Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
File: iyH_rekwvR_S4XiM_0B9nTQTThc.mft (raw, json)
Hash identifier: cpxC/djbxWYiKztGVDFSIqQaffoxgwg1Kkgej+CMb/4=
Subject key identifier: 35:D8:B2:F4:26:F6:9F:D0:04:2D:E4:DA:55:9F:D3:27:DC:8E:AC:87
Authority key identifier: 8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17
Certificate issuer: /CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
Certificate serial: 01984B550DCDD0139DBFC64304703BDEF5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
Manifest number: 1236
Signing time: Sun 27 Jul 2025 10:02:01 +0000
Manifest this update: Sun 27 Jul 2025 10:02:01 +0000
Manifest next update: Mon 28 Jul 2025 10:02:01 +0000
Files and hashes: 1: YR9oUfcPn7hi-EfIp0zPWNgdoLI.roa (hash: gZUlOd3rhYgj7y7iYiifqKrTqOs4vDy8o9fKugEnj2M=)
2: iyH_rekwvR_S4XiM_0B9nTQTThc.crl (hash: 1LMjhqGscCuF1ZOg/x13+92ToYldaRqro1VStXN7DqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:0d:cd:d0:13:9d:bf:c6:43:04:70:3b:de:f5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
Validity
Not Before: Jul 27 10:02:01 2025 GMT
Not After : Jul 28 10:02:01 2025 GMT
Subject: CN=35d8b2f426f69fd0042de4da559fd327dc8eac87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:64:71:92:f1:44:6d:e5:b7:f7:56:f5:7c:
b5:6a:55:cc:a1:5c:62:ec:c9:c8:f2:00:13:46:f3:
3c:8a:29:02:42:42:b2:a4:e2:d0:e4:8e:7f:86:a2:
18:9a:c4:2a:42:2e:2f:97:22:1d:e4:68:e0:99:96:
d0:97:50:11:91:8b:ce:fe:9c:83:44:fa:12:89:90:
8d:05:b9:23:7b:c3:33:b4:d7:35:97:9c:aa:ec:aa:
a5:5a:51:0a:b2:73:a9:2e:de:ae:31:2a:11:e5:a3:
25:46:25:a2:57:6d:1a:c2:ea:1a:ad:6f:76:ca:46:
c9:ca:f6:fb:1e:fd:b4:a4:81:d6:e1:09:4b:93:1c:
c6:99:02:91:0c:60:bb:fa:ba:48:f7:86:80:6f:32:
88:20:d1:dd:f4:7b:30:00:84:3b:fb:dc:49:24:29:
53:30:61:04:3c:cc:ec:13:3b:82:b5:d2:86:79:86:
80:be:3a:c8:6c:a8:e3:8f:e9:90:79:43:ea:63:71:
13:8f:5f:e7:9c:5a:db:f8:8a:b2:92:ea:0f:07:7a:
e0:be:84:10:1d:b3:4f:9f:dc:7a:75:c3:0a:be:21:
d4:2c:17:b3:ef:b6:be:fe:93:49:72:ee:8d:99:aa:
a1:94:d3:a9:72:ae:bb:f2:e2:80:01:d2:ff:93:f1:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D8:B2:F4:26:F6:9F:D0:04:2D:E4:DA:55:9F:D3:27:DC:8E:AC:87
X509v3 Authority Key Identifier:
keyid:8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e0:f7:ba:53:62:91:09:a1:0c:5d:ef:cf:42:3d:3f:a1:6d:
8c:86:1f:cd:34:89:9b:68:a3:40:dd:87:03:fd:74:c7:4e:33:
