Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
File: I08I-kIiU1wK8moNc0fb8XJUcZY.mft (raw, json)
Hash identifier: Wn/IdXutktLbj5KgXm/0O2jITDoUJyMZZqKYUUiZMvU=
Subject key identifier: 86:AD:60:AA:70:AB:55:49:4E:F0:97:B4:42:3F:8F:0A:D2:F5:D1:13
Authority key identifier: 23:4F:08:FA:42:22:53:5C:0A:F2:6A:0D:73:47:DB:F1:72:54:71:96
Certificate issuer: /CN=234f08fa4222535c0af26a0d7347dbf172547196
Certificate serial: 019748FA65A1B1980F64A14587CE714F57D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
Manifest number: 6A
Signing time: Sat 07 Jun 2025 06:00:58 +0000
Manifest this update: Sat 07 Jun 2025 06:00:58 +0000
Manifest next update: Sun 08 Jun 2025 06:00:58 +0000
Files and hashes: 1: I08I-kIiU1wK8moNc0fb8XJUcZY.crl (hash: oqyxLfyAUO5zgE7SCL+w+UXi0o4dBEYe/lLIMdgDZWI=)
2: PMihf48EDZLf86f7BmXfYmZbV4M.roa (hash: kAi2yEZhpDZ5dFlA+0hzmB2XiAS3L8tb6zCyB/FGwDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:65:a1:b1:98:0f:64:a1:45:87:ce:71:4f:57:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234f08fa4222535c0af26a0d7347dbf172547196
Validity
Not Before: Jun 7 06:00:58 2025 GMT
Not After : Jun 8 06:00:58 2025 GMT
Subject: CN=86ad60aa70ab55494ef097b4423f8f0ad2f5d113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:0c:ca:ab:1f:a8:79:a9:1a:90:72:59:f7:
f0:67:31:be:fc:b0:07:da:c9:46:15:76:99:ec:51:
61:25:35:56:5e:5d:01:8a:38:cb:8f:85:ec:f2:0e:
cd:34:de:6e:c8:c6:a1:8d:cc:ef:d1:19:d1:c9:96:
e7:df:d3:37:f4:e4:c2:40:c2:32:0f:6d:4e:4b:9e:
3f:ed:1d:2e:10:6b:3f:a5:c7:08:cf:1d:0d:1c:a1:
39:02:df:61:a8:b7:f5:fe:e4:b2:c7:b2:42:42:91:
23:24:99:6c:91:62:01:9d:9e:cd:74:90:f4:c5:03:
87:f4:72:25:38:38:3f:d8:6e:52:b1:cf:7f:a4:30:
8d:31:d6:47:2a:45:f2:b8:d4:00:d5:04:f0:de:27:
ad:51:ed:6e:69:3d:76:71:42:d0:02:16:14:a5:c3:
fc:ba:56:8d:7e:4e:25:5e:ed:e5:46:b6:0f:26:91:
b1:c4:99:36:a7:6b:07:80:d1:0a:3f:f1:c4:0a:3b:
17:ba:40:71:93:c5:24:35:38:a0:33:ee:51:b4:d2:
3b:ee:3e:72:76:4d:3f:2e:31:29:2e:3e:a6:a7:14:
d7:65:e6:9d:1f:d3:d9:0e:99:5b:e6:83:64:9f:48:
cf:97:93:d9:80:d6:4b:e7:de:f6:79:f3:a3:cb:db:
c6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AD:60:AA:70:AB:55:49:4E:F0:97:B4:42:3F:8F:0A:D2:F5:D1:13
X509v3 Authority Key Identifier:
keyid:23:4F:08:FA:42:22:53:5C:0A:F2:6A:0D:73:47:DB:F1:72:54:71:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:81:b9:98:2a:e2:73:12:a4:f6:d8:d6:8d:9c:2e:5d:cf:26:
