Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
File: I6NILh1m2H9bml7rnIr9a17CMiQ.mft (raw, json)
Hash identifier: 6DlU3SMdX7TlqWtuf7IGgichBoPMuURPYU4R3fVnqHU=
Subject key identifier: 32:99:E2:50:35:15:A8:F8:96:83:C9:00:82:2D:FC:BE:42:D7:B0:F4
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
Certificate issuer: /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Certificate serial: 019761DE6E437B9AB3F962DA302E42626CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
Manifest number: 1589
Signing time: Thu 12 Jun 2025 02:00:56 +0000
Manifest this update: Thu 12 Jun 2025 02:00:56 +0000
Manifest next update: Fri 13 Jun 2025 02:00:56 +0000
Files and hashes: 1: I6NILh1m2H9bml7rnIr9a17CMiQ.crl (hash: bF4h5/TzRY0/4EndFjpIpf0u17os+VXMIxVUc/aZmNo=)
2: IQwej1LnyY7ETYPMzr0MBaKMJYU.roa (hash: m2Od1UXry84TfojxLTlOoi+R13MMd4A7opflyOM6uR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:de:6e:43:7b:9a:b3:f9:62:da:30:2e:42:62:6c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Validity
Not Before: Jun 12 02:00:56 2025 GMT
Not After : Jun 13 02:00:56 2025 GMT
Subject: CN=3299e2503515a8f89683c900822dfcbe42d7b0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:d3:ee:5e:f1:fb:03:82:4a:8e:dc:8b:16:
41:c9:c6:34:90:f1:40:5c:ae:02:01:a5:de:60:42:
7e:94:f8:45:03:78:36:df:94:99:fd:2b:41:86:ee:
31:06:45:d9:24:9b:92:25:e1:34:e2:14:07:f1:24:
44:b5:77:38:82:4e:1d:1c:7d:5a:c2:00:da:75:4f:
e7:4b:a4:4e:f3:de:61:2d:df:b0:f0:c6:9f:82:5b:
29:d9:7a:40:ca:31:12:42:a7:63:3a:53:3d:87:97:
4f:7d:0b:c0:73:ae:dc:6d:b6:8f:c5:4f:1f:82:ab:
b5:d4:a9:b4:52:2f:7e:ee:08:83:ee:7a:a3:b8:df:
74:47:79:23:c5:f9:4e:33:18:f7:7e:24:65:37:53:
c0:9f:ce:f9:07:d0:fa:e3:4a:05:02:e3:ed:52:f0:
1b:6c:62:45:a0:2f:82:82:f8:5a:11:ee:98:6f:b4:
67:c1:ed:13:63:80:76:b7:e7:19:89:ad:2d:a3:96:
d3:cf:ca:9e:a2:45:f1:2f:cf:a2:1c:02:52:c0:6b:
0e:e7:3e:7e:23:6c:b9:37:eb:d2:a5:94:05:01:a9:
59:5d:10:49:f2:56:05:4e:55:7c:3d:0a:f8:0a:bb:
d1:dd:b7:0d:e3:28:7e:6e:e0:41:a9:cb:03:da:d2:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:99:E2:50:35:15:A8:F8:96:83:C9:00:82:2D:FC:BE:42:D7:B0:F4
X509v3 Authority Key Identifier:
keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0b:c4:25:1f:60:51:49:04:b6:e1:51:24:3b:de:b2:49:fc:
f5:ec:bb:d0:61:f9:19:5c:43:e8:c7:d6:b2:02:03:8c:69:7c:
a2:89:ef:16:81:93:b3:b3:48:86:45:31:2d:e6:f2:b9:c7:d5:
66:f1:55:86:0e:51:4e:76:d8:44:e3:92:02:e0:3f:e5:8f:e4:
c4:ac:43:40:ee:57:21:70:34:0c:12:f1:45:e4:7d:dd:2c:c4:
e2:3d:85:b3:17:f4:34:cc:f4:b6:64:ac:e7:d5:fa:16:66:93:
ec:22:ea:fb:d0:03:89:ce:ad:4d:cf:8d:5d:2d:4c:1e:5d:bd:
29:02:8d:44:e8:8d:f2:ac:31:48:f0:32:04:7e:02:8b:71:f3:
41:29:ee:6b:59:d6:0b:8a:57:4a:9a:e6:ba:a4:f2:4e:db:46:
96:98:c2:39:ad:7b:79:2d:67:90:c2:9e:a8:b9:3d:58:4c:6a:
b5:48:e9:12:73:c1:8f:2d:01:33:cb:1d:d9:4e:56:28:0f:ce:
33:c8:63:16:8a:f0:dc:54:c6:1f:8a:e8:de:4a:f9:93:8e:32:
d6:4b:33:fd:ea:71:34:0a:a4:df:ae:2f:94:ab:0a:7f:e8:e4:
a6:5f:68:24:cd:0d:ae:63:f5:26:ae:a4:7a:5e:25:c3:8a:01:
78:ff:bb:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdh3m5De5qz+WLaMC5CYmy0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTM0ODJlMWQ2NmQ4N2Y1YjlhNWVlYjljOGFmZDZiNWVj
MjMyMjQwHhcNMjUwNjEyMDIwMDU2WhcNMjUwNjEzMDIwMDU2WjAzMTEwLwYDVQQD
EygzMjk5ZTI1MDM1MTVhOGY4OTY4M2M5MDA4MjJkZmNiZTQyZDdiMGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2HT7l7x+wOCSo7cixZBycY0kPFA
XK4CAaXeYEJ+lPhFA3g235SZ/StBhu4xBkXZJJuSJeE04hQH8SREtXc4gk4dHH1a
wgDadU/nS6RO895hLd+w8Mafglsp2XpAyjESQqdjOlM9h5dPfQvAc67cbbaPxU8f
gqu11Km0Ui9+7giD7nqjuN90R3kjxflOMxj3fiRlN1PAn875B9D640oFAuPtUvAb
bGJFoC+CgvhaEe6Yb7Rnwe0TY4B2t+cZia0to5bTz8qeokXxL8+iHAJSwGsO5z5+
I2y5N+vSpZQFAalZXRBJ8lYFTlV8PQr4CrvR3bcN4yh+buBBqcsD2tJ7ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKZ4lA1Faj4loPJAIIt/L5C17D0MB8GA1UdIwQY
MBaAFCOjSC4dZth/W5pe65yK/WtewjIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81MDJlY2QtZTZmZS00Mjk4LTgwNTQt
MTM4NTg3MWE5MDlkLzEvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC81MDJlY2QtZTZmZS00Mjk4LTgwNTQtMTM4NTg3MWE5MDlk
LzEvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAvEJR9g
UUkEtuFRJDveskn89ey70GH5GVxD6MfWsgIDjGl8oonvFoGTs7NIhkUxLebyucfV
ZvFVhg5RTnbYROOSAuA/5Y/kxKxDQO5XIXA0DBLxReR93SzE4j2Fsxf0NMz0tmSs
59X6FmaT7CLq+9ADic6tTc+NXS1MHl29KQKNROiN8qwxSPAyBH4Ci3HzQSnua1nW
C4pXSprmuqTyTttGlpjCOa17eS1nkMKeqLk9WExqtUjpEnPBjy0BM8sd2U5WKA/O
M8hjForw3FTGH4ro3kr5k44y1ksz/epxNAqk364vlKsKf+jkpl9oJM0NrmP1Jq6k
el4lw4oBeP+7fQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 08:32:32 2025 by rpki-client