Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: WsXLNsoOwVTac09WfX5kXTIdHIB1rDv5+sD7Hjf58EU=
Subject key identifier: 49:87:24:47:73:75:8E:8C:19:FD:22:38:F0:8A:15:AA:81:49:07:58
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 01974A438E73744DD97464D6E3A359ECD954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 0D62
Signing time: Sat 07 Jun 2025 12:00:30 +0000
Manifest this update: Sat 07 Jun 2025 12:00:30 +0000
Manifest next update: Sun 08 Jun 2025 12:00:30 +0000
Files and hashes: 1: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=)
2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: Spx4/5i+w5WX//57pQwt70rLBIBdT4OIldnsswXyOwE=)
3: l9Ip7JI4fAFd10Cj77KHHSrnVWw.roa (hash: SkELgqgLspURpsKcvlJgINn6NNXlC7+9EjVyn8WnT2A=)
4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:8e:73:74:4d:d9:74:64:d6:e3:a3:59:ec:d9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Jun 7 12:00:30 2025 GMT
Not After : Jun 8 12:00:30 2025 GMT
Subject: CN=4987244773758e8c19fd2238f08a15aa81490758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:f2:fe:83:4f:f3:21:68:2d:18:b6:90:28:
10:e5:d7:a0:b9:b0:d8:95:b3:bc:74:57:54:c5:f9:
78:5d:6d:fa:e4:10:98:6a:50:74:10:b9:eb:59:c4:
fc:f8:11:63:d8:4e:e1:08:89:f9:b2:30:be:64:75:
5b:ed:94:61:e4:09:93:5a:fe:c3:b4:4c:30:a2:7b:
bc:6d:ca:87:07:39:ee:8d:c8:5e:c0:09:e5:3f:7c:
d4:dd:50:af:2a:68:f7:02:9b:e3:a6:31:16:ba:0a:
0d:fe:b8:8d:52:ce:e7:3f:5f:c1:c6:98:12:c8:d0:
bf:b0:f9:74:d3:c7:41:60:c8:b9:61:07:b3:0f:8b:
7a:84:e6:92:1a:d5:77:9c:93:28:f2:83:26:2f:26:
20:7a:3a:d7:7c:2e:34:87:09:a2:65:61:27:50:0f:
83:e7:7b:43:a8:98:1e:e1:c2:c1:14:63:cb:0e:17:
4e:aa:c3:48:73:a5:87:46:9a:af:ed:8a:a7:c8:36:
d2:d1:c0:c4:07:97:1d:a9:12:77:9e:c7:d2:5a:ff:
b7:8a:53:a7:26:28:fa:b5:94:4f:43:f8:34:a7:f0:
56:95:fc:77:26:ea:12:93:c8:c7:38:8d:ea:f3:ac:
65:22:d2:3b:5b:ce:ba:99:04:4c:92:87:5b:c4:38:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:87:24:47:73:75:8E:8C:19:FD:22:38:F0:8A:15:AA:81:49:07:58
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a5:c9:01:83:25:68:4d:fe:68:b3:de:6f:c6:9b:7c:98:e2:
5d:f3:cf:09:1f:d0:94:0b:34:c6:15:0c:9b:7c:aa:22:92:de:
2a:b0:77:0b:1f:59:ad:2e:da:1e:e6:e0:51:9b:2d:2c:dd:af:
ed:de:84:d9:4f:74:68:d2:45:1c:94:cf:31:cd:c2:5a:4f:1d:
1f:6e:44:89:ee:d4:2d:c4:35:e2:b5:90:cc:ec:37:1c:24:54:
56:df:f0:8e:d5:53:a2:73:ee:b6:f9:dd:fa:6a:e8:1c:f4:be:
a0:49:ff:90:44:b8:bf:bf:6f:72:6d:72:7b:35:d8:e9:71:bd:
42:71:c9:d5:b3:2c:c2:29:c6:5e:45:d3:39:29:84:54:38:b1:
32:a1:85:a2:d3:c2:a4:c9:9c:30:6a:aa:64:b7:4a:15:0e:32:
84:8b:5e:0d:e1:b0:d2:f5:21:b5:53:ba:fa:3e:93:ae:c9:00:
dd:e8:0e:b4:24:5b:2e:1d:f1:52:3c:5f:42:74:34:0a:15:73:
7b:58:ea:ba:2f:ba:7c:82:5e:03:3b:3b:4e:33:5b:2a:d2:a9:
ae:62:3d:69:f4:25:8b:18:b3:a3:4e:a5:ea:48:44:2d:89:95:
4c:7c:ee:1e:54:37:25:ee:c6:c4:45:1c:57:f0:02:ca:c9:fb:
e5:80:65:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ45zdE3ZdGTW46NZ7NlUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzZlZDVmNTYyM2VkZWI3OTEwYWNkMzFkNWY2ZWU4MWU1
Y2IxN2UwHhcNMjUwNjA3MTIwMDMwWhcNMjUwNjA4MTIwMDMwWjAzMTEwLwYDVQQD
Eyg0OTg3MjQ0NzczNzU4ZThjMTlmZDIyMzhmMDhhMTVhYTgxNDkwNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupby/oNP8yFoLRi2kCgQ5degubDY
lbO8dFdUxfl4XW365BCYalB0ELnrWcT8+BFj2E7hCIn5sjC+ZHVb7ZRh5AmTWv7D
tEwwonu8bcqHBznujchewAnlP3zU3VCvKmj3ApvjpjEWugoN/riNUs7nP1/BxpgS
yNC/sPl008dBYMi5YQezD4t6hOaSGtV3nJMo8oMmLyYgejrXfC40hwmiZWEnUA+D
53tDqJge4cLBFGPLDhdOqsNIc6WHRpqv7YqnyDbS0cDEB5cdqRJ3nsfSWv+3ilOn
Jij6tZRPQ/g0p/BWlfx3JuoSk8jHOI3q86xlItI7W866mQRMkodbxDjZewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmHJEdzdY6MGf0iOPCKFaqBSQdYMB8GA1UdIwQY
MBaAFCI27V9WI+3reRCs0x1fbugeXLF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjct
NGQxNmJlOWJhMTMyLzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjctNGQxNmJlOWJhMTMy
LzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6XJAYMl
aE3+aLPeb8abfJjiXfPPCR/QlAs0xhUMm3yqIpLeKrB3Cx9ZrS7aHubgUZstLN2v
7d6E2U90aNJFHJTPMc3CWk8dH25Eie7ULcQ14rWQzOw3HCRUVt/wjtVTonPutvnd
+mroHPS+oEn/kES4v79vcm1yezXY6XG9QnHJ1bMswinGXkXTOSmEVDixMqGFotPC
pMmcMGqqZLdKFQ4yhIteDeGw0vUhtVO6+j6TrskA3egOtCRbLh3xUjxfQnQ0ChVz
e1jqui+6fIJeAzs7TjNbKtKprmI9afQlixizo06l6khELYmVTHzuHlQ3Je7GxEUc
V/ACysn75YBlXA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:37:22 2025 by rpki-client