Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
File: iQH2c8aw_4g16gL67bpbSc8UIk4.mft (raw, json)
Hash identifier: 0jIiCkqaQbpk9FdG/4GXy/HrgmKU4eYghmfc8bLDXT4=
Subject key identifier: B6:83:98:7B:DE:95:03:B8:F8:AA:D2:BD:8A:B5:D3:CF:CC:65:12:B2
Authority key identifier: 89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
Certificate issuer: /CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Certificate serial: 0197B7B3564CC7C796D5D6A22BD406E8F8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
Manifest number: 0C54
Signing time: Sat 28 Jun 2025 18:01:12 +0000
Manifest this update: Sat 28 Jun 2025 18:01:12 +0000
Manifest next update: Sun 29 Jun 2025 18:01:12 +0000
Files and hashes: 1: LwODeFlTbNm331VlQw3cZjyD1Sg.roa (hash: 6xKklCkI+s1DbuNSCG9T6RXJeAeTq1fLNQfBDhNCOAU=)
2: iQH2c8aw_4g16gL67bpbSc8UIk4.crl (hash: wwhC8gN7ukGL2iQz/EvB3mJfZgf+2ohidcwkKXxiPzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:56:4c:c7:c7:96:d5:d6:a2:2b:d4:06:e8:f8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Validity
Not Before: Jun 28 18:01:12 2025 GMT
Not After : Jun 29 18:01:12 2025 GMT
Subject: CN=b683987bde9503b8f8aad2bd8ab5d3cfcc6512b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ac:52:28:a6:cb:08:e4:6f:0b:c2:f5:19:78:
5b:8c:97:88:b4:86:81:b6:fa:4c:b4:fb:01:d6:2d:
80:eb:8f:6a:09:41:60:47:ec:1e:d4:3b:b6:fa:20:
06:93:11:6e:24:58:09:5b:f9:e4:48:3e:87:62:c3:
d2:f4:d3:67:4d:4c:ad:d1:82:d0:0a:db:ab:28:77:
27:b8:bb:25:92:ec:65:00:6f:66:1a:63:54:24:3c:
75:0c:7e:9c:5a:dc:39:72:4a:35:7c:d9:e7:80:84:
82:c3:fc:29:ff:f4:7d:12:79:f1:58:ef:81:25:a7:
f6:2c:34:7d:e0:ac:e8:f8:89:d0:85:d2:aa:bb:0c:
3a:99:7d:a1:c8:5b:4e:a0:bc:52:d5:d2:52:c5:06:
bc:ab:06:84:ad:27:e5:00:0c:3e:b1:0d:e9:ad:78:
ac:d8:43:9d:8e:ca:bc:25:92:6c:f4:f2:b7:14:c1:
77:0b:02:71:cc:a4:e3:62:50:e1:b2:72:ba:58:37:
e2:b0:16:f8:47:04:3d:07:b4:fc:62:9f:7d:1d:f9:
63:be:04:89:3a:bd:90:d4:ed:a8:49:05:9c:61:6d:
cb:20:f9:27:d1:90:58:71:f7:50:d7:8f:16:0a:10:
3b:58:a0:ca:8e:ba:af:eb:6c:ba:a0:04:82:85:98:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:83:98:7B:DE:95:03:B8:F8:AA:D2:BD:8A:B5:D3:CF:CC:65:12:B2
X509v3 Authority Key Identifier:
keyid:89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:19:07:57:a9:0f:d1:a5:b5:27:97:e5:f6:63:cb:50:31:72:
fe:23:46:b6:10:81:0c:29:d3:24:85:fd:20:1d:02:8a:9f:22:
