Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: kkh7kHIeatPg2HE3TlJ0N6LqnHstZw3yX1ZsE12wGGY=
Subject key identifier: F5:79:74:51:78:58:4D:15:82:E6:9A:E2:77:09:BF:7F:78:34:96:8B
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 019856EA3E79C231F70D9CA093F2A81A5E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 16:00:48 +0000
Manifest this update: Tue 29 Jul 2025 16:00:48 +0000
Manifest next update: Wed 30 Jul 2025 16:00:48 +0000
Files and hashes: 1: 1--lfY911D4o-n0x13kTzxgPAa1c.roa (hash: 7jYLrsmco67v6YLtE1rUNiJwEOZGyK+AZuLqYtKHcu0=)
2: 1-PLlhObhI2KvU31PH_oGB4eDG5U.roa (hash: h2JQLRGR8RDG0rSKaLT0jUCHodG0PW/TX0LlgI0i4Qc=)
3: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: DBfZzdaFDnu+8j6HHNnymW+fpySgUExF2KDaG0pT0X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:ea:3e:79:c2:31:f7:0d:9c:a0:93:f2:a8:1a:5e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Jul 29 16:00:48 2025 GMT
Not After : Jul 30 16:00:48 2025 GMT
Subject: CN=f579745178584d1582e69ae27709bf7f7834968b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:40:3f:ac:6b:42:55:00:32:a8:14:f9:b1:
d3:ef:bf:95:27:1f:75:43:ca:60:d8:30:e3:b4:89:
57:dd:26:60:71:6b:5e:48:d9:9b:13:0d:28:55:86:
a3:79:be:e2:97:53:5e:b5:ae:61:31:f7:6d:29:c8:
ae:0d:a6:49:28:c8:44:30:cd:d4:41:f7:7e:39:b6:
b9:70:0f:b4:e9:98:b9:99:aa:26:8b:e2:2b:89:57:
1f:e4:57:b3:6b:c6:c2:8d:f3:b3:d9:5d:d9:c4:b5:
1e:e4:86:cd:70:b9:b2:64:8a:39:a1:e9:4e:5b:0e:
39:66:0d:cb:18:29:09:22:35:26:5a:16:a8:cf:75:
5c:62:b3:b3:e6:b8:e3:43:96:f0:43:b2:c0:c3:e1:
e0:32:18:d5:0e:ac:3e:11:f4:62:9e:db:59:ca:1f:
12:37:c6:b0:7f:2a:ad:09:41:12:31:bd:92:d2:68:
ac:bc:75:a3:ca:02:40:1d:b5:13:4c:80:83:82:a3:
4f:d2:6e:d0:5e:cc:11:d9:62:3e:15:49:17:6d:ed:
9d:97:fe:fb:47:b4:0a:06:e4:20:e8:7d:9a:a1:a2:
63:93:99:5a:29:85:05:6d:85:78:ef:c5:e0:1d:b9:
b8:30:b7:b7:88:3b:59:4e:e8:02:8a:25:d5:57:14:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:79:74:51:78:58:4D:15:82:E6:9A:E2:77:09:BF:7F:78:34:96:8B
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6a:cf:29:3e:8d:94:8f:da:b4:0f:70:1a:dd:fe:90:32:f2:
89:d2:86:fb:c4:a6:cf:e3:2a:1f:48:e7:f0:9d:15:b6:68:c3:
c9:9d:0a:7d:32:a4:ed:6a:48:45:ee:d3:63:5e:a2:24:f7:96:
ca:60:ff:08:ae:10:5c:7d:27:07:0b:1c:f9:c3:8d:19:e7:69:
ae:65:7f:ce:b3:ff:97:f0:d8:2c:d3:5c:75:f0:a2:78:74:52:
5c:b9:79:cb:0d:d4:bc:38:c9:c2:24:a2:72:86:c3:e5:bc:5a:
a1:51:b3:94:5c:3c:4a:16:f2:1c:37:8e:eb:9b:14:87:07:0d:
3e:c6:d4:36:6c:1e:16:13:1a:a8:89:8a:fa:ba:26:d3:c2:7c:
e0:6e:bb:92:56:9e:f6:8e:bd:bc:d4:4e:14:97:a9:3a:fc:a2:
d7:f7:e6:c9:d9:91:00:75:f2:cf:8e:0c:06:f4:24:50:fe:45:
b1:28:e6:c4:a5:67:42:c4:53:12:c0:c4:0e:30:7f:d7:1f:aa:
57:5b:f6:83:08:fe:30:02:aa:ea:c2:af:6e:1d:08:14:e9:03:
7b:63:eb:34:50:6f:0f:85:74:27:03:20:a2:fa:7a:68:b1:ca:
ac:6a:72:71:f1:71:20:82:57:c5:91:4c:dd:14:90:02:d8:7e:
74:8d:55:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhW6j55wjH3DZygk/KoGl5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMWUyODM1OWMxODBlYTZjNDg4YTk4Y2EzYWY3N2I1YmI3
OTNkZWUwHhcNMjUwNzI5MTYwMDQ4WhcNMjUwNzMwMTYwMDQ4WjAzMTEwLwYDVQQD
EyhmNTc5NzQ1MTc4NTg0ZDE1ODJlNjlhZTI3NzA5YmY3Zjc4MzQ5NjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1BAP6xrQlUAMqgU+bHT77+VJx91
Q8pg2DDjtIlX3SZgcWteSNmbEw0oVYajeb7il1Neta5hMfdtKciuDaZJKMhEMM3U
Qfd+Oba5cA+06Zi5maomi+IriVcf5Feza8bCjfOz2V3ZxLUe5IbNcLmyZIo5oelO
Ww45Zg3LGCkJIjUmWhaoz3VcYrOz5rjjQ5bwQ7LAw+HgMhjVDqw+EfRinttZyh8S
N8awfyqtCUESMb2S0misvHWjygJAHbUTTICDgqNP0m7QXswR2WI+FUkXbe2dl/77
R7QKBuQg6H2aoaJjk5laKYUFbYV478XgHbm4MLe3iDtZTugCiiXVVxRCOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPV5dFF4WE0Vguaa4ncJv394NJaLMB8GA1UdIwQY
MBaAFCMeKDWcGA6mxIipjKOvd7W7eT3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85MjQ2Y2ItZDQ2Yi00MDYyLTk4N2It
NWIzNGJjMzc4NDM2LzEvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85MjQ2Y2ItZDQ2Yi00MDYyLTk4N2ItNWIzNGJjMzc4NDM2
LzEvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2rPKT6N
lI/atA9wGt3+kDLyidKG+8Smz+MqH0jn8J0VtmjDyZ0KfTKk7WpIRe7TY16iJPeW
ymD/CK4QXH0nBwsc+cONGedprmV/zrP/l/DYLNNcdfCieHRSXLl5yw3UvDjJwiSi
cobD5bxaoVGzlFw8ShbyHDeO65sUhwcNPsbUNmweFhMaqImK+rom08J84G67klae
9o69vNROFJepOvyi1/fmydmRAHXyz44MBvQkUP5FsSjmxKVnQsRTEsDEDjB/1x+q
V1v2gwj+MAKq6sKvbh0IFOkDe2PrNFBvD4V0JwMgovp6aLHKrGpycfFxIIJXxZFM
3RSQAth+dI1VzQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 18:18:14 2025 by rpki-client