83:df:41:68:2f:97:5e:62:7a:0d:63:47:76:3d:9d:2c:24:38:
3c:a9:89:83:f4:58:a1:14:4e:24:a4:b8:4b:d0:94:a3:ad:c4:
76:31:9d:ff:dc:02:f9:a4:94:ae:74:04:87:b2:c2:e9:49:6b:
a3:e1:25:0a:98:c0:8d:2d:da:98:ec:4a:f7:75:7e:fa:77:d9:
44:9f:5d:f9:69:85:f9:8b:eb:99:91:ea:0b:ec:d7:ee:4b:60:
3e:eb:61:48:49:38:4f:8f:ad:8e:2e:75:e3:24:34:ec:43:35:
16:10:bf:4a:7e:b8:0f:27:98:6c:ff:46:e0:0b:ba:fe:ed:2c:
25:e1:eb:c6:c0:33:85:8c:68:be:c5:6d:0d:83:32:0f:f6:81:
80:6c:ee:ab:2d:26:eb:5b:f2:c9:04:79:d0:c4:a0:1e:f2:3c:
7a:64:e7:f7:1c:da:ee:d5:40:aa:c6:7b:b9:27:53:a6:2b:55:
35:26:e4:7a:20:d7:d8:5a:31:0c:6b:7b:5a:7e:65:5f:fb:cf:
4a:28:06:cd:ba:b3:2c:bf:42:aa:b9:3e:aa:3c:cc:02:43:56:
7a:7e:a4:33:c2:fb:30:93:a9:47:f9:fe:e4:cd:da:1b:05:88:
66:46:d3:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+mWhsZgPZKFFh85xT1fZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGYwOGZhNDIyMjUzNWMwYWYyNmEwZDczNDdkYmYxNzI1
NDcxOTYwHhcNMjUwNjA3MDYwMDU4WhcNMjUwNjA4MDYwMDU4WjAzMTEwLwYDVQQD
Eyg4NmFkNjBhYTcwYWI1NTQ5NGVmMDk3YjQ0MjNmOGYwYWQyZjVkMTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8sMyqsfqHmpGpByWffwZzG+/LAH
2slGFXaZ7FFhJTVWXl0BijjLj4Xs8g7NNN5uyMahjczv0RnRyZbn39M39OTCQMIy
D21OS54/7R0uEGs/pccIzx0NHKE5At9hqLf1/uSyx7JCQpEjJJlskWIBnZ7NdJD0
xQOH9HIlODg/2G5Ssc9/pDCNMdZHKkXyuNQA1QTw3ietUe1uaT12cULQAhYUpcP8
ulaNfk4lXu3lRrYPJpGxxJk2p2sHgNEKP/HECjsXukBxk8UkNTigM+5RtNI77j5y
dk0/LjEpLj6mpxTXZeadH9PZDplb5oNkn0jPl5PZgNZL5972efOjy9vGNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIatYKpwq1VJTvCXtEI/jwrS9dETMB8GA1UdIwQY
MBaAFCNPCPpCIlNcCvJqDXNH2/FyVHGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTA4SS1rSWlVMXdLOG1vTmMwZmI4WEpVY1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82MzhhOWMtZWM2NC00NWRlLWJjMmUt
MmJlN2VkYzc5MzJkLzEvSTA4SS1rSWlVMXdLOG1vTmMwZmI4WEpVY1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82MzhhOWMtZWM2NC00NWRlLWJjMmUtMmJlN2VkYzc5MzJk
LzEvSTA4SS1rSWlVMXdLOG1vTmMwZmI4WEpVY1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4G5mCri
cxKk9tjWjZwuXc8mg99BaC+XXmJ6DWNHdj2dLCQ4PKmJg/RYoRROJKS4S9CUo63E
djGd/9wC+aSUrnQEh7LC6Ulro+ElCpjAjS3amOxK93V++nfZRJ9d+WmF+YvrmZHq
C+zX7ktgPuthSEk4T4+tji514yQ07EM1FhC/Sn64DyeYbP9G4Au6/u0sJeHrxsAz
hYxovsVtDYMyD/aBgGzuqy0m61vyyQR50MSgHvI8emTn9xza7tVAqsZ7uSdTpitV
NSbkeiDX2FoxDGt7Wn5lX/vPSigGzbqzLL9Cqrk+qjzMAkNWen6kM8L7MJOpR/n+
5M3aGwWIZkbTgw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:15 2025 by rpki-client