Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
File: Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json)
Hash identifier: 6e3DOCVQT0PhzBPmkWnKwtsfitHMxVpY1PCcyLO5HYU=
Subject key identifier: 5C:99:37:61:E4:B6:BE:CB:21:F3:A1:01:CC:CB:E0:A6:9C:DF:AE:70
Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Certificate serial: 0197488D39D737F2A865FBB5CBD9F7FE2CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
Manifest number: 0FEC
Signing time: Sat 07 Jun 2025 04:01:44 +0000
Manifest this update: Sat 07 Jun 2025 04:01:44 +0000
Manifest next update: Sun 08 Jun 2025 04:01:44 +0000
Files and hashes: 1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: HPTs4ATjP0IBD2bg6pIQlxkfyPqhB5F3254epRr0ZKA=)
2: uDx7Z1tuokndeydIySa8WuoqYoI.roa (hash: V+Jlh82Z7YVpAlrJMiPWI0QRjW3a+dx4x4YSGHlfjZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:39:d7:37:f2:a8:65:fb:b5:cb:d9:f7:fe:2c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Validity
Not Before: Jun 7 04:01:44 2025 GMT
Not After : Jun 8 04:01:44 2025 GMT
Subject: CN=5c993761e4b6becb21f3a101cccbe0a69cdfae70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:7e:83:7c:53:86:00:f0:af:0a:c5:d8:0a:
08:10:1f:8e:b1:6b:74:9c:4f:5c:a3:15:61:c0:17:
50:e9:1e:84:f5:d6:12:fe:32:1b:90:a1:8e:4a:41:
1f:03:c8:81:e4:e2:42:af:56:9a:16:12:b9:3b:d8:
fb:4b:8c:f8:0d:cc:f3:64:f4:1b:b1:24:07:ed:62:
21:94:8a:b7:2f:a4:57:e3:4e:0a:93:89:af:b7:88:
95:16:7f:b7:39:58:09:fb:ba:29:45:4b:ba:d0:30:
47:f4:42:c4:5b:68:75:38:42:59:d4:58:33:95:fe:
a7:c3:1d:34:29:81:6a:bc:56:4c:91:ac:67:9a:99:
b8:c1:14:eb:e9:8c:5e:b9:b2:6a:48:c8:31:e1:08:
86:e2:db:72:b2:cd:07:c8:8b:e4:94:cd:73:c1:5a:
b1:1d:d4:b8:5d:30:57:e3:6b:52:11:ad:1f:c3:d2:
15:a2:16:5c:af:e8:db:0e:47:3e:9e:ea:6f:da:44:
03:52:2b:d8:9b:03:91:36:9d:36:a2:da:af:94:74:
39:ce:aa:3d:ca:bf:03:54:a8:e8:1e:d0:46:eb:16:
ef:41:0c:ff:09:c7:b6:1a:5a:e9:44:51:27:e3:bb:
32:d1:ab:8e:3c:ee:0c:04:fc:cf:8b:b8:13:6f:3a:
3e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:99:37:61:E4:B6:BE:CB:21:F3:A1:01:CC:CB:E0:A6:9C:DF:AE:70
X509v3 Authority Key Identifier:
keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c2:c9:ef:46:6e:32:2c:df:06:12:99:66:53:01:f7:79:ea:
13:05:2b:22:6b:4e:fc:4b:80:5c:30:7c:07:89:5c:68:bf:af:
ed:c4:1e:b0:57:2a:8b:73:dc:14:4d:48:5a:ea:fa:0f:9f:72:
d8:c4:a5:4a:c7:1b:97:ad:63:c1:92:b3:b6:63:5f:f9:7c:89:
fa:a3:1f:af:06:57:d1:da:e7:49:79:49:d1:a6:0c:e2:ed:8c:
95:69:ab:e9:20:f1:27:72:c7:b9:db:ac:95:23:43:10:35:5a:
04:4d:94:7c:e2:b5:7f:83:b0:b5:24:27:20:e0:53:0b:58:7f:
98:c3:c3:eb:dc:f8:77:ae:b5:8c:8b:5e:bc:f9:be:85:3e:e7:
44:b5:f1:aa:c9:19:08:ae:87:8e:3e:3d:aa:aa:5e:2e:a3:ff:
dc:59:e8:cb:6e:b6:c6:44:69:e3:a7:1b:19:e1:61:cf:ff:7c:
d3:25:7e:5b:59:d2:ee:ce:8e:e9:47:fd:3c:58:83:7a:ae:89:
f4:54:1e:d0:b5:38:93:14:7e:2d:89:6f:d4:60:d7:a9:41:00:
86:5d:fa:b6:01:9f:65:d4:5f:49:63:29:d8:0e:f7:f1:18:b9:
83:1f:8b:c7:81:a8:5c:10:1b:21:03:79:a9:0a:e9:73:20:a2:
67:b3:ff:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjTnXN/KoZfu1y9n3/izAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYWIzYmJjYjNjZDUzMjZhOGIxMjRmYzk1ZGVkMTQ0NTM3
NTJmYTIwHhcNMjUwNjA3MDQwMTQ0WhcNMjUwNjA4MDQwMTQ0WjAzMTEwLwYDVQQD
Eyg1Yzk5Mzc2MWU0YjZiZWNiMjFmM2ExMDFjY2NiZTBhNjljZGZhZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ll+g3xThgDwrwrF2AoIEB+OsWt0
nE9coxVhwBdQ6R6E9dYS/jIbkKGOSkEfA8iB5OJCr1aaFhK5O9j7S4z4DczzZPQb
sSQH7WIhlIq3L6RX404Kk4mvt4iVFn+3OVgJ+7opRUu60DBH9ELEW2h1OEJZ1Fgz
lf6nwx00KYFqvFZMkaxnmpm4wRTr6YxeubJqSMgx4QiG4ttyss0HyIvklM1zwVqx
HdS4XTBX42tSEa0fw9IVohZcr+jbDkc+nupv2kQDUivYmwORNp02otqvlHQ5zqo9
yr8DVKjoHtBG6xbvQQz/Cce2GlrpRFEn47sy0auOPO4MBPzPi7gTbzo+SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyZN2Hktr7LIfOhAczL4Kac365wMB8GA1UdIwQY
MBaAFCKrO7yzzVMmqLEk/JXe0URTdS+iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUt
ZmE4YTVlODZiMzQ4LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUtZmE4YTVlODZiMzQ4
LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcLJ70Zu
MizfBhKZZlMB93nqEwUrImtO/EuAXDB8B4lcaL+v7cQesFcqi3PcFE1IWur6D59y
2MSlSscbl61jwZKztmNf+XyJ+qMfrwZX0drnSXlJ0aYM4u2MlWmr6SDxJ3LHudus
lSNDEDVaBE2UfOK1f4OwtSQnIOBTC1h/mMPD69z4d661jItevPm+hT7nRLXxqskZ
CK6Hjj49qqpeLqP/3Fnoy262xkRp46cbGeFhz/980yV+W1nS7s6O6Uf9PFiDeq6J
9FQe0LU4kxR+LYlv1GDXqUEAhl36tgGfZdRfSWMp2A738Ri5gx+Lx4GoXBAbIQN5
qQrpcyCiZ7P/eQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:31:33 2025 by rpki-client