Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: Fkh+feqVLjjliu5Q8npaiqSABxleTNhun23t+Y4btXQ=
Subject key identifier: 99:DB:B3:BC:9E:1A:63:FF:92:7F:EC:83:7E:63:87:88:E1:B4:A1:9A
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 0198469AD18916C7AD8FAE8F488AA0FEE0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 12:00:07 +0000
Manifest this update: Sat 26 Jul 2025 12:00:07 +0000
Manifest next update: Sun 27 Jul 2025 12:00:07 +0000
Files and hashes: 1: HevIcw-udVLHAsRMuVL8AXS5DmE.roa (hash: /vwUjeGhMDVH5p9rxYTRis9U3GgQG40VBJ1bShqGwbM=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: tqg9v+5V7/IkdyNThEQvyIhUUwBKxChtE3H5I6zzVXE=)
3: dfcipKIHJhkLM8tES7y9qnzOa0g.roa (hash: hdMZ+zVZPKGH8nt9Efyy+7bQ/S/VggiNWiYJsxgZkUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9a:d1:89:16:c7:ad:8f:ae:8f:48:8a:a0:fe:e0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Jul 26 12:00:07 2025 GMT
Not After : Jul 27 12:00:07 2025 GMT
Subject: CN=99dbb3bc9e1a63ff927fec837e638788e1b4a19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8d:9a:21:76:3e:31:96:f0:0b:a2:70:06:e4:
1f:55:0f:87:e0:9d:77:f9:18:96:dc:a3:85:53:fd:
95:5d:4f:19:53:00:3b:e3:45:f4:e2:bc:3a:dd:b5:
d5:16:c9:40:20:10:6b:bd:7a:b7:d1:f1:e4:95:12:
3a:c7:7b:61:27:14:06:2f:15:64:11:2b:d5:21:11:
17:00:2a:22:62:97:a6:c6:bf:14:a6:09:fc:9c:00:
7d:50:ae:04:18:d9:b3:dc:08:a7:d6:1a:30:63:50:
c2:03:2a:48:42:5f:ed:45:aa:f4:9d:46:03:a3:e5:
99:b7:23:78:a8:2b:06:75:f2:c5:10:5d:22:eb:1b:
00:56:70:5d:1b:72:df:dc:f6:f3:38:2b:10:dd:43:
c3:05:52:b7:8f:70:e0:48:dd:81:e6:bc:e4:5c:84:
ed:85:f0:16:aa:c2:61:95:b5:7f:f1:f0:53:26:70:
17:e6:ba:74:fc:75:ed:6d:30:85:19:3d:c6:5f:35:
14:6a:e6:d0:64:fd:90:f3:b4:fa:e3:93:d3:63:8a:
93:e4:c2:4a:bf:08:66:90:de:63:72:a8:0e:b5:9b:
68:bb:44:28:e0:86:a8:0e:ca:30:78:84:b2:22:9e:
49:1f:a5:f4:7e:65:58:c1:fe:3d:b2:57:79:57:51:
11:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DB:B3:BC:9E:1A:63:FF:92:7F:EC:83:7E:63:87:88:E1:B4:A1:9A
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:77:20:d5:55:91:62:7c:0a:f2:79:3d:aa:c3:09:54:ea:88:
b2:be:a8:91:03:6b:cc:15:47:88:97:5b:7d:97:c5:b0:b1:b8:
86:fc:6c:f6:8f:fa:56:44:58:6b:03:f6:ce:06:71:00:78:13:
d6:56:14:8d:f1:8b:21:6d:e8:f5:e9:19:77:99:72:3b:f0:af:
fc:5f:c5:82:54:51:54:08:b3:d5:1d:88:4b:9d:d7:99:b8:b6:
de:0c:b1:b1:8a:65:16:81:43:c0:1e:3a:fe:37:0e:ed:6d:2b:
80:a8:73:d7:9d:21:bc:fe:fb:f2:71:3a:1e:7c:ed:6d:c1:16:
02:75:ee:f3:bd:29:fe:d1:61:0e:cd:89:77:d5:85:ef:ba:a8:
4a:32:c7:8d:4c:be:8d:4a:1a:79:a4:53:b5:44:4c:92:f4:6f:
99:2f:32:73:ea:bf:d9:64:7a:74:81:5f:c8:2a:c4:44:ac:93:
e4:fd:0d:59:94:4a:3a:81:7f:ed:e8:bb:9a:34:06:31:ce:e3:
fb:bd:ab:e7:89:7d:8e:ed:57:49:18:f0:c9:4c:88:69:9e:e7:
16:75:e7:a9:d8:63:d3:89:55:6a:29:a8:22:47:5a:38:34:b6:
56:10:b4:ee:01:87:ce:6a:f8:a3:e9:43:54:11:c6:75:40:c8:
7f:e0:34:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGmtGJFsetj66PSIqg/uDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl
YWNlYjQwHhcNMjUwNzI2MTIwMDA3WhcNMjUwNzI3MTIwMDA3WjAzMTEwLwYDVQQD
Eyg5OWRiYjNiYzllMWE2M2ZmOTI3ZmVjODM3ZTYzODc4OGUxYjRhMTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Y2aIXY+MZbwC6JwBuQfVQ+H4J13
+RiW3KOFU/2VXU8ZUwA740X04rw63bXVFslAIBBrvXq30fHklRI6x3thJxQGLxVk
ESvVIREXACoiYpemxr8Upgn8nAB9UK4EGNmz3Ain1howY1DCAypIQl/tRar0nUYD
o+WZtyN4qCsGdfLFEF0i6xsAVnBdG3Lf3PbzOCsQ3UPDBVK3j3DgSN2B5rzkXITt
hfAWqsJhlbV/8fBTJnAX5rp0/HXtbTCFGT3GXzUUaubQZP2Q87T645PTY4qT5MJK
vwhmkN5jcqgOtZtou0Qo4IaoDsoweISyIp5JH6X0fmVYwf49sld5V1ERqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnbs7yeGmP/kn/sg35jh4jhtKGaMB8GA1UdIwQY
MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt
MWU0MzZkY2I4NWM1LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1
LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVncg1VWR
YnwK8nk9qsMJVOqIsr6okQNrzBVHiJdbfZfFsLG4hvxs9o/6VkRYawP2zgZxAHgT
1lYUjfGLIW3o9ekZd5lyO/Cv/F/FglRRVAiz1R2IS53Xmbi23gyxsYplFoFDwB46
/jcO7W0rgKhz150hvP778nE6HnztbcEWAnXu870p/tFhDs2Jd9WF77qoSjLHjUy+
jUoaeaRTtURMkvRvmS8yc+q/2WR6dIFfyCrERKyT5P0NWZRKOoF/7ei7mjQGMc7j
+72r54l9ju1XSRjwyUyIaZ7nFnXnqdhj04lVaimoIkdaODS2VhC07gGHzmr4o+lD
VBHGdUDIf+A05w==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:49:48 2025 by rpki-client