Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
File: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft (raw, json)
Hash identifier: ZBUIqVDBCvMxPSwyMKhObal4+LdzqVlX3ttmSPNewdg=
Subject key identifier: 3E:1F:8A:FD:59:88:0C:22:6F:0B:B5:12:01:27:ED:04:AF:B6:52:4C
Authority key identifier: 21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
Certificate issuer: /CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Certificate serial: 0197CB7110B128C37FCDB938794A614EA357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
Manifest number: 0E27
Signing time: Wed 02 Jul 2025 14:01:14 +0000
Manifest this update: Wed 02 Jul 2025 14:01:14 +0000
Manifest next update: Thu 03 Jul 2025 14:01:14 +0000
Files and hashes: 1: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl (hash: e9QAak8+7pl10N4huP08EE+hJI4wwZWHRtlpxSvqx7A=)
2: OmRgq5feW-kx9jvx4AAFdyevf30.roa (hash: AB8XLVSpCXGmgkqlgUf55sAgLfrFZhXp5WrR9S6Xa20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:71:10:b1:28:c3:7f:cd:b9:38:79:4a:61:4e:a3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Validity
Not Before: Jul 2 14:01:14 2025 GMT
Not After : Jul 3 14:01:14 2025 GMT
Subject: CN=3e1f8afd59880c226f0bb5120127ed04afb6524c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:dd:a5:8f:d6:f5:a1:59:fb:9a:ee:b2:6d:
41:1d:ed:90:88:0a:11:a6:8c:6c:6d:af:db:98:fe:
78:05:3d:cc:47:cd:bd:9a:e7:26:fd:26:49:81:35:
92:38:86:58:18:c8:f2:36:62:1c:20:6c:d8:3b:12:
81:a4:70:b1:4a:98:77:15:33:8b:0f:dc:40:3e:8f:
7e:fd:8c:21:fd:f9:b2:43:ee:c5:4e:ac:b7:55:85:
eb:b7:92:43:22:81:63:94:49:4b:2e:3f:c1:39:26:
8e:e9:ff:fd:ef:fd:20:e7:d8:6f:a6:5a:e2:ed:ba:
d7:22:3a:61:ec:3d:d0:5b:08:99:7f:35:72:15:fd:
ff:f6:9b:50:92:da:c8:bb:6a:04:3f:50:ba:5d:5b:
4b:f5:9a:27:58:e1:e9:47:0c:e4:a0:42:8e:1c:30:
77:43:5e:a0:64:9c:98:da:ea:47:9a:f6:5b:93:fd:
01:17:3a:7a:e5:d2:d7:e4:a4:e3:87:4e:61:52:70:
5f:30:2b:00:fb:bd:db:07:fd:b8:18:63:26:c1:c2:
f9:9d:83:6a:cb:7c:1e:7e:99:25:40:aa:b6:13:1e:
15:c9:d6:6d:81:ec:b3:65:6e:82:9e:a9:9e:dd:a0:
41:92:dc:3c:90:8c:c2:c7:31:9a:80:86:e5:f3:98:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1F:8A:FD:59:88:0C:22:6F:0B:B5:12:01:27:ED:04:AF:B6:52:4C
X509v3 Authority Key Identifier:
keyid:21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b0:1a:14:3c:1a:73:56:88:d0:e3:2e:87:8b:76:a0:4d:74:
35:56:1f:e1:a7:67:42:df:e3:43:97:04:5f:69:55:09:12:0a:
