Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
File: IE19hlKpn8F__y197MSeVWqg64A.mft (raw, json)
Hash identifier: kX3mFhRmmubG8D5M9X+9UlsChDZZvBEJKqnP+WIONBo=
Subject key identifier: 6D:14:16:38:9A:AA:35:D3:AA:0D:7D:F5:DA:D1:CA:82:39:2F:5D:A2
Authority key identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
Certificate issuer: /CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Certificate serial: 019751C64B456E51375792605547EBD0AB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
Manifest number: 0285
Signing time: Sun 08 Jun 2025 23:00:39 +0000
Manifest this update: Sun 08 Jun 2025 23:00:39 +0000
Manifest next update: Mon 09 Jun 2025 23:00:39 +0000
Files and hashes: 1: IE19hlKpn8F__y197MSeVWqg64A.crl (hash: oCUgmrvm+XQifdcXrRayT34NTlCijv52sa+aFb9QzHU=)
2: qVpN4Y8KxLODwpDOgLN11KilqHg.roa (hash: 09hTebOsoFtxumaEhzqwE7uj7IeLGjUIKeNrykM3gp8=)
3: tdhuYGIdy-7BcAqbVeS6RaDWjiM.roa (hash: Sh6aeKnHHbg/58/2+xd9mufW5cUQ13QaLyf7FAUXcc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:4b:45:6e:51:37:57:92:60:55:47:eb:d0:ab:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Validity
Not Before: Jun 8 23:00:39 2025 GMT
Not After : Jun 9 23:00:39 2025 GMT
Subject: CN=6d1416389aaa35d3aa0d7df5dad1ca82392f5da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:5d:a9:bc:e9:70:32:ed:17:9f:0e:12:c1:
0c:e7:d1:32:eb:ac:a2:86:04:2b:b7:14:1e:64:f2:
09:45:ee:39:53:96:d8:bf:2f:a7:a4:73:77:bd:3c:
66:e8:50:52:bb:dc:ab:2f:f5:d9:4e:e5:67:ae:cb:
1c:f1:82:9f:d7:71:21:83:bc:b7:61:b7:e1:9d:60:
74:14:56:06:4b:65:44:ca:57:f0:85:a8:09:50:35:
30:25:3e:b2:38:05:8e:41:b3:a0:6a:70:5e:d8:45:
b7:9f:5e:6e:ef:a9:25:18:1c:91:87:5a:63:9d:31:
e1:37:08:a0:c8:d1:9e:c6:6c:a0:d6:2c:55:fd:f6:
c0:20:cb:7b:3e:ca:e1:11:7c:cb:c6:0f:ff:a6:0b:
a1:21:48:dd:9b:ae:94:8d:f8:98:84:db:dd:a1:e3:
83:93:18:b2:9f:d5:99:37:11:d8:49:b3:1e:3e:9f:
c4:e5:67:73:87:84:71:cc:04:a4:f9:84:9a:81:c7:
cf:76:86:e0:c1:f8:3e:9a:a0:82:50:ff:5a:be:bf:
38:6d:79:ca:41:86:37:a9:5e:c3:55:0b:4a:b3:72:
a8:96:92:ca:bc:d6:3a:7a:80:ee:7c:3b:57:b2:12:
21:14:16:a9:8f:18:77:1e:35:75:02:2d:89:eb:6c:
79:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:14:16:38:9A:AA:35:D3:AA:0D:7D:F5:DA:D1:CA:82:39:2F:5D:A2
X509v3 Authority Key Identifier:
keyid:20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cc:a7:02:cb:d8:0a:92:f0:2a:d6:9a:cb:15:6b:45:29:24:
63:24:bc:46:23:05:ff:fb:c6:35:fd:6d:7b:70:ae:c0:08:90:
