Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json)
Hash identifier: SAV77sRTZSMJGDf1x8ExZ+JBRb63GHo9s/74r1EXMXw=
Subject key identifier: EB:85:B0:1F:D7:17:9C:CD:74:B9:D0:8D:66:50:8D:B3:87:09:4B:62
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 01974B8D75C8146FD7C49CE0C08CCBB3D023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
Manifest number: 07F4
Signing time: Sat 07 Jun 2025 18:00:51 +0000
Manifest this update: Sat 07 Jun 2025 18:00:51 +0000
Manifest next update: Sun 08 Jun 2025 18:00:51 +0000
Files and hashes: 1: EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa (hash: WGOFdfPIgmzQx9aGUgM6u6XYxnkTJOLa0M2Z4HLrsFA=)
2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: 9QRQdO5pw3xEWtSw+lekJef6mfT609vFEAh4WDerEGY=)
3: TaMd7DA-6NrsYwAIJaSvClB4fpo.roa (hash: dkRPf4s5CoCdHNuMtPMADul0c0mdFRvVK8/5OUkpYlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:75:c8:14:6f:d7:c4:9c:e0:c0:8c:cb:b3:d0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Jun 7 18:00:51 2025 GMT
Not After : Jun 8 18:00:51 2025 GMT
Subject: CN=eb85b01fd7179ccd74b9d08d66508db387094b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:95:8c:a1:c7:48:56:70:62:0a:ab:df:f0:0f:
1b:57:72:61:ba:8b:d2:b8:cf:34:d4:91:b8:cb:02:
f8:5e:2a:fa:aa:28:2f:be:27:0d:c1:88:0a:52:b0:
fe:8b:96:cb:80:e3:a8:95:69:c6:30:18:d8:17:b2:
78:02:87:17:b0:06:68:57:24:ec:d3:9f:6d:28:42:
ca:55:8d:e0:ef:63:cc:c0:cc:24:ca:c0:a3:50:01:
08:21:fd:d6:f4:30:e5:20:e6:78:bd:1a:23:ba:87:
8d:27:12:3c:b7:0e:24:c6:cc:27:10:a2:97:e0:c8:
65:6f:50:da:87:72:8d:87:11:bf:e9:da:71:a1:9f:
db:71:76:a2:41:bb:27:03:02:f6:0c:91:60:8c:f9:
3a:6e:e4:fa:65:8b:3e:d6:d1:00:45:a2:c3:87:90:
3e:80:a8:2a:0e:d9:b0:e0:2e:45:ba:8c:74:00:64:
8c:2f:ed:0b:6b:56:20:85:cf:59:78:33:74:78:c8:
5e:5e:6e:87:e5:3e:7c:88:d3:92:27:c2:72:37:ce:
de:13:65:9c:a0:bc:98:be:5f:aa:f5:3d:46:33:83:
09:b4:e5:cc:d9:4a:8c:a3:fa:38:eb:2f:63:f7:8b:
56:90:16:88:5a:99:e9:0f:64:e4:3d:fe:c3:1c:65:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:85:B0:1F:D7:17:9C:CD:74:B9:D0:8D:66:50:8D:B3:87:09:4B:62
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2d:27:47:a5:9b:a2:f5:21:c1:cb:14:69:0f:4a:83:82:fb:
ec:7d:b8:8e:77:77:39:83:2d:01:46:4e:e6:a6:41:b0:6b:21:
a2:fa:7c:9a:42:fe:4f:65:0f:22:6d:ba:24:77:57:05:81:eb:
df:c3:98:a2:33:8a:bf:c1:97:ec:c0:a7:e9:44:38:83:aa:ca:
d9:1e:11:1b:84:67:11:28:e8:f6:c6:a2:9c:ff:bd:81:61:a0:
c2:cd:f2:24:0e:fc:91:1c:4e:70:9f:3b:c5:91:7a:b9:3f:12:
06:ec:e1:7b:12:34:56:af:4a:b7:73:9f:ca:7b:b4:9f:84:fa:
c1:b1:cc:30:f5:03:08:a4:3f:fc:ba:25:b4:06:f7:15:10:f1:
9a:b6:30:03:f4:60:72:bc:49:64:19:ed:9a:fd:3a:82:0a:c1:
64:d5:2d:dc:e2:2d:a6:ba:67:59:72:c2:5c:85:47:3f:a4:0a:
df:4e:46:47:9d:fb:89:26:7c:0e:92:df:95:a2:0d:bf:dc:86:
25:2e:d1:b0:ea:aa:b4:cb:85:1b:2f:1b:8c:18:f9:2d:2b:e9:
3d:9e:46:9d:18:cf:59:66:84:64:66:9b:84:69:83:6a:b4:e9:
a6:a4:92:ac:e9:53:df:5f:86:f9:43:76:cd:1e:51:e5:1c:11:
46:42:97:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjXXIFG/XxJzgwIzLs9AjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyOWZiMGZiM2QyNzhlMWIyODBhNzc3ZGUyMDBlZmJkMDhi
YWFjMzAwHhcNMjUwNjA3MTgwMDUxWhcNMjUwNjA4MTgwMDUxWjAzMTEwLwYDVQQD
EyhlYjg1YjAxZmQ3MTc5Y2NkNzRiOWQwOGQ2NjUwOGRiMzg3MDk0YjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35WMocdIVnBiCqvf8A8bV3JhuovS
uM801JG4ywL4Xir6qigvvicNwYgKUrD+i5bLgOOolWnGMBjYF7J4AocXsAZoVyTs
059tKELKVY3g72PMwMwkysCjUAEIIf3W9DDlIOZ4vRojuoeNJxI8tw4kxswnEKKX
4Mhlb1Dah3KNhxG/6dpxoZ/bcXaiQbsnAwL2DJFgjPk6buT6ZYs+1tEARaLDh5A+
gKgqDtmw4C5Fuox0AGSML+0La1Yghc9ZeDN0eMheXm6H5T58iNOSJ8JyN87eE2Wc
oLyYvl+q9T1GM4MJtOXM2UqMo/o46y9j94tWkBaIWpnpD2TkPf7DHGUfrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuFsB/XF5zNdLnQjWZQjbOHCUtiMB8GA1UdIwQY
MBaAFCKfsPs9J44bKAp3feIA770IuqwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82YzU0YTktOWZlNS00ODkzLTlkYTct
N2I5ODY2MzNhYzVlLzEvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82YzU0YTktOWZlNS00ODkzLTlkYTctN2I5ODY2MzNhYzVl
LzEvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMC0nR6Wb
ovUhwcsUaQ9Kg4L77H24jnd3OYMtAUZO5qZBsGshovp8mkL+T2UPIm26JHdXBYHr
38OYojOKv8GX7MCn6UQ4g6rK2R4RG4RnESjo9sainP+9gWGgws3yJA78kRxOcJ87
xZF6uT8SBuzhexI0Vq9Kt3Ofynu0n4T6wbHMMPUDCKQ//LoltAb3FRDxmrYwA/Rg
crxJZBntmv06ggrBZNUt3OItprpnWXLCXIVHP6QK305GR537iSZ8DpLflaINv9yG
JS7RsOqqtMuFGy8bjBj5LSvpPZ5GnRjPWWaEZGabhGmDarTppqSSrOlT31+G+UN2
zR5R5RwRRkKXEA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:35:58 2025 by rpki-client