07:69:f4:d0:08:b2:04:a0:39:0c:5a:c5:a1:b2:d0:8c:ec:d4:
0a:1b:0a:1f:12:9e:a8:40:8e:32:3c:9b:94:db:fc:ca:2a:ec:
c2:88:26:5c:ad:20:dd:25:9e:94:4f:90:fa:5a:82:ca:23:af:
6e:4b:f9:a5:06:7f:5e:f2:66:32:9b:c3:38:76:b6:ee:ae:8e:
e2:fb:d3:40:4f:bf:dd:fc:a0:ad:92:f9:78:1a:a5:7a:57:9a:
f4:b9:9d:27:c4:87:05:0c:81:c5:8b:78:bc:86:39:94:54:a3:
1c:ba:3c:79:fa:0d:35:70:53:5c:99:6a:7b:a1:c0:ed:16:e4:
ea:32:21:47:f2:f3:55:13:59:8c:fe:d5:ff:a8:f8:49:5f:64:
6c:36:3b:b5:86:28:7b:0e:7e:a0:e4:83:dd:0f:6d:5d:1e:d6:
fd:37:a1:f7:f7:12:b1:4b:91:e1:c8:79:08:92:21:e2:3b:68:
eb:05:81:89:ed:be:6c:c3:64:39:86:71:16:2d:d7:bd:ca:19:
2e:4f:67:a5:b9:bd:6d:00:79:8b:77:67:11:d8:d6:7d:e3:b1:
f7:e4:90:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfLcRCxKMN/zbk4eUphTqNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDc3MzU1ZGYxMWNkYmY5OTJmOTBkNjdlYWFiOTEwOWFi
OGViZjMwHhcNMjUwNzAyMTQwMTE0WhcNMjUwNzAzMTQwMTE0WjAzMTEwLwYDVQQD
EygzZTFmOGFmZDU5ODgwYzIyNmYwYmI1MTIwMTI3ZWQwNGFmYjY1MjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzDdpY/W9aFZ+5rusm1BHe2QiAoR
poxsba/bmP54BT3MR829mucm/SZJgTWSOIZYGMjyNmIcIGzYOxKBpHCxSph3FTOL
D9xAPo9+/Ywh/fmyQ+7FTqy3VYXrt5JDIoFjlElLLj/BOSaO6f/97/0g59hvplri
7brXIjph7D3QWwiZfzVyFf3/9ptQktrIu2oEP1C6XVtL9ZonWOHpRwzkoEKOHDB3
Q16gZJyY2upHmvZbk/0BFzp65dLX5KTjh05hUnBfMCsA+73bB/24GGMmwcL5nYNq
y3wefpklQKq2Ex4VydZtgeyzZW6Cnqme3aBBktw8kIzCxzGagIbl85jFlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4fiv1ZiAwibwu1EgEn7QSvtlJMMB8GA1UdIwQY
MBaAFCEHc1XfEc2/mS+Q1n6quRCauOvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFkelZkOFJ6Yi1aTDVEV2ZxcTVFSnE0Nl9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mMmRhNzgtMmQ5OC00MDgxLTlkNjct
NDNiZjY1NWYzMzY1LzEvSVFkelZkOFJ6Yi1aTDVEV2ZxcTVFSnE0Nl9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9mMmRhNzgtMmQ5OC00MDgxLTlkNjctNDNiZjY1NWYzMzY1
LzEvSVFkelZkOFJ6Yi1aTDVEV2ZxcTVFSnE0Nl9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbAaFDwa
c1aI0OMuh4t2oE10NVYf4adnQt/jQ5cEX2lVCRIKB2n00AiyBKA5DFrFobLQjOzU
ChsKHxKeqECOMjyblNv8yirswogmXK0g3SWelE+Q+lqCyiOvbkv5pQZ/XvJmMpvD
OHa27q6O4vvTQE+/3fygrZL5eBqlelea9LmdJ8SHBQyBxYt4vIY5lFSjHLo8efoN
NXBTXJlqe6HA7Rbk6jIhR/LzVRNZjP7V/6j4SV9kbDY7tYYoew5+oOSD3Q9tXR7W
/Teh9/cSsUuR4ch5CJIh4jto6wWBie2+bMNkOYZxFi3XvcoZLk9npbm9bQB5i3dn
EdjWfeOx9+SQjA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 18:55:54 2025 by rpki-client