Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
File: IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft (raw, json)
Hash identifier: t92EE8j+zZeH/blP9t5IKx2LAr3n16UnxxQaDDlIyjE=
Subject key identifier: 57:01:45:27:C6:0D:DD:3A:35:B6:77:49:6C:F1:6D:89:6C:C0:82:73
Authority key identifier: 23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
Certificate issuer: /CN=23162bbf0246cda2280a293432ae6f0bd6826131
Certificate serial: 01974BFB263D3C0C99AD93A644AF4BB95D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
Manifest number: 0841
Signing time: Sat 07 Jun 2025 20:00:39 +0000
Manifest this update: Sat 07 Jun 2025 20:00:39 +0000
Manifest next update: Sun 08 Jun 2025 20:00:39 +0000
Files and hashes: 1: IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl (hash: g0M3hVXAYnOTBT9IXq4eqx1YRuslrJys6ucZQovuz+M=)
2: _Ya9SawdjIbplJ2DDMKFuiItpWw.roa (hash: D98XW56rnTmNC9SFO3Lu162y4j8aooITvkhCs2VUjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:26:3d:3c:0c:99:ad:93:a6:44:af:4b:b9:5d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23162bbf0246cda2280a293432ae6f0bd6826131
Validity
Not Before: Jun 7 20:00:39 2025 GMT
Not After : Jun 8 20:00:39 2025 GMT
Subject: CN=57014527c60ddd3a35b677496cf16d896cc08273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:fb:83:4b:b5:1a:d6:7b:bd:fc:06:a2:bd:
3b:12:75:10:70:88:2f:43:30:4d:05:9d:d9:0d:1a:
ff:87:26:2a:63:23:5d:58:11:ae:d7:5c:a4:c5:c8:
e0:ac:df:2d:f6:38:84:73:d2:7f:b8:d1:08:53:47:
30:f0:fe:a1:bb:1b:16:32:70:c9:33:c1:e2:90:f4:
12:11:9f:f6:5b:0f:1d:ee:21:37:98:6b:7a:b2:69:
72:1a:de:fc:2d:82:08:23:62:e4:5e:b9:92:c9:78:
8b:2e:3a:94:db:ab:b3:ea:5d:55:47:a0:d3:e7:f1:
6d:d0:21:8a:4a:94:ad:b2:bb:bd:df:ad:ab:47:26:
95:7d:8b:cd:ae:5f:fc:7a:d2:e0:0a:81:19:d0:6b:
df:55:2b:36:4b:f4:b0:25:4d:bf:57:98:49:96:9d:
8f:42:3d:26:d6:56:d5:67:fa:cc:cb:db:43:95:87:
83:f2:2b:3b:58:90:f3:8e:08:31:9f:9e:1a:a0:91:
b5:4e:ae:fd:6c:70:41:6d:a0:15:92:3f:94:7e:5d:
75:4c:d6:d4:6d:c4:dd:f6:95:97:08:e3:17:02:b5:
bc:a9:f8:ae:17:44:4c:93:ef:71:18:15:61:40:f9:
1a:4f:be:5a:65:a2:90:51:da:6f:17:4b:6e:06:b1:
e5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:01:45:27:C6:0D:DD:3A:35:B6:77:49:6C:F1:6D:89:6C:C0:82:73
X509v3 Authority Key Identifier:
keyid:23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:be:c4:30:b4:aa:e9:e9:e3:31:d6:02:6a:20:6e:88:7f:f8:
85:e1:c3:63:c2:22:70:bb:47:0f:37:5a:9b:d8:c5:44:e3:b5:
43:41:39:86:e7:a0:1f:a3:f3:67:69:86:05:f3:52:aa:58:90:
a4:21:e1:a4:2b:cc:85:4c:36:8a:b1:bc:f2:0a:70:e2:bd:ce:
0e:43:94:70:3d:7c:d3:f0:c0:ee:d2:dc:83:b9:0d:2e:ab:ea:
ca:b9:8f:77:65:7e:7b:8c:c8:8e:ba:67:29:f3:5b:cf:5d:29:
0b:1b:30:23:70:37:a9:85:57:18:30:cb:ea:ff:52:73:1c:33:
10:f3:5c:74:3c:c6:b1:fa:4a:9a:ab:9b:d3:60:f1:4f:fe:9b:
cd:3c:20:d4:ef:34:51:04:b2:3c:a5:3c:29:66:74:d4:a6:9c:
ed:04:f5:2d:09:63:30:d8:37:01:63:be:d7:5a:81:99:b3:a5:
94:18:0b:bf:2a:c5:af:fe:40:3e:85:3b:d1:12:08:6c:6a:07:
5e:52:02:41:75:ef:a1:67:c6:ed:47:d5:76:da:ad:5c:64:6c:
35:b2:00:f7:2b:d6:bb:80:e6:14:f0:ef:54:0e:ee:0f:b7:31:
0b:ce:37:c2:1c:58:4b:8d:e7:0f:09:94:6c:81:8c:ee:20:eb:
5b:7f:82:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+yY9PAyZrZOmRK9LuV2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMTYyYmJmMDI0NmNkYTIyODBhMjkzNDMyYWU2ZjBiZDY4
MjYxMzEwHhcNMjUwNjA3MjAwMDM5WhcNMjUwNjA4MjAwMDM5WjAzMTEwLwYDVQQD
Eyg1NzAxNDUyN2M2MGRkZDNhMzViNjc3NDk2Y2YxNmQ4OTZjYzA4MjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp37g0u1GtZ7vfwGor07EnUQcIgv
QzBNBZ3ZDRr/hyYqYyNdWBGu11ykxcjgrN8t9jiEc9J/uNEIU0cw8P6huxsWMnDJ
M8HikPQSEZ/2Ww8d7iE3mGt6smlyGt78LYIII2LkXrmSyXiLLjqU26uz6l1VR6DT
5/Ft0CGKSpStsru9362rRyaVfYvNrl/8etLgCoEZ0GvfVSs2S/SwJU2/V5hJlp2P
Qj0m1lbVZ/rMy9tDlYeD8is7WJDzjggxn54aoJG1Tq79bHBBbaAVkj+Ufl11TNbU
bcTd9pWXCOMXArW8qfiuF0RMk+9xGBVhQPkaT75aZaKQUdpvF0tuBrHlfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcBRSfGDd06NbZ3SWzxbYlswIJzMB8GA1UdIwQY
MBaAFCMWK78CRs2iKAopNDKubwvWgmExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZjk2ODktYTkxNS00MTI3LWE0NzAt
ODVjMzA1ZjlmZTZmLzEvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8yZjk2ODktYTkxNS00MTI3LWE0NzAtODVjMzA1ZjlmZTZm
LzEvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx77EMLSq
6enjMdYCaiBuiH/4heHDY8IicLtHDzdam9jFROO1Q0E5huegH6PzZ2mGBfNSqliQ
pCHhpCvMhUw2irG88gpw4r3ODkOUcD180/DA7tLcg7kNLqvqyrmPd2V+e4zIjrpn
KfNbz10pCxswI3A3qYVXGDDL6v9ScxwzEPNcdDzGsfpKmqub02DxT/6bzTwg1O80
UQSyPKU8KWZ01Kac7QT1LQljMNg3AWO+11qBmbOllBgLvyrFr/5APoU70RIIbGoH
XlICQXXvoWfG7UfVdtqtXGRsNbIA9yvWu4DmFPDvVA7uD7cxC843whxYS43nDwmU
bIGM7iDrW3+CbA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:26:54 2025 by rpki-client