Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: LEsgiGGmDwbxI/GLekieEiQPX7byR1gnuyl+Xux3+YU=
Subject key identifier: 88:11:9C:E3:F2:CA:6F:9D:E1:7C:CB:2E:4E:50:9E:F2:EC:5E:3F:EE
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 019747E75BF150D024C521EFD9CF7DFF9ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 137C
Signing time: Sat 07 Jun 2025 01:00:33 +0000
Manifest this update: Sat 07 Jun 2025 01:00:33 +0000
Manifest next update: Sun 08 Jun 2025 01:00:33 +0000
Files and hashes: 1: Dbw0YKXPol3saHGjQJtz9o_YK0E.roa (hash: SxzLeQKHeNdqB63pBhgkGBN/CeBMjvrLZxTWY/WlAKg=)
2: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: RG//EcdCP3SCZgF+kW/+HW/m2TAZS5cur1zZ07mDIA8=)
3: UAWIgik98ovvIJWv4yjj5lBqzOo.roa (hash: jrAxhhr23FpKpzjy0AGBEFjJeK035eZKHkroGqfSgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:5b:f1:50:d0:24:c5:21:ef:d9:cf:7d:ff:9e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Jun 7 01:00:33 2025 GMT
Not After : Jun 8 01:00:33 2025 GMT
Subject: CN=88119ce3f2ca6f9de17ccb2e4e509ef2ec5e3fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:56:4e:75:99:e5:02:e4:0f:0b:1a:28:ff:6b:
b5:61:f8:86:a2:2f:aa:6d:0b:2b:55:cb:3a:74:e7:
a2:26:28:f9:00:88:4c:a6:5d:b1:bf:5d:70:46:77:
77:e0:7d:86:eb:ef:58:58:a0:48:66:f0:48:bf:bb:
21:20:3d:71:0a:9c:a0:c5:ca:c5:f4:61:26:39:49:
9b:43:17:1c:3e:d0:09:b0:e6:bc:29:e0:f2:cf:d0:
d9:b9:89:2e:b8:ea:db:ac:a1:18:bf:8e:ad:7d:3e:
71:34:e4:78:76:76:f6:02:c2:83:25:9e:40:88:06:
a3:45:39:5e:51:36:b5:41:4e:8b:42:b6:b3:43:90:
f3:b4:44:c6:59:a4:0c:f0:e1:33:c6:38:72:9d:6b:
18:97:aa:1f:7f:c6:9f:a2:5c:5b:dd:16:e4:bc:a1:
82:d1:ea:1e:08:29:cb:28:10:3e:e6:6a:d2:5f:a6:
60:32:0b:2c:07:95:91:06:5d:7b:af:73:bb:b6:5f:
25:87:8c:3b:01:98:15:12:58:b6:81:ba:6c:d7:be:
01:8b:b3:59:53:22:03:0c:1e:2a:ce:f4:9d:9d:76:
1b:fd:64:08:66:3d:0a:1c:d2:f7:c3:f5:f2:fd:66:
fc:1b:9b:34:41:e3:52:d8:8a:1a:35:fc:eb:f5:71:
b0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:11:9C:E3:F2:CA:6F:9D:E1:7C:CB:2E:4E:50:9E:F2:EC:5E:3F:EE
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:2a:f1:34:87:26:9a:3a:5b:07:20:28:30:0f:43:f0:e8:49:
32:51:c3:3f:cf:7a:a3:c6:26:e2:11:6f:44:0d:93:58:8c:d1:
c5:1d:8e:60:81:28:ae:5a:54:7f:51:45:16:63:4e:4f:b6:e2:
ea:9c:1f:06:f8:10:52:bd:02:70:a4:e4:14:1a:00:76:84:da:
32:17:31:0d:2c:1c:be:55:11:01:b8:7c:73:21:8f:b5:0b:70:
0c:7f:c5:dd:ec:62:97:c2:19:b3:3f:21:5a:33:f3:d5:1c:01:
df:63:87:27:4d:bf:02:38:ee:80:70:76:42:6b:13:05:be:b4:
29:3a:b6:94:36:91:03:c2:83:41:96:18:9d:dd:45:1b:81:35:
82:4e:36:1f:f2:7a:a4:b5:76:a8:49:24:89:36:74:e6:65:ed:
99:7f:99:3e:e7:06:9a:50:c0:1f:04:9a:41:09:cf:d4:7c:3a:
61:3d:30:9f:a9:b7:25:6e:42:c3:31:4b:f0:d0:fd:97:4a:78:
04:cf:d8:eb:fd:c5:d1:bc:c5:8c:b8:bd:e9:92:13:cf:9a:4a:
96:4c:f7:04:aa:f1:00:92:c4:65:cb:09:83:81:7c:2a:61:ef:
a6:54:3e:d0:90:d4:41:b8:b3:47:28:b8:44:55:9b:1b:2d:b5:
aa:8a:16:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH51vxUNAkxSHv2c99/57SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmY1YmNmNzM5YjA3MzJmYjFiY2RiNzE3ZWM3MTdmNmYx
Y2IwZTIwHhcNMjUwNjA3MDEwMDMzWhcNMjUwNjA4MDEwMDMzWjAzMTEwLwYDVQQD
Eyg4ODExOWNlM2YyY2E2ZjlkZTE3Y2NiMmU0ZTUwOWVmMmVjNWUzZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FZOdZnlAuQPCxoo/2u1YfiGoi+q
bQsrVcs6dOeiJij5AIhMpl2xv11wRnd34H2G6+9YWKBIZvBIv7shID1xCpygxcrF
9GEmOUmbQxccPtAJsOa8KeDyz9DZuYkuuOrbrKEYv46tfT5xNOR4dnb2AsKDJZ5A
iAajRTleUTa1QU6LQrazQ5DztETGWaQM8OEzxjhynWsYl6off8afolxb3RbkvKGC
0eoeCCnLKBA+5mrSX6ZgMgssB5WRBl17r3O7tl8lh4w7AZgVEli2gbps174Bi7NZ
UyIDDB4qzvSdnXYb/WQIZj0KHNL3w/Xy/Wb8G5s0QeNS2IoaNfzr9XGwxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgRnOPyym+d4XzLLk5QnvLsXj/uMB8GA1UdIwQY
MBaAFCL/W89zmwcy+xvNtxfscX9vHLDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2Ut
NzYwM2U1ZGQ1NzA3LzEvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2UtNzYwM2U1ZGQ1NzA3
LzEvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzCrxNIcm
mjpbByAoMA9D8OhJMlHDP896o8Ym4hFvRA2TWIzRxR2OYIEorlpUf1FFFmNOT7bi
6pwfBvgQUr0CcKTkFBoAdoTaMhcxDSwcvlURAbh8cyGPtQtwDH/F3exil8IZsz8h
WjPz1RwB32OHJ02/AjjugHB2QmsTBb60KTq2lDaRA8KDQZYYnd1FG4E1gk42H/J6
pLV2qEkkiTZ05mXtmX+ZPucGmlDAHwSaQQnP1Hw6YT0wn6m3JW5CwzFL8ND9l0p4
BM/Y6/3F0bzFjLi96ZITz5pKlkz3BKrxAJLEZcsJg4F8KmHvplQ+0JDUQbizRyi4
RFWbGy21qooWxw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:11 2025 by rpki-client