Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json)
Hash identifier: TLYyjXyzq0R+WIHmBF1hbi9ePUduEVdEsQVWIYbiIVw=
Subject key identifier: 03:1C:7D:4C:0C:41:F3:12:C4:5D:72:3E:F8:8F:E2:E6:D0:48:5E:EB
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 01974A7B57A92025F221EA791F89290CB3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 13:01:26 +0000
Manifest this update: Sat 07 Jun 2025 13:01:26 +0000
Manifest next update: Sun 08 Jun 2025 13:01:26 +0000
Files and hashes: 1: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=)
2: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: w5/DFpQlvtMVnTis3SMN/daSMA2HXYe79h46Akr5x8w=)
3: S3A1POWiFi4TlajvXsCPIiaaz_4.roa (hash: IXC2iM5ax6sDDcgMKmOBil5L9Ty3tdxbCnAuaFnmWnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:57:a9:20:25:f2:21:ea:79:1f:89:29:0c:b3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Jun 7 13:01:26 2025 GMT
Not After : Jun 8 13:01:26 2025 GMT
Subject: CN=031c7d4c0c41f312c45d723ef88fe2e6d0485eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:6b:ec:a3:08:34:96:87:fc:93:bb:b1:dc:
63:12:9f:12:f0:b5:82:57:ae:9f:a0:db:b3:a9:d4:
6a:22:46:e8:a1:69:95:5a:87:a9:60:17:db:cb:94:
8e:df:12:fb:34:3e:f2:16:9d:96:8e:fa:61:4c:d1:
26:60:3c:80:28:17:4d:67:d3:3d:e8:f9:bd:b8:ff:
97:9c:09:29:76:52:32:28:7d:ff:6e:8f:cf:5f:08:
3d:08:7f:cd:fd:52:9f:95:67:e4:d2:b5:3f:79:4d:
d9:9c:46:87:88:03:ae:40:ab:b0:79:05:a9:ef:8b:
38:8f:68:48:3d:9c:68:4c:6f:65:9f:2c:27:c9:92:
8e:cf:b4:8e:aa:d4:8d:b3:06:ef:f4:19:c7:47:bc:
fd:98:ea:9d:c5:5a:6c:84:72:0c:9f:d4:7a:22:1a:
8d:82:71:52:17:31:9f:25:c8:5e:2e:51:cd:0b:1e:
89:4d:b6:28:42:1d:5e:bd:04:4d:99:92:69:58:b8:
03:19:ce:80:79:f5:07:81:d9:00:16:c4:87:2b:24:
79:cb:c9:7b:1b:e6:58:4c:ac:70:1d:93:95:60:cb:
6f:9b:cf:c4:ee:9a:6e:45:35:98:e1:93:a6:3b:8a:
87:14:35:aa:31:40:1e:86:77:17:7b:4b:df:b6:ba:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1C:7D:4C:0C:41:F3:12:C4:5D:72:3E:F8:8F:E2:E6:D0:48:5E:EB
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:67:9b:c4:69:58:51:5f:76:50:0a:1f:f4:e0:3a:a1:c0:fd:
2d:57:f4:c1:d6:13:d7:00:cd:59:32:3d:2c:f6:23:25:73:61:
d3:bd:6b:be:8a:f5:72:f1:93:a9:a0:e2:27:3e:84:fb:db:f9:
b4:f6:4d:8e:44:76:65:ce:df:62:f9:18:fb:79:f5:5a:64:b6:
21:4b:61:20:40:a6:4c:22:94:7c:c3:21:0a:3e:8b:d0:4d:ae:
1e:b2:4f:40:4e:3b:0c:af:f1:52:95:ac:d8:09:ee:aa:cf:36:
e1:0d:84:7a:55:be:9c:53:17:76:ec:b0:9c:84:07:8b:28:6c:
a2:fe:09:39:03:6e:13:1d:29:fd:3f:29:fa:3a:15:b6:e7:a4:
28:43:56:ef:ea:f0:8b:0e:c4:7d:3d:1e:b3:53:81:14:d7:e8:
95:b1:e5:1c:eb:cf:cc:eb:0f:3f:e7:c6:72:07:f5:05:75:06:
37:72:d6:a9:58:0a:70:b1:f3:11:19:1f:f0:53:d1:14:e5:76:
2b:a9:89:20:8f:6b:b9:62:bd:58:65:77:3b:b8:fd:b4:e1:86:
61:a6:95:d1:58:34:b4:34:a4:28:a5:a8:7c:66:34:a7:09:ce:
d8:75:2c:5b:d6:03:55:36:1a:7a:f7:bf:8c:44:ff:6a:fd:b0:
c2:7e:68:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe1epICXyIep5H4kpDLPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj
NGM4ZTgwHhcNMjUwNjA3MTMwMTI2WhcNMjUwNjA4MTMwMTI2WjAzMTEwLwYDVQQD
EygwMzFjN2Q0YzBjNDFmMzEyYzQ1ZDcyM2VmODhmZTJlNmQwNDg1ZWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkdr7KMINJaH/JO7sdxjEp8S8LWC
V66foNuzqdRqIkbooWmVWoepYBfby5SO3xL7ND7yFp2WjvphTNEmYDyAKBdNZ9M9
6Pm9uP+XnAkpdlIyKH3/bo/PXwg9CH/N/VKflWfk0rU/eU3ZnEaHiAOuQKuweQWp
74s4j2hIPZxoTG9lnywnyZKOz7SOqtSNswbv9BnHR7z9mOqdxVpshHIMn9R6IhqN
gnFSFzGfJcheLlHNCx6JTbYoQh1evQRNmZJpWLgDGc6AefUHgdkAFsSHKyR5y8l7
G+ZYTKxwHZOVYMtvm8/E7ppuRTWY4ZOmO4qHFDWqMUAehncXe0vftrq8NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMcfUwMQfMSxF1yPviP4ubQSF7rMB8GA1UdIwQY
MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt
ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3
LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWebxGlY
UV92UAof9OA6ocD9LVf0wdYT1wDNWTI9LPYjJXNh071rvor1cvGTqaDiJz6E+9v5
tPZNjkR2Zc7fYvkY+3n1WmS2IUthIECmTCKUfMMhCj6L0E2uHrJPQE47DK/xUpWs
2Anuqs824Q2EelW+nFMXduywnIQHiyhsov4JOQNuEx0p/T8p+joVtuekKENW7+rw
iw7EfT0es1OBFNfolbHlHOvPzOsPP+fGcgf1BXUGN3LWqVgKcLHzERkf8FPRFOV2
K6mJII9ruWK9WGV3O7j9tOGGYaaV0Vg0tDSkKKWofGY0pwnO2HUsW9YDVTYaeve/
jET/av2wwn5oaA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:57:30 2025 by rpki-client