73:b6:5f:1c:f2:10:81:f7:6e:4c:ba:46:88:98:a5:8c:ab:ff:
1b:c2:0b:f4:73:b4:91:af:f8:34:48:5f:a6:02:26:14:ad:62:
2a:42:a3:8b:99:d7:80:89:91:0a:32:fd:65:a4:68:16:7b:75:
bd:93:67:7a:ea:ce:2f:28:eb:cc:b2:77:52:a7:cd:73:d5:c2:
b7:cb:83:dd:78:d9:60:20:b0:70:22:63:ca:d9:fa:f2:9e:a8:
4c:2e:be:aa:b7:9e:f2:a0:d1:6c:f2:95:f0:68:c0:e6:58:41:
65:92:6b:cb:94:1e:20:79:2d:7f:95:67:07:09:ca:35:0c:46:
20:93:a1:52:cc:fb:bc:1e:47:e7:f9:8e:b3:c3:64:63:7a:d1:
4d:d9:dc:66:e6:8e:05:b3:dd:4d:9b:eb:10:41:0b:4c:4b:77:
c2:43:7d:ac:bc:5b:66:36:9b:fb:4b:23:7d:f7:ee:e4:61:c3:
c5:f6:2e:24:d9:5e:d6:f1:a7:8e:a3:55:0e:d3:75:d6:54:49:
35:12:87:22:f3:47:3c:29:ad:39:e1:dc:d3:07:ce:80:21:06:
ec:75:3d:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVQ3N0BOdv8ZDBHA73vXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMjFmZmFkZTkzMGJkMWZkMmUxNzg4Y2ZmNDA3ZDlkMzQx
MzRlMTcwHhcNMjUwNzI3MTAwMjAxWhcNMjUwNzI4MTAwMjAxWjAzMTEwLwYDVQQD
EygzNWQ4YjJmNDI2ZjY5ZmQwMDQyZGU0ZGE1NTlmZDMyN2RjOGVhYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJhkcZLxRG3lt/dW9Xy1alXMoVxi
7MnI8gATRvM8iikCQkKypOLQ5I5/hqIYmsQqQi4vlyId5GjgmZbQl1ARkYvO/pyD
RPoSiZCNBbkje8MztNc1l5yq7KqlWlEKsnOpLt6uMSoR5aMlRiWiV20awuoarW92
ykbJyvb7Hv20pIHW4QlLkxzGmQKRDGC7+rpI94aAbzKIINHd9HswAIQ7+9xJJClT
MGEEPMzsEzuCtdKGeYaAvjrIbKjjj+mQeUPqY3ETj1/nnFrb+IqykuoPB3rgvoQQ
HbNPn9x6dcMKviHULBez77a+/pNJcu6NmaqhlNOpcq678uKAAdL/k/G6TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXYsvQm9p/QBC3k2lWf0yfcjqyHMB8GA1UdIwQY
MBaAFIsh/63pML0f0uF4jP9AfZ00E04XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXlIX3Jla3d2Ul9TNFhpTV8wQjluVFFUVGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85Y2UwZWItM2FiYS00YjM2LWI3YzQt
NDI1YzUxZDc4ODhiLzEvaXlIX3Jla3d2Ul9TNFhpTV8wQjluVFFUVGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85Y2UwZWItM2FiYS00YjM2LWI3YzQtNDI1YzUxZDc4ODhi
LzEvaXlIX3Jla3d2Ul9TNFhpTV8wQjluVFFUVGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOD3ulNi
kQmhDF3vz0I9P6FtjIYfzTSJm2ijQN2HA/10x04zc7ZfHPIQgfduTLpGiJiljKv/
G8IL9HO0ka/4NEhfpgImFK1iKkKji5nXgImRCjL9ZaRoFnt1vZNneurOLyjrzLJ3
UqfNc9XCt8uD3XjZYCCwcCJjytn68p6oTC6+qree8qDRbPKV8GjA5lhBZZJry5Qe
IHktf5VnBwnKNQxGIJOhUsz7vB5H5/mOs8NkY3rRTdncZuaOBbPdTZvrEEELTEt3
wkN9rLxbZjab+0sjfffu5GHDxfYuJNle1vGnjqNVDtN11lRJNRKHIvNHPCmtOeHc
0wfOgCEG7HU9sA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 16:11:55 2025 by rpki-client