41:a7:14:af:ea:44:a0:0a:7e:8a:d1:fb:fa:33:56:58:48:e4:
96:41:cb:0b:fd:e8:1a:89:b0:73:50:83:24:b1:68:eb:42:3d:
46:b9:33:59:f7:ad:20:2e:e9:50:fd:c7:cb:9b:23:bb:b5:70:
3d:d9:58:2a:88:44:f9:cd:73:c1:3b:9c:ca:c9:b3:c6:dc:fc:
66:0c:45:27:ed:c8:cd:80:d1:12:a3:02:89:84:1e:a3:0e:f9:
b6:cd:aa:ce:14:24:30:4e:db:19:59:19:9c:c1:09:d4:40:a3:
11:0d:d0:f7:1e:11:17:07:cc:6d:3a:22:0d:91:cb:55:7d:ec:
c1:dc:88:0f:d1:1f:f4:50:4d:3e:ea:8b:8f:80:b3:1a:ef:98:
94:c1:79:57:9d:68:ff:c5:40:94:7b:eb:c8:ac:20:ae:42:88:
3f:86:51:00:14:61:2a:0e:b9:a4:8f:2b:9e:68:03:e8:7e:65:
97:b5:a9:6c:23:9c:c7:b8:e2:80:33:b2:a1:58:90:8e:2e:d8:
57:a3:55:36:28:0d:63:43:23:00:bf:74:5e:a3:e0:bf:ff:89:
14:09:ba:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s1ZMx8eW1daiK9QG6Pj4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MDFmNjczYzZiMGZmODgzNWVhMDJmYWVkYmE1YjQ5Y2Yx
NDIyNGUwHhcNMjUwNjI4MTgwMTEyWhcNMjUwNjI5MTgwMTEyWjAzMTEwLwYDVQQD
EyhiNjgzOTg3YmRlOTUwM2I4ZjhhYWQyYmQ4YWI1ZDNjZmNjNjUxMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46xSKKbLCORvC8L1GXhbjJeItIaB
tvpMtPsB1i2A649qCUFgR+we1Du2+iAGkxFuJFgJW/nkSD6HYsPS9NNnTUyt0YLQ
CturKHcnuLslkuxlAG9mGmNUJDx1DH6cWtw5cko1fNnngISCw/wp//R9EnnxWO+B
Jaf2LDR94Kzo+InQhdKquww6mX2hyFtOoLxS1dJSxQa8qwaErSflAAw+sQ3prXis
2EOdjsq8JZJs9PK3FMF3CwJxzKTjYlDhsnK6WDfisBb4RwQ9B7T8Yp99HfljvgSJ
Or2Q1O2oSQWcYW3LIPkn0ZBYcfdQ148WChA7WKDKjrqv62y6oASChZj3vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaDmHvelQO4+KrSvYq108/MZRKyMB8GA1UdIwQY
MBaAFIkB9nPGsP+INeoC+u26W0nPFCJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVFIMmM4YXdfNGcxNmdMNjdicGJTYzhVSWs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMmJhMTAtMjBlZC00ZThjLWI3NmMt
NTNjNGQ1NzYyZDFhLzEvaVFIMmM4YXdfNGcxNmdMNjdicGJTYzhVSWs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9jMmJhMTAtMjBlZC00ZThjLWI3NmMtNTNjNGQ1NzYyZDFh
LzEvaVFIMmM4YXdfNGcxNmdMNjdicGJTYzhVSWs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuBkHV6kP
0aW1J5fl9mPLUDFy/iNGthCBDCnTJIX9IB0Cip8iQacUr+pEoAp+itH7+jNWWEjk
lkHLC/3oGomwc1CDJLFo60I9RrkzWfetIC7pUP3Hy5sju7VwPdlYKohE+c1zwTuc
ysmzxtz8ZgxFJ+3IzYDREqMCiYQeow75ts2qzhQkME7bGVkZnMEJ1ECjEQ3Q9x4R
FwfMbToiDZHLVX3swdyID9Ef9FBNPuqLj4CzGu+YlMF5V51o/8VAlHvryKwgrkKI
P4ZRABRhKg65pI8rnmgD6H5ll7WpbCOcx7jigDOyoViQji7YV6NVNigNY0MjAL90
XqPgv/+JFAm6jA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:21 2025 by rpki-client