Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: Yfp9g3SLS4qhcOhr77BjBp+t83V0SYqymrXgOGf1oaA=
Subject key identifier: FD:E4:0B:34:28:E5:9C:2D:84:01:82:A4:4D:8E:91:DC:A0:F6:CC:94
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 01975D9371C44DC77A23E503749C4942C5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 06B8
Signing time: Wed 11 Jun 2025 06:00:33 +0000
Manifest this update: Wed 11 Jun 2025 06:00:33 +0000
Manifest next update: Thu 12 Jun 2025 06:00:33 +0000
Files and hashes: 1: 76xLkfM6kYxOK1NXh9OOS2MHsHA.roa (hash: 6Sbux0XZ8H/iAJjFbORSyS+kiaCneStSNPq6dnkA+DU=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: FRPRPDSZSJBEDidaKTFTHaUGjO7G/FlqZ74ZsBSHb/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:71:c4:4d:c7:7a:23:e5:03:74:9c:49:42:c5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Jun 11 06:00:33 2025 GMT
Not After : Jun 12 06:00:33 2025 GMT
Subject: CN=fde40b3428e59c2d840182a44d8e91dca0f6cc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:29:b3:80:52:f6:fe:99:f7:d6:88:0c:92:
c4:c0:64:df:16:b7:9b:a8:51:74:bc:90:1b:6d:d5:
e8:df:0d:5d:5c:bb:c1:48:cd:93:01:53:d1:b1:3b:
e3:12:aa:bb:42:7b:a2:af:06:ea:92:5c:b4:36:27:
ee:77:71:ca:55:f0:12:52:d1:c8:47:c2:bc:e2:ef:
65:1a:21:42:52:2e:33:07:6e:3a:09:ee:32:03:1f:
c9:2e:f4:02:5a:13:24:d3:70:2d:90:24:dc:c9:c2:
04:89:78:52:ef:1f:14:7f:35:05:33:21:89:b6:42:
c7:9d:bc:98:42:6e:88:1f:f3:e9:e1:db:ab:07:8a:
e4:75:f2:ea:c5:5a:7e:84:47:0a:0b:06:e4:fa:b1:
53:ff:b0:24:8b:69:42:ac:b7:20:8b:ab:a1:c6:f4:
b5:e5:1c:60:e6:a2:92:f0:71:23:e9:37:fb:13:fe:
3f:3c:bf:c3:7f:a6:56:e0:22:d7:d7:8c:fb:b9:3e:
85:52:36:50:cd:12:98:02:8f:15:20:ee:1d:ee:2c:
90:27:4a:28:9d:23:41:21:be:cd:ae:24:af:33:8f:
24:ac:e9:f5:f8:7e:29:93:24:c5:d2:fc:0f:92:fa:
67:77:4b:02:3c:89:e4:a9:4e:f0:24:8f:dc:b2:0d:
c6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E4:0B:34:28:E5:9C:2D:84:01:82:A4:4D:8E:91:DC:A0:F6:CC:94
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:37:fc:1c:c5:7d:15:bd:d9:64:49:0c:95:ce:0b:91:bb:ba:
7b:4b:df:d2:89:28:a8:ee:79:af:a2:d0:27:d3:4d:14:c8:08:
5d:c9:3f:b3:e1:b4:4b:ef:4d:c8:0a:e4:a4:e1:4c:51:d0:a3:
37:5c:6c:2a:93:f6:95:ca:67:2d:6a:45:3f:7e:73:14:af:b9:
d6:d6:9e:8c:fc:03:aa:29:9e:b4:14:7d:30:98:f1:a7:4a:46:
75:02:67:5f:e6:75:90:15:c1:58:66:42:ac:be:46:87:d4:b0:
63:7b:89:8f:87:d5:30:7d:43:47:b2:36:66:d7:a4:9b:04:87:
7e:19:de:e8:7c:0b:67:7d:6b:12:22:fb:43:b9:d4:62:05:72:
0f:bd:f2:bb:56:0e:b2:f6:72:b1:bc:5f:82:20:bc:ef:94:da:
19:af:fc:ac:cc:5e:ac:40:f6:9e:b5:1a:82:89:2d:f3:25:6f:
33:39:57:02:73:0a:fd:41:25:8c:5d:73:df:c3:f5:b5:b8:0d:
ac:0e:5c:11:83:38:8b:16:f7:f8:ba:15:e0:90:af:0f:c2:a0:
40:2a:d7:d3:a1:fb:c0:db:22:3f:46:55:9e:02:f9:9a:bb:de:
70:bb:fe:73:41:18:6c:0f:65:e5:3d:a5:42:1a:a2:e7:11:26:
89:82:c3:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddk3HETcd6I+UDdJxJQsXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZDEyOWE3Yzc4ZmI2NmQwNzczYmM5OTAwODM1N2U1MDdj
MWU3YmUwHhcNMjUwNjExMDYwMDMzWhcNMjUwNjEyMDYwMDMzWjAzMTEwLwYDVQQD
EyhmZGU0MGIzNDI4ZTU5YzJkODQwMTgyYTQ0ZDhlOTFkY2EwZjZjYzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU8ps4BS9v6Z99aIDJLEwGTfFreb
qFF0vJAbbdXo3w1dXLvBSM2TAVPRsTvjEqq7Qnuirwbqkly0Nifud3HKVfASUtHI
R8K84u9lGiFCUi4zB246Ce4yAx/JLvQCWhMk03AtkCTcycIEiXhS7x8UfzUFMyGJ
tkLHnbyYQm6IH/Pp4durB4rkdfLqxVp+hEcKCwbk+rFT/7Aki2lCrLcgi6uhxvS1
5Rxg5qKS8HEj6Tf7E/4/PL/Df6ZW4CLX14z7uT6FUjZQzRKYAo8VIO4d7iyQJ0oo
nSNBIb7NriSvM48krOn1+H4pkyTF0vwPkvpnd0sCPInkqU7wJI/csg3GJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3kCzQo5ZwthAGCpE2Okdyg9syUMB8GA1UdIwQY
MBaAFIjRKafHj7ZtB3O8mQCDV+UHwee+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kODZmYzQtMTc1Zi00MjNkLTk4NGUt
ODU5ZjdmYWNlNjk1LzEvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kODZmYzQtMTc1Zi00MjNkLTk4NGUtODU5ZjdmYWNlNjk1
LzEvaU5FcHA4ZVB0bTBIYzd5WkFJTlg1UWZCNTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjf8HMV9
Fb3ZZEkMlc4Lkbu6e0vf0okoqO55r6LQJ9NNFMgIXck/s+G0S+9NyArkpOFMUdCj
N1xsKpP2lcpnLWpFP35zFK+51taejPwDqimetBR9MJjxp0pGdQJnX+Z1kBXBWGZC
rL5Gh9SwY3uJj4fVMH1DR7I2ZtekmwSHfhne6HwLZ31rEiL7Q7nUYgVyD73yu1YO
svZysbxfgiC875TaGa/8rMxerED2nrUagokt8yVvMzlXAnMK/UEljF1z38P1tbgN
rA5cEYM4ixb3+LoV4JCvD8KgQCrX06H7wNsiP0ZVngL5mrvecLv+c0EYbA9l5T2l
Qhqi5xEmiYLDzQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:31:06 2025 by rpki-client