY8BSBgeBxOmNR1WeIYuqdMZ6Pg85TqZlcdpEF+
9LjFIFn3mWJ8kQ==
-----END CERTIFICATE-----
Generated at Sat May 10 23:05:33 2025 by rpki-client