Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
File: IjCHszf3R2yNYwSusIzuBX9L9pE.mft (raw, json)
Hash identifier: Mf9Ddl2vq8hSXl8KPnTamxRcADQEbdHbcHxi9ty/RtU=
Subject key identifier: 3C:E6:30:44:C9:1F:9A:D9:1C:FA:A9:59:07:AA:B1:60:E8:BB:E9:7D
Authority key identifier: 22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
Certificate issuer: /CN=223087b337f7476c8d6304aeb08cee057f4bf691
Certificate serial: 01984A410D7122CD47AE9EE36F21F4F9296B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
Manifest number: B7
Signing time: Sun 27 Jul 2025 05:00:33 +0000
Manifest this update: Sun 27 Jul 2025 05:00:33 +0000
Manifest next update: Mon 28 Jul 2025 05:00:33 +0000
Files and hashes: 1: Da7F_pVCBMO9Pya93Jt3tHR6Oco.roa (hash: UlhnFczuqpWrkcvlwjEVQtMKK1bvCGUHj/RuLRvxfcM=)
2: IjCHszf3R2yNYwSusIzuBX9L9pE.crl (hash: FlmdfCPLskwQ7Vzm81FBZYlwtchLG8UrpoPv2QmXUsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:0d:71:22:cd:47:ae:9e:e3:6f:21:f4:f9:29:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=223087b337f7476c8d6304aeb08cee057f4bf691
Validity
Not Before: Jul 27 05:00:33 2025 GMT
Not After : Jul 28 05:00:33 2025 GMT
Subject: CN=3ce63044c91f9ad91cfaa95907aab160e8bbe97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:52:a8:7d:a1:5d:fb:65:f7:fa:58:57:1b:55:
52:a7:ef:9f:4d:7b:a6:13:d7:ce:64:46:5b:c2:2a:
23:04:c3:b6:29:c8:15:c5:69:55:7c:a5:c2:44:aa:
6f:24:00:07:48:67:c1:e9:ee:c6:f1:ea:2a:db:70:
d6:86:b3:90:d1:14:26:4b:99:be:35:d6:0c:a8:b2:
6a:dc:7d:0b:a5:0f:6a:b4:87:31:42:8f:4d:78:36:
ab:4a:7d:06:7c:ae:7e:eb:78:fa:92:8e:db:a1:e3:
16:b0:2d:1a:4b:b9:67:26:a1:7b:89:a1:dc:66:a5:
a2:da:8c:f7:ef:0b:d2:32:f8:d8:b2:43:7d:1a:f2:
1e:3e:ee:ac:b8:1e:01:6a:e7:ca:ee:cb:c2:3a:2a:
87:ea:ae:e9:52:6a:7c:e9:ff:e6:2c:1d:7b:ca:ed:
09:53:28:dc:9f:f5:40:a5:87:53:2d:62:58:61:81:
d6:72:54:33:b2:10:b7:74:11:2c:64:0d:ef:42:46:
b4:63:6d:d7:d8:db:06:e1:61:d1:02:86:08:38:d8:
51:ea:ee:4e:0f:37:11:2e:35:4f:0e:8f:2b:d4:62:
e3:69:62:d4:e7:2e:74:f3:75:2e:6b:7d:26:4c:69:
11:ce:bf:28:69:0e:19:67:b1:05:9d:2e:4a:72:88:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E6:30:44:C9:1F:9A:D9:1C:FA:A9:59:07:AA:B1:60:E8:BB:E9:7D
X509v3 Authority Key Identifier:
keyid:22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a7:b9:b0:6c:12:cd:7e:e5:42:af:ab:ac:04:e5:d7:b1:ac:
