Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: Fs89yl+dEvnfKmrysTVV1TpfvF7MRfSOmOCe0AUo9r8=
Subject key identifier: E4:20:13:59:1B:9B:80:9D:BE:06:93:8A:85:AC:93:77:6F:B1:35:F0
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 01975491066710487382C375632950D9762B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 0DEB
Signing time: Mon 09 Jun 2025 12:01:19 +0000
Manifest this update: Mon 09 Jun 2025 12:01:19 +0000
Manifest next update: Tue 10 Jun 2025 12:01:19 +0000
Files and hashes: 1: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: 2HVtiQQL5BdYW3Hvoq/rf/i1RAWem1V0Bn9d21MwMHk=)
2: t9nkji_Xq4DRGMttbRDw-jVfqPI.roa (hash: MJaMfbYXB+V545skyyIWbRiW1FYp9UFjL+ooREdIKpc=)
3: x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa (hash: bx0oE168u4Tmbz20f8oi8B9aCfZBYtjemV0iReEb4PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:91:06:67:10:48:73:82:c3:75:63:29:50:d9:76:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Jun 9 12:01:19 2025 GMT
Not After : Jun 10 12:01:19 2025 GMT
Subject: CN=e42013591b9b809dbe06938a85ac93776fb135f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:5a:ab:6d:74:5d:a0:c1:ce:0e:d9:d9:82:
a5:e8:3a:6e:21:16:c3:12:71:ec:14:40:8b:a2:cc:
34:c3:f3:b4:d1:a2:26:12:35:2e:fb:fd:df:eb:85:
a2:68:28:c9:fa:94:06:d5:c5:11:2a:b6:cc:79:8b:
21:6e:fd:cb:a9:8c:cd:bc:54:78:9c:6d:ba:f5:fc:
a0:a0:5a:23:42:06:75:55:bb:4b:aa:3e:37:53:34:
4c:0a:69:74:5d:35:7e:3b:38:18:ce:35:f0:78:79:
35:b6:40:25:4d:ad:2a:2b:c5:39:5a:42:86:88:5b:
24:bb:9b:77:f6:0f:a2:df:77:fa:9f:11:38:9c:43:
53:3a:24:b1:f6:68:c7:3d:7d:80:64:6f:dc:50:8e:
de:67:b1:c1:35:e7:91:35:86:52:b7:ec:b8:48:78:
30:06:4b:3e:fe:33:08:39:97:b3:4c:83:82:e8:99:
bf:19:45:73:7f:bc:da:83:4f:cb:4c:77:16:86:db:
e0:5a:ea:b3:4c:c1:eb:ff:a3:b8:3e:32:47:58:62:
ae:52:8d:86:7a:93:d4:0b:53:b4:73:60:10:2f:21:
d3:56:a6:77:f9:5f:ae:c2:c0:fe:7c:c8:4f:97:1a:
ae:24:6b:c0:b2:bf:ef:47:0b:28:5e:3a:1b:0f:34:
82:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:20:13:59:1B:9B:80:9D:BE:06:93:8A:85:AC:93:77:6F:B1:35:F0
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:60:87:4c:21:3d:45:a0:4a:57:fc:54:57:40:6d:03:8f:40:
ce:61:46:41:00:2a:81:c1:2e:a3:32:08:ce:06:c9:d4:8c:36:
d5:c4:7d:2b:da:57:bb:b8:f1:b0:ca:ad:66:0a:23:10:6e:49:
b9:21:11:2e:94:1a:84:14:86:f9:15:81:72:89:d0:cc:a0:16:
e5:6b:cd:cd:51:82:a7:14:9f:51:94:46:78:0a:46:bd:ed:5f:
e4:95:f5:67:fe:82:58:ea:6a:0d:03:20:bd:98:5e:69:0e:ed:
30:ae:5e:ab:fc:60:b9:70:7f:ed:8a:e1:13:8a:c4:b8:17:3e:
78:20:2e:c7:70:46:41:ed:fb:58:ac:31:04:98:9e:2e:e1:4a:
e3:f6:cf:83:41:5c:a3:43:24:f3:92:88:0c:70:92:eb:70:b2:
94:1a:9c:39:ab:b1:f4:17:55:8d:2c:c7:75:b5:26:31:d9:02:
f2:cc:d2:6b:4a:20:22:28:72:b5:a4:07:b8:34:c4:a2:33:ea:
31:97:f5:84:a6:dd:f0:e7:29:11:4b:e9:3f:66:1f:65:b1:ed:
45:48:32:cf:20:ec:4b:37:e0:86:bd:1b:45:ee:eb:a6:65:69:
a7:71:1b:4b:a3:83:67:8d:2c:ca:4a:18:21:22:00:22:be:95:
d5:28:a6:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUkQZnEEhzgsN1YylQ2XYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2E1ODEyNGNlOWNjNDM3ODM5NTUyNTVlN2Y1ODM5MDVj
ZGIxNGUwHhcNMjUwNjA5MTIwMTE5WhcNMjUwNjEwMTIwMTE5WjAzMTEwLwYDVQQD
EyhlNDIwMTM1OTFiOWI4MDlkYmUwNjkzOGE4NWFjOTM3NzZmYjEzNWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdJaq210XaDBzg7Z2YKl6DpuIRbD
EnHsFECLosw0w/O00aImEjUu+/3f64WiaCjJ+pQG1cURKrbMeYshbv3LqYzNvFR4
nG269fygoFojQgZ1VbtLqj43UzRMCml0XTV+OzgYzjXweHk1tkAlTa0qK8U5WkKG
iFsku5t39g+i33f6nxE4nENTOiSx9mjHPX2AZG/cUI7eZ7HBNeeRNYZSt+y4SHgw
Bks+/jMIOZezTIOC6Jm/GUVzf7zag0/LTHcWhtvgWuqzTMHr/6O4PjJHWGKuUo2G
epPUC1O0c2AQLyHTVqZ3+V+uwsD+fMhPlxquJGvAsr/vRwsoXjobDzSCRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQgE1kbm4CdvgaTioWsk3dvsTXwMB8GA1UdIwQY
MBaAFIk6WBJM6cxDeDlVJV5/WDkFzbFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hMzUyYmEtYzIyOC00YTE1LTkxNjgt
MzAzYjhiYzI4YmZhLzEvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hMzUyYmEtYzIyOC00YTE1LTkxNjgtMzAzYjhiYzI4YmZh
LzEvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2CHTCE9
RaBKV/xUV0BtA49AzmFGQQAqgcEuozIIzgbJ1Iw21cR9K9pXu7jxsMqtZgojEG5J
uSERLpQahBSG+RWBconQzKAW5WvNzVGCpxSfUZRGeApGve1f5JX1Z/6CWOpqDQMg
vZheaQ7tMK5eq/xguXB/7YrhE4rEuBc+eCAux3BGQe37WKwxBJieLuFK4/bPg0Fc
o0Mk85KIDHCS63CylBqcOaux9BdVjSzHdbUmMdkC8szSa0ogIihytaQHuDTEojPq
MZf1hKbd8OcpEUvpP2YfZbHtRUgyzyDsSzfghr0bRe7rpmVpp3EbS6ODZ40sykoY
ISIAIr6V1Sim3Q==
-----END CERTIFICATE-----
Generated at Mon Jun 9 20:11:08 2025 by rpki-client