Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: YAl7yg2nP+pZp2VgoqXjOZtwrkPgoPMg19xGIC7cGs8=
Subject key identifier: B5:72:21:05:25:3E:88:A4:75:AB:99:48:5E:27:F9:B8:9F:A3:AB:DC
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 019750B408F96B15E9840A1F3D3C766A3D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 18:01:05 +0000
Manifest this update: Sun 08 Jun 2025 18:01:05 +0000
Manifest next update: Mon 09 Jun 2025 18:01:05 +0000
Files and hashes: 1: ThUJ8aSmMtP4aHcJCzzypfLa8ic.roa (hash: dNkVlGDZVTIktuBX7rmx/RdrVxwALHhLlc8K3va90zE=)
2: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: rcfb411YwbfPWp8L7sbi8SjlXN/3TOo28lTVpBoM5rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:08:f9:6b:15:e9:84:0a:1f:3d:3c:76:6a:3d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Jun 8 18:01:05 2025 GMT
Not After : Jun 9 18:01:05 2025 GMT
Subject: CN=b5722105253e88a475ab99485e27f9b89fa3abdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:95:a2:7d:bc:06:bf:dd:31:96:60:a6:5e:fc:
83:bb:bc:f8:a9:79:e3:e5:40:b3:ca:f9:61:bd:1d:
e3:e9:16:68:10:54:66:fe:9d:5d:1a:fc:12:c0:02:
c1:3c:03:8b:52:5d:f2:1b:3a:47:22:77:1a:36:c6:
f5:b3:1d:b9:28:1c:c6:26:9d:bd:c3:93:d8:a7:93:
6e:87:a9:9e:dc:68:86:c1:31:82:f1:00:a5:cc:13:
03:f9:0c:55:4d:4f:f3:27:4f:95:ce:0a:b7:d2:fd:
06:a9:57:ce:42:4e:23:92:4f:d2:3b:51:56:eb:d3:
3f:08:8a:89:73:de:be:a2:72:d6:6a:09:f3:26:2f:
a2:27:4a:d6:8d:d8:05:12:ef:a8:5a:ef:36:50:dd:
d2:77:db:8c:db:61:f7:4a:55:3c:67:6d:21:c9:1d:
5c:82:63:1d:d2:ca:4c:0c:d7:08:9a:52:9f:73:f2:
84:d0:64:50:f3:53:ac:88:02:24:d7:33:a7:fa:03:
88:08:dd:dd:cb:de:d6:6e:12:fd:83:33:87:a0:df:
6e:99:c0:3d:8b:a1:43:54:19:75:d9:1b:22:e1:be:
c8:91:a4:05:b0:a4:92:9c:0c:03:7c:25:13:7f:b9:
2c:d1:ea:06:2e:a7:c4:43:7a:02:a5:0d:b0:70:b2:
19:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:72:21:05:25:3E:88:A4:75:AB:99:48:5E:27:F9:B8:9F:A3:AB:DC
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:af:7a:7e:31:e4:5c:13:ed:6c:72:6f:3c:cc:1d:1b:db:64:
1f:46:ef:f0:f2:9f:63:6f:89:b5:19:48:87:b5:30:6b:6c:28:
28:5c:46:46:da:23:c9:d6:89:12:ab:f5:67:0b:9d:e2:66:36:
19:82:d0:32:02:92:ec:60:6d:10:57:2f:d8:27:a1:bf:b3:dd:
e1:34:0a:68:4a:7a:29:3a:bc:e2:45:c2:a6:fc:08:ad:8d:1b:
a2:28:ff:3b:44:26:0f:45:a0:d3:38:b0:bd:29:03:af:97:65:
be:38:93:4d:c3:26:7a:a9:86:ca:80:d9:42:e5:d0:11:18:79:
c7:6d:16:cd:c7:0f:4f:b6:f2:b4:7a:ab:cc:d1:e5:01:a0:b7:
03:03:2a:4b:ad:9c:07:94:36:13:29:8c:96:61:49:90:7d:cb:
7a:4e:28:d6:7f:ea:49:ea:5b:1f:ec:cd:1f:18:7f:de:85:31:
fe:52:4d:a0:dc:be:09:8a:c2:2a:90:43:4b:14:7c:87:6c:4b:
f0:ad:2c:7b:f4:d5:10:b6:bd:57:77:80:52:82:07:a4:4d:3e:
58:f3:33:21:4a:25:b2:dd:dc:b6:6b:c4:c1:06:43:0e:41:4a:
14:d2:7c:74:d7:fd:33:e1:22:5d:4f:29:5d:eb:76:e4:4c:f0:
5d:77:42:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQtAj5axXphAofPTx2aj0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MWFmODVmODFkZDNmM2IyNGFiMTRlZDFmNDJjN2NjNDY2
NTAyZjAwHhcNMjUwNjA4MTgwMTA1WhcNMjUwNjA5MTgwMTA1WjAzMTEwLwYDVQQD
EyhiNTcyMjEwNTI1M2U4OGE0NzVhYjk5NDg1ZTI3ZjliODlmYTNhYmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZWifbwGv90xlmCmXvyDu7z4qXnj
5UCzyvlhvR3j6RZoEFRm/p1dGvwSwALBPAOLUl3yGzpHIncaNsb1sx25KBzGJp29
w5PYp5Nuh6me3GiGwTGC8QClzBMD+QxVTU/zJ0+Vzgq30v0GqVfOQk4jkk/SO1FW
69M/CIqJc96+onLWagnzJi+iJ0rWjdgFEu+oWu82UN3Sd9uM22H3SlU8Z20hyR1c
gmMd0spMDNcImlKfc/KE0GRQ81OsiAIk1zOn+gOICN3dy97WbhL9gzOHoN9umcA9
i6FDVBl12Rsi4b7IkaQFsKSSnAwDfCUTf7ks0eoGLqfEQ3oCpQ2wcLIZ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVyIQUlPoikdauZSF4n+bifo6vcMB8GA1UdIwQY
MBaAFIga+F+B3T87JKsU7R9Cx8xGZQLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUt
ZjI1NTY1OGJiODgxLzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUtZjI1NTY1OGJiODgx
LzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG696fjHk
XBPtbHJvPMwdG9tkH0bv8PKfY2+JtRlIh7Uwa2woKFxGRtojydaJEqv1Zwud4mY2
GYLQMgKS7GBtEFcv2Cehv7Pd4TQKaEp6KTq84kXCpvwIrY0boij/O0QmD0Wg0ziw
vSkDr5dlvjiTTcMmeqmGyoDZQuXQERh5x20WzccPT7bytHqrzNHlAaC3AwMqS62c
B5Q2EymMlmFJkH3Lek4o1n/qSepbH+zNHxh/3oUx/lJNoNy+CYrCKpBDSxR8h2xL
8K0se/TVELa9V3eAUoIHpE0+WPMzIUolst3ctmvEwQZDDkFKFNJ8dNf9M+EiXU8p
Xet25EzwXXdCog==
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:55:15 2025 by rpki-client