Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: b9/IFr1kaVWombeNBcukernqwIIyOl5BW3wz+n+iL+M=
Subject key identifier: C1:9E:CA:CE:D0:27:B1:92:7F:E9:82:6B:8E:59:35:F1:9D:D4:2F:15
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 019849D3BAD69A1860773440884B4AD681E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 1547
Signing time: Sun 27 Jul 2025 03:01:09 +0000
Manifest this update: Sun 27 Jul 2025 03:01:09 +0000
Manifest next update: Mon 28 Jul 2025 03:01:09 +0000
Files and hashes: 1: 6LoGTUsxl6ngR0px_QWDZqMrDqY.roa (hash: +ceUAHPEc+ox8TyB65QxlBTF9+xyruiKTwNKbUkFhfY=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: P7ephOK1beGtgWo/33V9b66oA3usH1gi6Cptg2qsXaA=)
3: kOrxmXRMoh0iVhgCI3h3ap9gzjY.roa (hash: UuZBkN7yMoGzAAanQfroluxDy9hZk4vWUEry2ogeBOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:ba:d6:9a:18:60:77:34:40:88:4b:4a:d6:81:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Jul 27 03:01:09 2025 GMT
Not After : Jul 28 03:01:09 2025 GMT
Subject: CN=c19ecaced027b1927fe9826b8e5935f19dd42f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:cc:66:9e:2e:2c:20:17:07:1b:3e:08:fc:
d7:c6:a2:ac:99:38:b9:d0:9d:52:83:6a:09:a4:84:
f3:51:dd:a3:4e:ca:0e:e8:c8:e1:ea:d5:04:78:62:
d9:09:f8:7a:57:90:e9:6b:95:31:77:7b:89:5b:81:
43:62:30:a5:0a:e3:a1:ab:72:2c:c0:f5:b1:0f:43:
d0:8e:54:31:b6:7f:75:d6:ae:36:78:a3:35:45:a0:
18:c4:bc:a9:a3:17:77:9c:f1:52:8a:d3:8c:a5:18:
06:8b:2c:af:4c:69:1a:45:52:d7:26:c0:31:5f:b1:
82:62:35:f2:16:1e:4a:e7:81:58:41:4d:cd:45:f8:
2d:24:c1:c4:18:0f:0e:8a:39:57:1f:8c:01:60:d0:
8e:d1:4b:df:4b:0c:5c:49:70:b3:2d:17:48:55:fe:
62:d3:e5:f7:f5:66:1c:94:37:d4:09:f7:52:a1:4c:
4b:90:ab:7e:5a:44:4d:7b:09:2a:de:67:34:16:0f:
8f:0b:fd:8a:bd:af:97:33:23:63:25:ee:6c:68:73:
b7:a7:cb:1f:e2:f3:79:5b:fd:93:89:29:0f:da:84:
d7:b3:9f:a6:75:e9:eb:d6:09:2c:2d:79:79:fd:d8:
0d:9a:c1:a8:89:ff:c4:d6:84:bf:6b:c7:44:b7:ad:
b7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9E:CA:CE:D0:27:B1:92:7F:E9:82:6B:8E:59:35:F1:9D:D4:2F:15
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:18:c6:06:fc:be:e0:e3:d1:1c:05:7d:b7:bb:45:f3:ca:7c:
43:fc:a2:54:da:9e:56:15:fa:58:5a:9b:7f:76:66:30:30:a8:
fa:e8:2d:4f:14:e8:4b:e1:11:e5:3b:85:96:63:cf:4f:35:f0:
45:1a:20:2d:c1:3c:c7:96:ff:a3:ca:f2:a3:2c:45:2f:f4:68:
fa:c4:0f:e2:5f:67:5c:29:cd:de:28:d1:12:2d:d2:2d:0f:06:
3d:63:f8:13:f3:f3:a0:67:21:2e:66:ec:39:48:4e:30:ec:44:
30:d6:e6:05:7a:a9:78:88:47:51:b2:f3:5d:0f:d7:14:10:a8:
fc:15:79:c5:91:9e:74:e9:6f:4d:4b:b9:8c:31:dc:b1:4f:02:
92:29:26:ed:ab:4c:db:b1:99:ef:ff:9c:4b:a0:13:f3:04:5c:
8c:f8:af:17:36:24:22:5d:53:6c:f5:27:5c:0b:b4:41:31:fa:
92:6f:76:33:69:fa:b3:78:5e:df:87:af:26:d2:ef:6e:2f:8e:
ef:e4:44:96:3e:71:f4:87:29:1a:5e:87:47:85:9c:8d:6f:0a:
f6:3a:0c:96:4c:31:ff:76:e1:95:30:78:91:c0:67:18:b1:83:
72:9b:c8:12:b3:45:20:76:de:b1:48:c4:01:d1:8b:3c:86:78:
92:14:f5:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ07rWmhhgdzRAiEtK1oHkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDQ3YmFhOWFhNmUwYTIwYWQ5OTVhNzljMmE4ZGU2MDRm
OWFhMzcwHhcNMjUwNzI3MDMwMTA5WhcNMjUwNzI4MDMwMTA5WjAzMTEwLwYDVQQD
EyhjMTllY2FjZWQwMjdiMTkyN2ZlOTgyNmI4ZTU5MzVmMTlkZDQyZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxnMZp4uLCAXBxs+CPzXxqKsmTi5
0J1Sg2oJpITzUd2jTsoO6Mjh6tUEeGLZCfh6V5Dpa5Uxd3uJW4FDYjClCuOhq3Is
wPWxD0PQjlQxtn911q42eKM1RaAYxLypoxd3nPFSitOMpRgGiyyvTGkaRVLXJsAx
X7GCYjXyFh5K54FYQU3NRfgtJMHEGA8OijlXH4wBYNCO0UvfSwxcSXCzLRdIVf5i
0+X39WYclDfUCfdSoUxLkKt+WkRNewkq3mc0Fg+PC/2Kva+XMyNjJe5saHO3p8sf
4vN5W/2TiSkP2oTXs5+mdenr1gksLXl5/dgNmsGoif/E1oS/a8dEt623mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGeys7QJ7GSf+mCa45ZNfGd1C8VMB8GA1UdIwQY
MBaAFIrUe6qapuCiCtmVp5wqjeYE+ao3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEt
ZjAxYTJmNThlZjg4LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEtZjAxYTJmNThlZjg4
LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxjGBvy+
4OPRHAV9t7tF88p8Q/yiVNqeVhX6WFqbf3ZmMDCo+ugtTxToS+ER5TuFlmPPTzXw
RRogLcE8x5b/o8ryoyxFL/Ro+sQP4l9nXCnN3ijREi3SLQ8GPWP4E/PzoGchLmbs
OUhOMOxEMNbmBXqpeIhHUbLzXQ/XFBCo/BV5xZGedOlvTUu5jDHcsU8Ckikm7atM
27GZ7/+cS6AT8wRcjPivFzYkIl1TbPUnXAu0QTH6km92M2n6s3he34evJtLvbi+O
7+RElj5x9IcpGl6HR4WcjW8K9joMlkwx/3bhlTB4kcBnGLGDcpvIErNFIHbesUjE
AdGLPIZ4khT1cw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:56:45 2025 by rpki-client