Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
File: IvtSiroBjxQvRETMzJcjc2zU5LY.mft (raw, json)
Hash identifier: gunZSLnujTBGpfaLJbVpYYz+JNLIfCw0MOpLsl8/XEk=
Subject key identifier: 7A:F8:98:FC:CE:C0:06:77:9D:36:4C:8F:AD:59:68:18:D0:C1:5D:3E
Authority key identifier: 22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
Certificate issuer: /CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Certificate serial: 0198469B5B60AFEAFD4DA10A51CF24958057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
Manifest number: 11EA
Signing time: Sat 26 Jul 2025 12:00:43 +0000
Manifest this update: Sat 26 Jul 2025 12:00:43 +0000
Manifest next update: Sun 27 Jul 2025 12:00:43 +0000
Files and hashes: 1: 4Qe9-T0nXWoVHW9lPtNAFV1MJeQ.roa (hash: MEUx9Qe02B/09ozBtbyk47nH68xJFm0Hu6pf18Q/8p0=)
2: IvtSiroBjxQvRETMzJcjc2zU5LY.crl (hash: FDG6zIKUu1KGaPtWjiyY8FncXf02V9Ujhx5/7yIXOU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:5b:60:af:ea:fd:4d:a1:0a:51:cf:24:95:80:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Validity
Not Before: Jul 26 12:00:43 2025 GMT
Not After : Jul 27 12:00:43 2025 GMT
Subject: CN=7af898fccec006779d364c8fad596818d0c15d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:92:e2:2c:b9:76:05:60:3a:4a:d5:5b:41:
f2:f3:b1:28:03:7c:44:59:44:5a:7e:a1:b4:49:13:
60:b7:3e:dc:b2:5d:b4:11:15:66:41:b6:90:84:e9:
a7:d7:dc:9f:85:65:16:e4:ee:d3:0a:df:06:69:21:
f4:01:ae:9a:64:dc:6e:e8:06:a5:42:8c:83:cb:18:
6b:3c:fb:5e:fa:e1:5c:26:e8:3d:33:4c:42:b4:b6:
c1:52:76:fa:8f:46:02:8f:2a:c9:4c:a5:7b:b7:6c:
2f:3e:c1:90:4a:b8:fa:7b:ca:78:07:0e:32:21:9b:
26:a7:97:ee:cd:8d:67:e5:0c:f1:5f:98:b8:82:75:
90:d4:fa:d1:22:57:35:12:82:b5:39:50:e6:e4:9a:
59:ab:92:41:e2:2c:62:b1:30:cb:74:46:8d:40:c0:
5a:54:60:ff:29:ab:42:62:a2:f6:15:04:b3:2a:ee:
0a:4e:db:87:8a:dd:53:69:24:49:64:77:b4:41:ce:
ee:92:93:97:70:88:c4:cf:45:e5:43:bf:40:f5:01:
6a:71:9b:7c:c7:96:5f:1b:bb:23:ab:77:9e:89:fc:
15:e4:fd:3a:8b:d3:9a:ef:af:7a:01:f9:46:b9:66:
70:de:c4:79:23:6b:be:ff:78:66:a5:27:00:ba:e5:
a8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F8:98:FC:CE:C0:06:77:9D:36:4C:8F:AD:59:68:18:D0:C1:5D:3E
X509v3 Authority Key Identifier:
keyid:22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:43:6e:43:7b:fb:61:9a:fc:46:a2:c4:16:20:70:32:0f:16:
0a:ab:2e:a5:92:b1:1f:e4:ed:cf:df:62:c5:09:bf:ec:7e:d8:
a1:bd:61:4b:b6:0a:5e:3a:b5:1e:69:4c:96:32:e2:e9:00:3e:
94:ba:be:63:55:10:4d:fc:36:86:57:d6:26:5a:54:e2:1e:5d:
dd:f2:0d:62:2e:be:72:b2:49:63:57:3a:40:3d:a1:76:e1:c5:
8b:ed:cc:0f:08:42:5e:50:de:5f:09:a8:e7:ac:e2:7c:bc:2b:
b0:6d:c3:6d:5c:32:4e:70:f9:ab:f0:26:b2:98:2a:b3:65:37:
6e:5b:7f:7c:27:e4:3e:66:24:19:92:3a:f0:4d:c2:1f:68:f7:
ee:45:57:d3:f4:55:21:45:39:a6:da:9e:f2:45:82:02:10:47:
94:cf:f7:6a:72:90:3d:e1:86:ea:a2:af:8b:50:c0:28:7d:42:
a5:50:34:60:bc:47:cf:77:bf:21:17:c8:17:dc:27:8b:d5:2d:
fb:44:fc:f1:7c:1d:16:fd:60:0f:4b:63:c4:e9:e2:d2:37:2e:
02:6f:17:d2:76:28:ba:73:6a:75:cd:a9:88:86:3f:8e:f5:e7:
d1:9e:96:b9:4d:ff:55:8d:a1:88:29:b9:61:00:21:61:33:3e:
78:64:e1:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGm1tgr+r9TaEKUc8klYBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmI1MjhhYmEwMThmMTQyZjQ0NDRjY2NjOTcyMzczNmNk
NGU0YjYwHhcNMjUwNzI2MTIwMDQzWhcNMjUwNzI3MTIwMDQzWjAzMTEwLwYDVQQD
Eyg3YWY4OThmY2NlYzAwNjc3OWQzNjRjOGZhZDU5NjgxOGQwYzE1ZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyWS4iy5dgVgOkrVW0Hy87EoA3xE
WURafqG0SRNgtz7csl20ERVmQbaQhOmn19yfhWUW5O7TCt8GaSH0Aa6aZNxu6Aal
QoyDyxhrPPte+uFcJug9M0xCtLbBUnb6j0YCjyrJTKV7t2wvPsGQSrj6e8p4Bw4y
IZsmp5fuzY1n5QzxX5i4gnWQ1PrRIlc1EoK1OVDm5JpZq5JB4ixisTDLdEaNQMBa
VGD/KatCYqL2FQSzKu4KTtuHit1TaSRJZHe0Qc7ukpOXcIjEz0XlQ79A9QFqcZt8
x5ZfG7sjq3eeifwV5P06i9Oa7696AflGuWZw3sR5I2u+/3hmpScAuuWo0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHr4mPzOwAZ3nTZMj61ZaBjQwV0+MB8GA1UdIwQY
MBaAFCL7Uoq6AY8UL0REzMyXI3Ns1OS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zODFkNjktMmM0MS00NWE4LTkwZDQt
NmFlOTBiMjQ3NTkyLzEvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zODFkNjktMmM0MS00NWE4LTkwZDQtNmFlOTBiMjQ3NTky
LzEvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoENuQ3v7
YZr8RqLEFiBwMg8WCqsupZKxH+Ttz99ixQm/7H7Yob1hS7YKXjq1HmlMljLi6QA+
lLq+Y1UQTfw2hlfWJlpU4h5d3fINYi6+crJJY1c6QD2hduHFi+3MDwhCXlDeXwmo
56zifLwrsG3DbVwyTnD5q/Amspgqs2U3blt/fCfkPmYkGZI68E3CH2j37kVX0/RV
IUU5ptqe8kWCAhBHlM/3anKQPeGG6qKvi1DAKH1CpVA0YLxHz3e/IRfIF9wni9Ut
+0T88XwdFv1gD0tjxOni0jcuAm8X0nYounNqdc2piIY/jvXn0Z6WuU3/VY2hiCm5
YQAhYTM+eGThoA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:49:44 2025 by rpki-client