Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: FfCqdsHictJ2Z2UoMT00SBg2dDqCXBa17ZsZ2BWevOA=
Subject key identifier: 47:BB:E9:78:00:9F:E4:F5:5A:C1:48:A5:A5:87:E5:CA:8A:4D:9F:88
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 01984A4167A7653E613CA6854E34CFD63BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 094A
Signing time: Sun 27 Jul 2025 05:00:56 +0000
Manifest this update: Sun 27 Jul 2025 05:00:56 +0000
Manifest next update: Mon 28 Jul 2025 05:00:56 +0000
Files and hashes: 1: 7LeNtT1Py-375udT6tgnEczdaA4.roa (hash: KcUWkl6MBuk85woap7zLa0rzE+sobb9Vo8npqesilrw=)
2: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: 9hTFLJje9sIK2Bl4nDjdQqAxFeWFJFbrX7/B7eagIIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:67:a7:65:3e:61:3c:a6:85:4e:34:cf:d6:3b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Jul 27 05:00:56 2025 GMT
Not After : Jul 28 05:00:56 2025 GMT
Subject: CN=47bbe978009fe4f55ac148a5a587e5ca8a4d9f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:c0:2a:20:75:a3:8a:cf:10:f1:1a:af:62:
91:6b:d8:f5:bc:5a:09:f1:27:ab:7f:fd:06:f5:f7:
ea:a7:17:f7:20:f4:f5:c8:dd:6f:46:1b:2a:0f:65:
95:f5:71:13:72:98:85:60:0a:21:2b:78:96:84:d4:
0c:a0:31:65:1f:df:28:28:44:80:a3:46:50:a6:8c:
94:6a:3d:e6:a9:04:ce:19:1a:13:4f:1e:f0:f8:3c:
af:5f:f8:38:28:e5:f3:14:a4:3f:98:ad:9e:d6:17:
95:a1:98:8c:fd:2b:a1:d3:ef:ef:d1:1a:54:8a:0c:
ab:0d:8f:93:09:93:d8:6c:0b:95:78:5a:46:da:33:
17:9d:c7:85:63:7f:6a:84:47:cf:f3:c3:fb:f8:d1:
75:2b:4c:31:53:e6:8b:1e:f7:45:3c:28:43:30:67:
40:63:61:51:74:7c:f2:e8:07:c3:c4:f1:e6:37:9d:
92:10:03:1b:1f:4a:1e:3d:6a:7f:3d:ad:3b:6e:76:
34:ac:85:06:2d:8e:f6:95:57:22:b5:85:06:78:50:
a9:d6:06:8e:a0:bf:c5:99:d5:85:72:e7:d6:2a:96:
7c:ba:ce:5a:2b:93:8b:31:d9:d5:c3:73:bd:71:14:
f4:99:3a:e6:f9:e9:60:e0:cc:97:8e:3f:f1:cb:17:
86:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BB:E9:78:00:9F:E4:F5:5A:C1:48:A5:A5:87:E5:CA:8A:4D:9F:88
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:eb:a7:9f:56:55:f7:4f:0c:cd:8f:63:e9:ed:43:de:eb:64:
d8:5f:4f:14:db:87:dd:54:bf:0b:4f:e6:b4:76:26:56:2e:1d:
28:0a:46:85:82:8c:a5:0a:19:ac:78:39:de:e5:00:58:38:30:
32:d0:b8:97:82:a0:c9:c3:cd:8e:f2:c0:85:ad:da:13:c9:9a:
e8:98:0b:3c:37:5c:85:48:bf:2a:b8:1e:41:74:28:83:9c:07:
cd:32:b6:3e:9f:7c:0d:93:3c:2f:8f:02:ac:34:d1:a2:f1:b7:
0c:3c:86:89:38:cb:a1:85:82:a1:a4:78:9e:1d:b1:7b:6f:6a:
9e:00:a5:0b:da:d9:1c:07:28:fb:6b:30:b3:1e:b2:8c:54:d1:
98:42:46:49:1c:4c:dd:44:eb:7d:55:cc:a5:f2:9a:a8:24:30:
41:48:a5:b9:71:a4:ae:ff:16:78:1e:d5:17:ba:03:ad:9f:ac:
87:3e:54:09:91:c0:d6:51:4d:25:41:74:5d:3a:ff:e8:8c:80:
06:cf:8c:6a:50:42:35:a0:1e:64:86:f7:3e:ca:98:1a:d1:76:
78:2e:e5:61:33:21:ee:c5:5b:58:7e:19:80:0a:6d:84:e2:fd:
f4:b4:d9:0f:4d:f9:54:8d:a7:ae:aa:34:ea:75:58:6f:f8:57:
0a:14:6b:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQWenZT5hPKaFTjTP1jvdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMTMwYzk5YWM3YWE0MDg2YzcxNzU3MTE0YTQxNjNmODAw
OTAxNDIwHhcNMjUwNzI3MDUwMDU2WhcNMjUwNzI4MDUwMDU2WjAzMTEwLwYDVQQD
Eyg0N2JiZTk3ODAwOWZlNGY1NWFjMTQ4YTVhNTg3ZTVjYThhNGQ5Zjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3LAKiB1o4rPEPEar2KRa9j1vFoJ
8Serf/0G9ffqpxf3IPT1yN1vRhsqD2WV9XETcpiFYAohK3iWhNQMoDFlH98oKESA
o0ZQpoyUaj3mqQTOGRoTTx7w+DyvX/g4KOXzFKQ/mK2e1heVoZiM/Suh0+/v0RpU
igyrDY+TCZPYbAuVeFpG2jMXnceFY39qhEfP88P7+NF1K0wxU+aLHvdFPChDMGdA
Y2FRdHzy6AfDxPHmN52SEAMbH0oePWp/Pa07bnY0rIUGLY72lVcitYUGeFCp1gaO
oL/FmdWFcufWKpZ8us5aK5OLMdnVw3O9cRT0mTrm+elg4MyXjj/xyxeGMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe76XgAn+T1WsFIpaWH5cqKTZ+IMB8GA1UdIwQY
MBaAFCMTDJmseqQIbHF1cRSkFj+ACQFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81YzNhZTYtMjkzNC00NzllLThjMmQt
OGU4ZDViM2U1NTg2LzEvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81YzNhZTYtMjkzNC00NzllLThjMmQtOGU4ZDViM2U1NTg2
LzEvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOunn1ZV
908MzY9j6e1D3utk2F9PFNuH3VS/C0/mtHYmVi4dKApGhYKMpQoZrHg53uUAWDgw
MtC4l4KgycPNjvLAha3aE8ma6JgLPDdchUi/KrgeQXQog5wHzTK2Pp98DZM8L48C
rDTRovG3DDyGiTjLoYWCoaR4nh2xe29qngClC9rZHAco+2swsx6yjFTRmEJGSRxM
3UTrfVXMpfKaqCQwQUiluXGkrv8WeB7VF7oDrZ+shz5UCZHA1lFNJUF0XTr/6IyA
Bs+MalBCNaAeZIb3PsqYGtF2eC7lYTMh7sVbWH4ZgApthOL99LTZD035VI2nrqo0
6nVYb/hXChRrmg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:11 2025 by rpki-client