Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
File: I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json)
Hash identifier: /p17MdtUx2NwrdY3O7UbEFPI2L5xCEcT+0EbPpe2o84=
Subject key identifier: 0D:72:C1:90:AA:44:AE:10:87:1D:AB:D6:FC:B2:D3:BA:F1:CB:2B:C4
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial: 019853E8C6E43A2B4AA93FACE9D994ACAC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 02:00:20 +0000
Manifest this update: Tue 29 Jul 2025 02:00:20 +0000
Manifest next update: Wed 30 Jul 2025 02:00:20 +0000
Files and hashes: 1: BSo6esZVhXizhr6rXIY91M7Ycb0.roa (hash: rDl9FCgKvio+Um9dNVGYTCS6mmU9eKk7X7/TBLZ4IMU=)
2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: pH5LAcKsV9RkjbERo355Tl2Ys2sr7VV86AFw4eLMhXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:c6:e4:3a:2b:4a:a9:3f:ac:e9:d9:94:ac:ac:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Validity
Not Before: Jul 29 02:00:20 2025 GMT
Not After : Jul 30 02:00:20 2025 GMT
Subject: CN=0d72c190aa44ae10871dabd6fcb2d3baf1cb2bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:9a:00:84:20:bd:9e:ba:fd:3e:35:e6:c3:
d8:c5:f4:ae:84:9c:c6:3e:59:ed:f9:2c:66:ad:c4:
ed:08:39:68:4f:ec:b9:fb:8d:ba:6c:84:74:58:8b:
3b:93:f8:19:e6:ae:93:95:59:2b:1e:7e:80:16:f9:
55:b5:e8:7d:0c:c6:da:b0:84:93:a8:ed:86:c4:0f:
2d:35:e6:ea:34:79:16:d8:99:dd:8a:85:3c:d4:f6:
0c:fa:44:2a:d6:1b:91:97:54:0b:fd:05:32:7e:73:
6f:cb:cd:94:e5:4f:5e:c3:e2:f8:66:67:26:d7:73:
6a:27:54:e2:5d:9b:e2:c8:73:4d:70:2c:b3:8b:5d:
e9:a8:e3:b3:fe:75:b0:9e:08:95:c0:11:b1:f3:6b:
8b:e7:4a:83:aa:83:83:a6:ba:14:41:d4:06:6a:52:
0f:13:2c:44:b9:10:9e:a9:0c:6a:35:e2:b7:88:1a:
d4:0d:cc:3a:c7:98:22:62:ed:dd:41:51:01:f0:70:
6c:e4:37:ef:97:47:36:4a:06:5e:5f:1b:45:20:ff:
b7:d8:b7:56:15:bd:6f:93:d4:0a:3d:9b:1b:35:f8:
f2:94:7f:1a:9c:6c:b7:a4:22:b7:f7:a4:11:d8:94:
5c:5b:3e:e1:90:5b:93:fb:e7:4e:a6:7b:0e:57:25:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:72:C1:90:AA:44:AE:10:87:1D:AB:D6:FC:B2:D3:BA:F1:CB:2B:C4
X509v3 Authority Key Identifier:
keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:14:c6:d3:d2:a1:58:a9:d9:a1:46:f2:19:3a:e3:30:57:46:
50:04:fa:b4:dc:89:ef:d8:60:a3:17:a7:04:61:c5:e2:a9:ef:
bd:20:5c:d7:e3:dd:b3:c6:fb:f2:45:29:c1:f9:63:70:9b:1f:
ca:35:9a:16:1a:3b:9d:46:8d:3d:86:d5:89:cd:e7:e9:06:94:
17:82:b0:50:0a:19:66:96:dd:b0:c6:e8:46:d0:ce:b6:af:a1:
05:47:0b:44:c9:9c:f9:5e:e2:29:7f:5c:ec:06:e9:32:b4:d0:
08:15:f9:f4:6c:2b:17:b8:6a:26:9d:0c:24:4d:26:b5:ed:50:
2c:66:db:f4:95:50:20:40:9d:31:5d:55:cc:12:0a:47:86:b0:
62:a8:8a:30:df:ca:bb:24:56:e2:e0:30:fb:5a:bf:29:0a:e5:
2b:87:68:53:49:57:33:5f:bc:06:89:c8:fa:6f:ba:d3:b1:54:
8c:36:9f:47:dd:58:92:cf:07:f2:0a:62:37:10:12:88:80:02:
f9:7f:e1:10:39:69:d3:c4:a2:fc:3d:6c:c7:92:00:0a:51:70:
3f:27:4e:c3:de:3c:42:9e:ba:71:0b:ed:84:27:11:fd:29:0c:
59:b0:1b:85:0f:e0:3f:4a:39:cf:b0:c2:75:01:9e:1d:30:53:
5e:8f:1c:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhT6MbkOitKqT+s6dmUrKxrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZTIyZjhiZGVkY2JlMTliYjMzZmNlMTRmYzFkYjZhZTNh
NDBlOTAwHhcNMjUwNzI5MDIwMDIwWhcNMjUwNzMwMDIwMDIwWjAzMTEwLwYDVQQD
EygwZDcyYzE5MGFhNDRhZTEwODcxZGFiZDZmY2IyZDNiYWYxY2IyYmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGqaAIQgvZ66/T415sPYxfSuhJzG
Plnt+SxmrcTtCDloT+y5+426bIR0WIs7k/gZ5q6TlVkrHn6AFvlVteh9DMbasIST
qO2GxA8tNebqNHkW2JndioU81PYM+kQq1huRl1QL/QUyfnNvy82U5U9ew+L4Zmcm
13NqJ1TiXZviyHNNcCyzi13pqOOz/nWwngiVwBGx82uL50qDqoODproUQdQGalIP
EyxEuRCeqQxqNeK3iBrUDcw6x5giYu3dQVEB8HBs5Dfvl0c2SgZeXxtFIP+32LdW
Fb1vk9QKPZsbNfjylH8anGy3pCK396QR2JRcWz7hkFuT++dOpnsOVyXNmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1ywZCqRK4Qhx2r1vyy07rxyyvEMB8GA1UdIwQY
MBaAFCPiL4ve3L4ZuzP84U/B22rjpA6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMt
NzRiZDA0NWIyYWY3LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMtNzRiZDA0NWIyYWY3
LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRTG09Kh
WKnZoUbyGTrjMFdGUAT6tNyJ79hgoxenBGHF4qnvvSBc1+Pds8b78kUpwfljcJsf
yjWaFho7nUaNPYbVic3n6QaUF4KwUAoZZpbdsMboRtDOtq+hBUcLRMmc+V7iKX9c
7AbpMrTQCBX59GwrF7hqJp0MJE0mte1QLGbb9JVQIECdMV1VzBIKR4awYqiKMN/K
uyRW4uAw+1q/KQrlK4doU0lXM1+8BonI+m+607FUjDafR91Yks8H8gpiNxASiIAC
+X/hEDlp08Si/D1sx5IAClFwPydOw948Qp66cQvthCcR/SkMWbAbhQ/gP0o5z7DC
dQGeHTBTXo8cBg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 08:04:04 2025 by rpki-client