Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: CJv82PfaUoMqzQ3MKyf/M385cVr6aMcwzaHI+ZpPlRE=
Subject key identifier: 9A:66:14:7B:FA:46:65:CB:61:69:D7:21:AB:F3:25:30:40:DA:4F:9D
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 0197B77C1AC8808133088D591415B7A8E562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:00:53 +0000
Manifest this update: Sat 28 Jun 2025 17:00:53 +0000
Manifest next update: Sun 29 Jun 2025 17:00:53 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: BevmW0Q3/jtiIueXFMUZyvQOqU6Z7hKB9rAlLdaTbJw=)
2: ZaqC_eqAOQjtM4jTMkAtfUr_HnA.roa (hash: qyBeXguoUs9hwnrHmonqUvuWFW9pHnQHNdEGLzV2NBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:1a:c8:80:81:33:08:8d:59:14:15:b7:a8:e5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Jun 28 17:00:53 2025 GMT
Not After : Jun 29 17:00:53 2025 GMT
Subject: CN=9a66147bfa4665cb6169d721abf3253040da4f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:1e:5d:41:ef:93:5f:14:18:6f:56:ca:ba:
af:64:ec:ce:c7:89:b6:20:f8:5e:a7:18:79:9f:be:
31:2d:7e:46:bf:fa:4f:6b:b1:1d:66:fa:55:7e:f2:
08:1e:05:bd:08:7f:97:8f:89:81:39:0c:23:41:cf:
94:06:d7:88:6d:aa:3c:3e:07:36:5b:26:34:b0:e5:
f0:61:cb:19:8c:4f:55:dc:4b:07:ad:cf:45:81:cb:
4f:1f:7a:01:be:1c:89:1a:94:93:c9:0e:ae:ac:6d:
48:a6:7b:04:e0:48:1f:1d:cc:97:8e:ee:78:73:b8:
ef:65:34:df:77:38:c9:e2:69:4d:d0:c9:07:d1:fe:
3d:96:12:14:0d:02:58:c5:4d:e4:20:4c:06:ef:0d:
88:cf:f9:74:ad:0a:f3:3f:6a:14:5d:70:9a:be:97:
65:eb:b0:40:2d:31:27:0f:7a:23:0d:78:37:89:9d:
b5:de:ad:d3:bb:a2:e7:7b:c3:7b:af:8c:bf:68:6c:
83:6e:8a:78:de:82:50:d1:84:a2:42:3b:e2:0a:e7:
d3:94:82:98:8b:7f:5d:24:23:9f:2b:33:c9:99:57:
73:b7:9d:1c:f6:ee:65:d4:d6:92:e5:e4:b0:20:6b:
5a:de:db:dd:28:63:73:cd:d9:ac:01:33:14:a1:91:
94:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:66:14:7B:FA:46:65:CB:61:69:D7:21:AB:F3:25:30:40:DA:4F:9D
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b8:8f:98:c1:47:e5:43:af:cc:0d:27:a9:04:52:bc:fe:ff:
e2:c1:75:6f:ba:31:47:14:6f:95:fe:e1:29:d8:2d:dc:aa:46:
c1:fb:d6:0f:63:ee:77:a9:c7:f9:a6:29:29:b4:a7:a3:e2:39:
69:95:a6:d1:d9:25:e9:4e:b8:84:99:4a:17:50:79:be:eb:ff:
04:87:14:5c:53:b7:ce:1d:b9:5d:cd:5d:78:24:1b:46:85:43:
ba:39:92:fa:a0:4a:0b:64:af:f2:0b:9b:32:01:2f:df:2f:72:
92:26:5b:97:6f:66:08:b9:4a:23:b0:9e:3e:95:ee:e1:41:60:
2c:4d:56:cd:f8:4a:65:65:c3:d1:2e:01:f4:17:f0:7f:af:5f:
4d:a3:55:d7:fc:9b:42:a5:a5:78:5d:36:64:2c:76:20:15:d7:
b1:5d:e4:b8:ce:7f:e6:7d:0b:99:f4:91:2e:09:24:9e:eb:02:
20:98:36:83:40:b1:d3:1a:7b:ef:a3:9a:03:7b:f0:40:6b:d5:
74:5e:ed:6b:c8:10:51:05:59:8b:90:ae:ea:ad:f7:eb:dc:05:
a1:43:b9:02:85:65:9b:92:f2:33:6b:60:8a:d8:1f:fc:c0:3b:
9e:e1:05:5d:a0:7f:a7:09:4f:0c:dd:30:0b:32:66:21:7b:f5:
81:44:98:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fBrIgIEzCI1ZFBW3qOViMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOTdhMzExN2NhMWMxZDYyOTJhZTUyOTExYjRmMGNhNGY4
ZTkwMTkwHhcNMjUwNjI4MTcwMDUzWhcNMjUwNjI5MTcwMDUzWjAzMTEwLwYDVQQD
Eyg5YTY2MTQ3YmZhNDY2NWNiNjE2OWQ3MjFhYmYzMjUzMDQwZGE0ZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskkeXUHvk18UGG9WyrqvZOzOx4m2
IPhepxh5n74xLX5Gv/pPa7EdZvpVfvIIHgW9CH+Xj4mBOQwjQc+UBteIbao8Pgc2
WyY0sOXwYcsZjE9V3EsHrc9FgctPH3oBvhyJGpSTyQ6urG1IpnsE4EgfHcyXju54
c7jvZTTfdzjJ4mlN0MkH0f49lhIUDQJYxU3kIEwG7w2Iz/l0rQrzP2oUXXCavpdl
67BALTEnD3ojDXg3iZ213q3Tu6Lne8N7r4y/aGyDbop43oJQ0YSiQjviCufTlIKY
i39dJCOfKzPJmVdzt50c9u5l1NaS5eSwIGta3tvdKGNzzdmsATMUoZGUNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpmFHv6RmXLYWnXIavzJTBA2k+dMB8GA1UdIwQY
MBaAFCCXoxF8ocHWKSrlKRG08MpPjpAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzkt
NzU1ZTNiOTZkNWVkLzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzktNzU1ZTNiOTZkNWVk
LzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbiPmMFH
5UOvzA0nqQRSvP7/4sF1b7oxRxRvlf7hKdgt3KpGwfvWD2Pud6nH+aYpKbSno+I5
aZWm0dkl6U64hJlKF1B5vuv/BIcUXFO3zh25Xc1deCQbRoVDujmS+qBKC2Sv8gub
MgEv3y9ykiZbl29mCLlKI7CePpXu4UFgLE1WzfhKZWXD0S4B9Bfwf69fTaNV1/yb
QqWleF02ZCx2IBXXsV3kuM5/5n0LmfSRLgkknusCIJg2g0Cx0xp776OaA3vwQGvV
dF7ta8gQUQVZi5Cu6q3369wFoUO5AoVlm5LyM2tgitgf/MA7nuEFXaB/pwlPDN0w
CzJmIXv1gUSYmQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:47 2025 by rpki-client