1d:d8:24:2a:e4:9c:e2:92:d0:9c:97:49:f2:dc:26:d1:50:c2:
ed:16:76:93:3f:41:1e:ee:18:83:03:ca:56:dd:c5:0a:1c:ca:
89:fe:9b:1e:e0:97:81:3a:69:bb:e9:aa:7c:65:16:45:18:c4:
a3:0d:31:27:2e:ce:72:31:78:db:42:79:88:f3:dc:29:fc:3f:
7a:37:94:9e:91:c5:74:e7:d1:a8:46:a5:0a:8f:0b:99:44:af:
4e:44:b9:02:af:08:06:5a:18:28:b8:13:f0:d4:02:be:0a:a1:
9e:21:21:45:dd:af:37:02:41:27:fb:f9:10:38:aa:e4:7c:b0:
42:36:91:a4:3d:a1:b4:f4:9e:50:6e:4b:54:f4:94:62:34:0c:
30:7e:af:21:6b:87:70:9f:1a:d7:14:ed:43:be:ca:8a:39:43:
aa:c2:ba:0c:97:b7:82:54:ce:83:f6:81:50:af:1a:9f:a7:ab:
22:ce:2b:b4:7b:6d:c3:88:5c:f4:14:61:cb:5f:ac:87:74:2b:
4a:d4:f3:27:2b:81:45:f0:08:35:d0:05:79:52:d8:dd:8f:ba:
8f:84:64:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRxktFblE3V5JgVUfr0Ks1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNGQ3ZDg2NTJhOTlmYzE3ZmZmMmQ3ZGVjYzQ5ZTU1NmFh
MGViODAwHhcNMjUwNjA4MjMwMDM5WhcNMjUwNjA5MjMwMDM5WjAzMTEwLwYDVQQD
Eyg2ZDE0MTYzODlhYWEzNWQzYWEwZDdkZjVkYWQxY2E4MjM5MmY1ZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYRdqbzpcDLtF58OEsEM59Ey66yi
hgQrtxQeZPIJRe45U5bYvy+npHN3vTxm6FBSu9yrL/XZTuVnrssc8YKf13Ehg7y3
YbfhnWB0FFYGS2VEylfwhagJUDUwJT6yOAWOQbOganBe2EW3n15u76klGByRh1pj
nTHhNwigyNGexmyg1ixV/fbAIMt7PsrhEXzLxg//pguhIUjdm66UjfiYhNvdoeOD
kxiyn9WZNxHYSbMePp/E5Wdzh4RxzASk+YSagcfPdobgwfg+mqCCUP9avr84bXnK
QYY3qV7DVQtKs3KolpLKvNY6eoDufDtXshIhFBapjxh3HjV1Ai2J62x5LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0UFjiaqjXTqg199drRyoI5L12iMB8GA1UdIwQY
MBaAFCBNfYZSqZ/Bf/8tfezEnlVqoOuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUUxOWhsS3BuOEZfX3kxOTdNU2VWV3FnNjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hYzA2OTQtMWUyMi00MzZkLTgyYzkt
MTdjZTYyMGU3NGYxLzEvSUUxOWhsS3BuOEZfX3kxOTdNU2VWV3FnNjRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hYzA2OTQtMWUyMi00MzZkLTgyYzktMTdjZTYyMGU3NGYx
LzEvSUUxOWhsS3BuOEZfX3kxOTdNU2VWV3FnNjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMynAsvY
CpLwKtaayxVrRSkkYyS8RiMF//vGNf1te3CuwAiQHdgkKuSc4pLQnJdJ8twm0VDC
7RZ2kz9BHu4YgwPKVt3FChzKif6bHuCXgTppu+mqfGUWRRjEow0xJy7OcjF420J5
iPPcKfw/ejeUnpHFdOfRqEalCo8LmUSvTkS5Aq8IBloYKLgT8NQCvgqhniEhRd2v
NwJBJ/v5EDiq5HywQjaRpD2htPSeUG5LVPSUYjQMMH6vIWuHcJ8a1xTtQ77KijlD
qsK6DJe3glTOg/aBUK8an6erIs4rtHttw4hc9BRhy1+sh3QrStTzJyuBRfAINdAF
eVLY3Y+6j4Rk7Q==
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:44:51 2025 by rpki-client