68:d0:1f:4d:e4:f7:b4:b7:16:82:ad:d9:44:50:6b:ef:75:21:
c3:6b:1a:09:56:68:fe:ca:7a:61:07:13:b4:ee:5f:47:c2:f1:
73:25:14:33:b3:75:0f:17:bc:4b:ed:64:41:47:14:32:03:d8:
e0:76:cc:ec:0b:5c:e8:bd:26:b8:e7:c3:95:61:e3:71:f2:ca:
b3:cf:7e:81:77:01:b8:98:fc:de:ed:8c:fc:20:d1:1a:2a:92:
14:2d:39:ca:06:8e:8a:ba:c0:1d:d9:c7:f8:81:89:de:d4:fa:
5e:79:7a:59:64:80:97:fb:ce:0a:51:7e:88:9c:42:ba:4c:67:
d7:26:78:6c:e5:43:bf:70:ac:ac:b7:ba:85:14:5e:b6:5d:90:
84:b3:16:9c:6f:c8:0c:4f:48:8c:0d:a1:38:00:10:40:26:b2:
cf:1e:a7:63:7d:69:bd:08:28:50:b0:11:c2:9f:22:af:4e:c3:
e0:25:e6:42:4c:57:af:29:ad:7c:d6:3e:aa:20:0a:04:27:e7:
12:9a:ec:4a:5f:f2:a7:60:07:bd:8f:d8:fc:57:78:4c:21:97:
fc:7f:51:c8:9e:23:12:cd:6a:7f:45:4f:99:79:bf:ad:b7:d7:
ef:e5:99:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQQ1xIs1Hrp7jbyH0+SlrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzA4N2IzMzdmNzQ3NmM4ZDYzMDRhZWIwOGNlZTA1N2Y0
YmY2OTEwHhcNMjUwNzI3MDUwMDMzWhcNMjUwNzI4MDUwMDMzWjAzMTEwLwYDVQQD
EygzY2U2MzA0NGM5MWY5YWQ5MWNmYWE5NTkwN2FhYjE2MGU4YmJlOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslKofaFd+2X3+lhXG1VSp++fTXum
E9fOZEZbwiojBMO2KcgVxWlVfKXCRKpvJAAHSGfB6e7G8eoq23DWhrOQ0RQmS5m+
NdYMqLJq3H0LpQ9qtIcxQo9NeDarSn0GfK5+63j6ko7boeMWsC0aS7lnJqF7iaHc
ZqWi2oz37wvSMvjYskN9GvIePu6suB4BaufK7svCOiqH6q7pUmp86f/mLB17yu0J
Uyjcn/VApYdTLWJYYYHWclQzshC3dBEsZA3vQka0Y23X2NsG4WHRAoYIONhR6u5O
DzcRLjVPDo8r1GLjaWLU5y5083Uua30mTGkRzr8oaQ4ZZ7EFnS5KcoiEgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzmMETJH5rZHPqpWQeqsWDou+l9MB8GA1UdIwQY
MBaAFCIwh7M390dsjWMErrCM7gV/S/aRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYzk0ZmEtMDUxZS00OGQ1LWFjZDMt
YzUxMjUxNDJhZTU4LzEvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iYzk0ZmEtMDUxZS00OGQ1LWFjZDMtYzUxMjUxNDJhZTU4
LzEvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6e5sGwS
zX7lQq+rrATl17GsaNAfTeT3tLcWgq3ZRFBr73Uhw2saCVZo/sp6YQcTtO5fR8Lx
cyUUM7N1Dxe8S+1kQUcUMgPY4HbM7Atc6L0muOfDlWHjcfLKs89+gXcBuJj83u2M
/CDRGiqSFC05ygaOirrAHdnH+IGJ3tT6Xnl6WWSAl/vOClF+iJxCukxn1yZ4bOVD
v3CsrLe6hRRetl2QhLMWnG/IDE9IjA2hOAAQQCayzx6nY31pvQgoULARwp8ir07D
4CXmQkxXrymtfNY+qiAKBCfnEprsSl/yp2AHvY/Y/Fd4TCGX/H9RyJ4jEs1qf0VP
mXm/rbfX7+WZBQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:51:08 2025 by rpki-client