Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
File: Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json)
Hash identifier: oVR+ERKJ44G+dCc2dsZO3ri4oTYMOWqEeKKBbukJo3o=
Subject key identifier: 0E:23:3A:80:C2:88:CD:55:C0:86:E3:69:2E:83:2A:09:AC:C6:FC:51
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 0196C571300F78F75621E2B2433572E63BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
Manifest number: 1494
Signing time: Mon 12 May 2025 17:00:51 +0000
Manifest this update: Mon 12 May 2025 17:00:51 +0000
Manifest next update: Tue 13 May 2025 17:00:51 +0000
Files and hashes: 1: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: VxTomLsN6aCwLqcJtp+HFvhgcsLHRa2cYWmR2fM4mW0=)
2: UVEBG1ExZGcscljMEXZmdhHPbmo.roa (hash: OGY1ZCPh4kqtkS+2sWG7TSBefV4b/lqw2cPXHz2iP6A=)
3: l7ZphxTNLdfz3s0c0sr67IQOn_Q.roa (hash: 7qT5TEH8UgfN71QCeNJwaAV6tPLOUHK85hJIN/udCok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:71:30:0f:78:f7:56:21:e2:b2:43:35:72:e6:3b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: May 12 17:00:51 2025 GMT
Not After : May 13 17:00:51 2025 GMT
Subject: CN=0e233a80c288cd55c086e3692e832a09acc6fc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:80:ca:28:46:35:31:f4:af:39:c4:a0:a1:24:
e2:8b:d1:23:9f:eb:89:bf:4e:8c:06:b7:08:a9:12:
85:5b:79:72:5e:fe:34:6b:99:b8:50:90:2d:96:83:
31:6b:12:8f:58:d4:07:47:b1:a4:00:2d:06:9b:f9:
e0:01:c6:a4:1a:d0:17:d7:37:d7:95:ac:a5:f5:3f:
ca:6a:31:43:00:e8:4c:75:ba:27:d3:e3:4e:ca:94:
e1:5d:28:f2:24:5e:0d:ea:ac:a4:82:eb:94:18:9b:
3a:03:45:94:49:4c:70:d2:ce:68:86:4d:05:e6:0e:
74:58:44:7d:2a:a1:25:fb:d5:ff:25:4d:30:1d:33:
12:22:04:37:af:cc:7b:8c:9d:b0:93:d3:84:09:9f:
b2:a1:cf:76:4d:3c:50:19:4f:68:4a:3a:40:4a:57:
55:8d:8b:5d:27:7e:0a:fd:de:4f:33:ee:8d:93:12:
30:86:79:85:10:81:e7:71:7b:77:9c:a8:7a:1c:02:
ad:84:41:76:50:3d:d3:94:8a:08:da:42:73:40:59:
7c:b9:cf:6b:ab:04:f5:0a:59:11:da:2c:de:a5:f9:
88:57:ab:af:7f:e9:29:c9:93:bc:0c:01:55:6a:16:
dc:7f:74:e4:a7:45:8a:76:43:a9:f1:16:89:fb:81:
89:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:23:3A:80:C2:88:CD:55:C0:86:E3:69:2E:83:2A:09:AC:C6:FC:51
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ce:7d:62:9e:39:19:a4:92:0f:90:3f:e1:9f:40:5b:49:ef:
39:b1:28:fc:be:17:e6:dc:ed:b8:bc:52:ac:01:05:ef:55:ce:
2a:79:44:08:d8:c5:ce:64:76:ec:84:b2:75:53:72:c5:d0:c5:
21:8c:73:ad:6a:e8:7a:d4:b9:47:35:6d:44:98:24:df:89:ea:
0f:8d:2f:a8:7c:a6:08:e6:fc:f4:cb:5c:c5:3e:d0:73:c7:00:
9a:0b:d5:97:31:c9:a2:38:f0:86:67:78:b2:e0:7d:4f:b1:e3:
36:4b:a3:da:5d:7f:92:3d:a3:38:00:96:42:fc:57:9e:f4:b8:
c4:a4:e8:23:12:d3:1b:bd:da:48:4c:07:fd:49:24:b2:2f:33:
72:61:ad:5b:6d:ae:d9:9c:f2:18:52:1e:a4:14:99:04:44:af:
f0:1f:b1:65:84:c7:19:14:57:12:4c:b1:35:dc:7d:86:a6:09:
86:32:2d:35:10:70:f9:01:aa:81:c1:0e:1b:11:a2:18:6a:04:
d1:d6:0d:b6:2a:b2:bf:5c:58:94:4f:b1:d4:c8:6d:1d:31:eb:
50:c0:34:f3:d4:e6:bc:b8:18:87:d1:b9:d8:14:48:d8:07:26:
18:5e:25:9c:fd:5f:80:23:9d:33:09:f5:24:d5:cc:d7:ad:bd:
c0:3b:b9:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFcTAPePdWIeKyQzVy5jugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYWNmNjZmMDAxOWM1NTYzMzFiZWY5ZWNkOGRmNjUyNzgy
YTYzZjgwHhcNMjUwNTEyMTcwMDUxWhcNMjUwNTEzMTcwMDUxWjAzMTEwLwYDVQQD
EygwZTIzM2E4MGMyODhjZDU1YzA4NmUzNjkyZTgzMmEwOWFjYzZmYzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IDKKEY1MfSvOcSgoSTii9Ejn+uJ
v06MBrcIqRKFW3lyXv40a5m4UJAtloMxaxKPWNQHR7GkAC0Gm/ngAcakGtAX1zfX
layl9T/KajFDAOhMdbon0+NOypThXSjyJF4N6qykguuUGJs6A0WUSUxw0s5ohk0F
5g50WER9KqEl+9X/JU0wHTMSIgQ3r8x7jJ2wk9OECZ+yoc92TTxQGU9oSjpASldV
jYtdJ34K/d5PM+6NkxIwhnmFEIHncXt3nKh6HAKthEF2UD3TlIoI2kJzQFl8uc9r
qwT1ClkR2izepfmIV6uvf+kpyZO8DAFVahbcf3Tkp0WKdkOp8RaJ+4GJXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4jOoDCiM1VwIbjaS6DKgmsxvxRMB8GA1UdIwQY
MBaAFCKs9m8AGcVWMxvvns2N9lJ4KmP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yZTk2NzctYzVkZC00YTMxLWE4ZTct
MTY4ZjIxNTA4Yzc0LzEvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8yZTk2NzctYzVkZC00YTMxLWE4ZTctMTY4ZjIxNTA4Yzc0
LzEvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFM59Yp45
GaSSD5A/4Z9AW0nvObEo/L4X5tztuLxSrAEF71XOKnlECNjFzmR27ISydVNyxdDF
IYxzrWroetS5RzVtRJgk34nqD40vqHymCOb89MtcxT7Qc8cAmgvVlzHJojjwhmd4
suB9T7HjNkuj2l1/kj2jOACWQvxXnvS4xKToIxLTG73aSEwH/Ukksi8zcmGtW22u
2ZzyGFIepBSZBESv8B+xZYTHGRRXEkyxNdx9hqYJhjItNRBw+QGqgcEOGxGiGGoE
0dYNtiqyv1xYlE+x1MhtHTHrUMA089TmvLgYh9G52BRI2AcmGF4lnP1fgCOdMwn1
JNXM1629wDu5wQ==
-----END CERTIFICATE-----
Generated at Mon May 12 20:39:28 2025 by rpki-client