Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: bUhdkazmYTLh9J0JULfpZbPuMUnClMyetgMu9TlTwYw=
Subject key identifier: A0:3D:EE:21:C9:1E:C8:30:76:76:80:59:9B:7D:2C:B8:EC:37:B9:28
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 0197462FD16B656B7725088E7706E2AC8FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 049B
Signing time: Fri 06 Jun 2025 17:00:28 +0000
Manifest this update: Fri 06 Jun 2025 17:00:28 +0000
Manifest next update: Sat 07 Jun 2025 17:00:28 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: a8xkupVtTJnkOG5ilLTYrDTPef5yuNMK1SHEwTZUgnA=)
2: NppGj-vB7qPIZEIjN2QiF53Di1w.roa (hash: /HZmGG+wWIrcuKRavKc6Cvy6ql5RNC9frBmMmRXn2ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:d1:6b:65:6b:77:25:08:8e:77:06:e2:ac:8f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Jun 6 17:00:28 2025 GMT
Not After : Jun 7 17:00:28 2025 GMT
Subject: CN=a03dee21c91ec830767680599b7d2cb8ec37b928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8c:ec:82:d0:f4:e4:bd:13:1c:57:11:66:9f:
76:a5:64:44:ff:10:d1:8d:a0:5e:8a:7f:73:84:2b:
cf:53:bb:24:ff:c4:3d:e9:12:12:d9:fc:ff:f0:5b:
9a:2d:ae:60:dd:81:44:54:64:45:fd:3d:af:58:a2:
06:0d:21:75:4a:94:91:d8:6c:6f:9c:d3:7e:9b:36:
ff:36:c8:9b:74:9b:d5:4e:32:6e:9d:fd:9a:7d:d6:
ef:3a:1a:37:90:43:0b:5e:90:1d:90:34:e4:70:3f:
e7:a9:92:1d:96:62:c5:6d:60:59:31:4d:80:58:fc:
3e:0d:b1:8b:7f:30:9e:f6:f7:0a:42:22:41:bd:dd:
02:8e:cc:f0:a9:30:65:d3:b2:b2:c5:51:ad:5a:fa:
b3:d7:2a:09:54:d4:e3:47:db:30:b9:e3:2c:b1:41:
15:2b:7f:cb:dc:af:35:f2:d0:09:14:2f:d8:7a:c4:
80:06:d5:1a:e5:44:d9:a2:0c:35:e6:a0:db:94:3a:
28:3c:a6:7d:03:79:d0:d1:91:a4:c4:e9:d4:0b:f1:
f1:e0:82:14:d3:4d:6c:9f:0a:08:77:52:ba:8d:d0:
8a:dc:5a:29:c4:af:f0:eb:73:a9:dd:21:ca:b9:55:
2b:11:1f:7e:19:7f:b3:a9:59:ef:3a:b9:58:f4:8b:
80:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3D:EE:21:C9:1E:C8:30:76:76:80:59:9B:7D:2C:B8:EC:37:B9:28
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:db:86:1b:62:f4:e3:c7:53:c2:b3:df:23:bd:7a:0d:eb:9a:
08:0e:ed:52:86:33:12:95:ca:4b:31:f1:6a:bb:bf:5c:7c:58:
97:65:28:d6:ee:be:57:fd:88:b6:91:ac:f8:14:a6:38:6d:ad:
b7:81:04:b8:dc:4c:b4:30:d9:8a:86:a5:25:c2:e9:95:e9:90:
08:e0:e9:25:3b:3f:37:00:df:b4:d4:f5:df:93:8e:d9:a6:f1:
10:a4:fc:58:a4:fb:aa:90:b8:ae:cc:6e:de:26:d6:80:8e:47:
17:3f:8a:b8:db:01:7a:84:97:36:c2:33:8a:9e:d1:56:aa:4b:
f2:55:0d:08:0f:12:5a:87:03:5e:1e:45:dd:c0:c4:8d:f4:17:
73:ef:5a:97:30:74:c6:81:49:ab:16:23:d4:bc:62:9c:9c:bc:
c4:8d:df:f8:97:8d:4a:d2:6b:30:1e:dd:31:80:6a:c4:00:98:
4e:48:03:2b:5c:44:c5:b4:a5:bb:a6:74:3c:35:37:15:fd:e6:
a0:df:41:02:fb:2d:51:c7:86:5b:27:ed:b9:f2:dc:9a:99:e1:
f8:11:97:0a:1a:76:18:c9:50:53:d4:57:9f:cb:07:4e:c0:27:
aa:5a:84:9b:e6:da:7c:9c:48:30:88:16:ca:51:ea:ea:1e:fc:
55:c0:e0:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGL9FrZWt3JQiOdwbirI+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTE5ZWQ4NWEyYzBjZmM0ZjUwYmVhZDE2ZmM5ZjZmMTQ2
NWFkMTEwHhcNMjUwNjA2MTcwMDI4WhcNMjUwNjA3MTcwMDI4WjAzMTEwLwYDVQQD
EyhhMDNkZWUyMWM5MWVjODMwNzY3NjgwNTk5YjdkMmNiOGVjMzdiOTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYzsgtD05L0THFcRZp92pWRE/xDR
jaBein9zhCvPU7sk/8Q96RIS2fz/8FuaLa5g3YFEVGRF/T2vWKIGDSF1SpSR2Gxv
nNN+mzb/NsibdJvVTjJunf2afdbvOho3kEMLXpAdkDTkcD/nqZIdlmLFbWBZMU2A
WPw+DbGLfzCe9vcKQiJBvd0CjszwqTBl07KyxVGtWvqz1yoJVNTjR9swueMssUEV
K3/L3K818tAJFC/YesSABtUa5UTZogw15qDblDooPKZ9A3nQ0ZGkxOnUC/Hx4IIU
001snwoId1K6jdCK3FopxK/w63Op3SHKuVUrER9+GX+zqVnvOrlY9IuAawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKA97iHJHsgwdnaAWZt9LLjsN7koMB8GA1UdIwQY
MBaAFCKhnthaLAz8T1C+rRb8n28UZa0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMt
ZDdiMmFkMDFhMWQ3LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMtZDdiMmFkMDFhMWQ3
LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANduGG2L0
48dTwrPfI716DeuaCA7tUoYzEpXKSzHxaru/XHxYl2Uo1u6+V/2ItpGs+BSmOG2t
t4EEuNxMtDDZioalJcLplemQCODpJTs/NwDftNT135OO2abxEKT8WKT7qpC4rsxu
3ibWgI5HFz+KuNsBeoSXNsIzip7RVqpL8lUNCA8SWocDXh5F3cDEjfQXc+9alzB0
xoFJqxYj1LxinJy8xI3f+JeNStJrMB7dMYBqxACYTkgDK1xExbSlu6Z0PDU3Ff3m
oN9BAvstUceGWyftufLcmpnh+BGXChp2GMlQU9RXn8sHTsAnqlqEm+bafJxIMIgW
ylHq6h78VcDg/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:15 2025 by rpki-client