Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
File: ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json)
Hash identifier: S1AdqAVQFOCdtRz3DE2vhpfdvKLOa7sGRdsaDJW+jn0=
Subject key identifier: BF:71:86:B5:E3:83:0E:5F:02:A6:47:3B:CA:DD:E5:54:81:C8:A7:6F
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial: 01969F7614DFA0E21951745B74B2DCE85C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
Manifest number: 0C4C
Signing time: Mon 05 May 2025 08:00:37 +0000
Manifest this update: Mon 05 May 2025 08:00:37 +0000
Manifest next update: Tue 06 May 2025 08:00:37 +0000
Files and hashes: 1: VD1pOY6vP5TwIHzsVFu_IinabUU.roa (hash: cVzGsu9mooBFFczgcbG8J8W2oDgnSi/7QeWcMNjjuWQ=)
2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: lr9N/QO+eK9dMgXs2nyEB6qLQ0grOT/ggs7+zta0p98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:14:df:a0:e2:19:51:74:5b:74:b2:dc:e8:5c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Validity
Not Before: May 5 08:00:37 2025 GMT
Not After : May 6 08:00:37 2025 GMT
Subject: CN=bf7186b5e3830e5f02a6473bcadde55481c8a76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3d:8b:ac:1f:8c:22:08:88:21:17:f3:c8:40:
40:d5:69:d8:c2:e8:3b:b8:03:e5:6d:a9:36:fb:81:
c6:a6:60:43:ac:16:1a:2d:9c:90:28:23:e3:7d:00:
24:30:e4:3f:87:5d:0b:ae:c6:3b:6c:90:87:48:c7:
54:e8:80:81:ec:b9:86:30:7a:59:15:a7:c7:6f:8c:
83:e6:6e:8b:51:50:93:81:26:f7:ca:74:ca:ba:e0:
09:a1:7e:e6:0c:bb:be:1a:2e:81:d0:e3:be:29:58:
fc:77:25:f5:be:39:a3:5c:23:ca:0d:7b:c9:02:d9:
ff:4b:af:fa:78:3a:11:aa:de:46:c0:39:ad:bf:7b:
1f:90:2d:99:49:ab:7a:7e:fb:e8:df:8b:55:3a:2b:
eb:39:20:c4:ba:1e:78:a6:1d:2b:c2:18:b8:35:0c:
36:fe:eb:d6:5c:9c:0b:b9:c6:a0:87:45:b0:da:df:
79:ec:7a:22:dc:30:7b:92:94:89:e6:26:51:62:a6:
7d:05:eb:92:41:99:e0:23:59:e2:89:c8:59:57:1e:
39:23:9e:1d:a9:d0:d8:ca:24:0a:f0:3f:32:5a:4b:
c8:cd:0a:4e:95:55:20:f1:1b:bf:46:81:8d:44:85:
37:82:6e:64:77:93:e0:27:fc:7c:b6:4a:1a:85:ce:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:71:86:B5:E3:83:0E:5F:02:A6:47:3B:CA:DD:E5:54:81:C8:A7:6F
X509v3 Authority Key Identifier:
keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:40:f6:72:5f:29:1a:67:c5:02:4f:a0:02:2c:71:9d:97:2c:
e1:cc:77:3b:27:7e:f7:2c:a0:55:5c:13:0b:a6:78:5c:82:9a:
2d:c8:0d:c2:1d:eb:7b:e4:05:6c:6e:f8:a9:c5:8f:62:25:06:
61:90:43:9d:ed:34:3a:c7:7e:fd:eb:b5:f8:6f:0c:ee:00:b8:
40:cb:b2:0a:00:36:c0:d0:3c:10:03:85:81:87:84:03:e5:41:
b3:77:d4:3a:fc:f5:a2:94:38:94:ee:8b:dd:ee:1e:40:9d:d9:
d2:3b:13:a1:b7:ad:9b:33:5c:15:ff:ec:d5:b7:ee:19:79:c7:
eb:c7:f5:49:bd:a3:06:db:42:fe:71:96:e7:5a:9a:ed:f5:39:
60:a2:d1:15:b5:fe:d0:ad:72:87:5b:88:d9:e6:a3:c1:ef:7c:
ba:a3:ad:eb:89:52:96:28:65:2b:3c:3c:9b:bd:4d:a5:1d:11:
fd:f8:ac:86:79:46:9e:75:8f:0c:35:f7:c9:cf:04:62:4d:e7:
b2:e1:96:39:3a:95:c8:e0:6e:b0:58:7e:dd:a6:b7:e7:c2:9a:
33:a9:fa:7d:a1:ce:9c:ec:23:7e:9d:5c:b5:3c:80:bd:b3:dd:
8f:a4:e9:de:1f:99:54:d3:53:73:18:5b:3e:3a:25:08:0c:eb:
aa:93:71:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafdhTfoOIZUXRbdLLc6FwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMWI3MjliNzVjNWY4YjJlOWQxNThhYTI5NjM5NmQ2ODBi
ZTcwYWQwHhcNMjUwNTA1MDgwMDM3WhcNMjUwNTA2MDgwMDM3WjAzMTEwLwYDVQQD
EyhiZjcxODZiNWUzODMwZTVmMDJhNjQ3M2JjYWRkZTU1NDgxYzhhNzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT2LrB+MIgiIIRfzyEBA1WnYwug7
uAPlbak2+4HGpmBDrBYaLZyQKCPjfQAkMOQ/h10LrsY7bJCHSMdU6ICB7LmGMHpZ
FafHb4yD5m6LUVCTgSb3ynTKuuAJoX7mDLu+Gi6B0OO+KVj8dyX1vjmjXCPKDXvJ
Atn/S6/6eDoRqt5GwDmtv3sfkC2ZSat6fvvo34tVOivrOSDEuh54ph0rwhi4NQw2
/uvWXJwLucagh0Ww2t957Hoi3DB7kpSJ5iZRYqZ9BeuSQZngI1niichZVx45I54d
qdDYyiQK8D8yWkvIzQpOlVUg8Ru/RoGNRIU3gm5kd5PgJ/x8tkoahc76/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9xhrXjgw5fAqZHO8rd5VSByKdvMB8GA1UdIwQY
MBaAFIsbcpt1xfiy6dFYqiljltaAvnCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yZGQyNTYtODE0YS00ZmIzLTg1MTUt
NjY4MTQ5MjYzNTM5LzEvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yZGQyNTYtODE0YS00ZmIzLTg1MTUtNjY4MTQ5MjYzNTM5
LzEvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQED2cl8p
GmfFAk+gAixxnZcs4cx3Oyd+9yygVVwTC6Z4XIKaLcgNwh3re+QFbG74qcWPYiUG
YZBDne00Osd+/eu1+G8M7gC4QMuyCgA2wNA8EAOFgYeEA+VBs3fUOvz1opQ4lO6L
3e4eQJ3Z0jsTobetmzNcFf/s1bfuGXnH68f1Sb2jBttC/nGW51qa7fU5YKLRFbX+
0K1yh1uI2eajwe98uqOt64lSlihlKzw8m71NpR0R/fishnlGnnWPDDX3yc8EYk3n
suGWOTqVyOBusFh+3aa358KaM6n6faHOnOwjfp1ctTyAvbPdj6Tp3h+ZVNNTcxhb
PjolCAzrqpNxbg==
-----END CERTIFICATE-----
Generated at Mon May 5 15:28:50 2025 by rpki-client