Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
File: iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft (raw, json)
Hash identifier: 6XXuIMdsxbc5ZbSAbjqyS9akzoGW1fAq5/tGMm5OqME=
Subject key identifier: 43:64:C0:CA:26:AC:7F:9A:B8:99:9F:8D:9B:47:71:AD:FC:E6:68:9E
Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
Certificate issuer: /CN=8968883765549991d7ff376126d58a909a14b8f1
Certificate serial: 01975912699D6DEC196B587225A909E0D35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
Manifest number: 01AB
Signing time: Tue 10 Jun 2025 09:01:08 +0000
Manifest this update: Tue 10 Jun 2025 09:01:08 +0000
Manifest next update: Wed 11 Jun 2025 09:01:08 +0000
Files and hashes: 1: OFotEhQS5D75BLXwwqIZG_YPaGM.roa (hash: DFc7srYmWSrbDIWTrg0cPVEONFNYLjz8/fNoPyoYWxo=)
2: iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl (hash: 8pGIIXBMLKDtch9ElIwhPJeVsY/7oS4okiL6Y8brHyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:12:69:9d:6d:ec:19:6b:58:72:25:a9:09:e0:d3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1
Validity
Not Before: Jun 10 09:01:08 2025 GMT
Not After : Jun 11 09:01:08 2025 GMT
Subject: CN=4364c0ca26ac7f9ab8999f8d9b4771adfce6689e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:a4:f4:37:d1:d3:4b:26:5b:ab:ac:e9:d4:
10:e7:5d:43:c8:63:b6:95:8a:b8:a5:54:4a:79:3c:
68:0b:9d:af:56:8a:11:c1:91:dc:90:f7:17:8f:dd:
e3:df:01:f9:cf:df:8d:fa:70:84:5c:98:b5:59:de:
fc:26:88:c5:61:1f:02:1a:f7:8f:b9:77:4b:71:a4:
ba:a6:42:ff:ce:f9:28:c2:08:c9:ca:25:ab:c3:0e:
02:9c:2f:08:61:ea:fc:f0:9b:69:c9:ae:ab:60:0f:
e0:89:64:46:b3:08:ec:4a:83:ec:e6:5a:5d:85:26:
a6:db:d8:e1:85:32:93:dd:03:37:c7:e2:1a:85:57:
18:60:d9:41:47:d9:0c:6a:4d:df:9b:10:f8:29:a7:
f1:98:d4:20:c3:33:36:bc:20:5d:df:70:84:22:ed:
ba:4f:a2:95:3c:14:da:bd:9f:1d:c5:42:ad:2d:6e:
3d:90:84:ac:17:81:a5:26:b6:8e:27:48:58:2e:72:
00:2c:f9:44:24:48:15:ba:fc:f8:ad:b3:a3:a8:01:
b7:52:63:37:fe:6b:35:16:2d:42:63:d8:e8:16:0d:
36:6b:4a:75:df:4b:d7:f3:d2:b0:d8:88:4b:14:df:
6a:82:65:e5:f7:3b:f7:d5:85:df:67:86:f6:57:df:
08:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:64:C0:CA:26:AC:7F:9A:B8:99:9F:8D:9B:47:71:AD:FC:E6:68:9E
X509v3 Authority Key Identifier:
keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8a:8f:57:e5:a3:cf:34:c5:73:58:65:32:c6:af:8c:53:3b:
5d:43:7e:e3:42:d4:09:69:75:47:8f:5a:96:22:54:7f:22:99:
24:ab:23:a8:89:22:df:7a:5f:3e:a0:0c:d0:82:0f:49:3f:87:
a9:a6:b8:b4:84:59:18:6c:98:e9:c9:e9:e1:c5:6d:78:40:d5:
86:03:4b:06:6f:00:4e:34:bc:23:cf:c5:55:3a:e5:80:f5:3b:
ec:0b:f3:88:d0:07:1f:24:ae:b6:25:56:8d:09:96:8f:32:cd:
de:db:6e:90:59:bd:65:57:ce:f0:92:aa:74:80:79:fc:4c:b2:
1e:c5:67:7b:9a:94:77:cd:a9:82:ee:88:91:00:8c:6f:a8:92:
12:5e:99:d6:81:9a:70:81:e6:22:af:c4:3c:90:c4:5b:e6:3d:
eb:65:6a:96:66:74:00:fd:84:08:b2:cf:09:ff:b3:b5:8b:f5:
82:46:12:be:d2:1b:2a:49:a7:a5:56:81:2f:0e:00:c8:cc:1a:
44:16:51:af:23:d5:d5:92:fe:b0:01:3e:1b:aa:7d:cd:41:cd:
25:ab:f6:16:25:40:1a:e2:2d:82:09:31:9c:47:96:7d:51:51:
c1:ee:e9:ac:bd:02:ef:a6:6f:ba:d6:e1:ea:fb:b7:88:70:d3:
cc:2e:fd:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZEmmdbewZa1hyJakJ4NNeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5Njg4ODM3NjU1NDk5OTFkN2ZmMzc2MTI2ZDU4YTkwOWEx
NGI4ZjEwHhcNMjUwNjEwMDkwMTA4WhcNMjUwNjExMDkwMTA4WjAzMTEwLwYDVQQD
Eyg0MzY0YzBjYTI2YWM3ZjlhYjg5OTlmOGQ5YjQ3NzFhZGZjZTY2ODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4qk9DfR00smW6us6dQQ511DyGO2
lYq4pVRKeTxoC52vVooRwZHckPcXj93j3wH5z9+N+nCEXJi1Wd78JojFYR8CGveP
uXdLcaS6pkL/zvkowgjJyiWrww4CnC8IYer88Jtpya6rYA/giWRGswjsSoPs5lpd
hSam29jhhTKT3QM3x+IahVcYYNlBR9kMak3fmxD4KafxmNQgwzM2vCBd33CEIu26
T6KVPBTavZ8dxUKtLW49kISsF4GlJraOJ0hYLnIALPlEJEgVuvz4rbOjqAG3UmM3
/ms1Fi1CY9joFg02a0p130vX89Kw2IhLFN9qgmXl9zv31YXfZ4b2V98I1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENkwMomrH+auJmfjZtHca385mieMB8GA1UdIwQY
MBaAFIloiDdlVJmR1/83YSbVipCaFLjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jMTcxZDQtMDY3Mi00MTRkLWEwMmQt
Y2QwMjdhMDY4MWJkLzEvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9jMTcxZDQtMDY3Mi00MTRkLWEwMmQtY2QwMjdhMDY4MWJk
LzEvaVdpSU4yVlVtWkhYX3pkaEp0V0trSm9VdVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoqPV+Wj
zzTFc1hlMsavjFM7XUN+40LUCWl1R49aliJUfyKZJKsjqIki33pfPqAM0IIPST+H
qaa4tIRZGGyY6cnp4cVteEDVhgNLBm8ATjS8I8/FVTrlgPU77AvziNAHHySutiVW
jQmWjzLN3ttukFm9ZVfO8JKqdIB5/EyyHsVne5qUd82pgu6IkQCMb6iSEl6Z1oGa
cIHmIq/EPJDEW+Y962VqlmZ0AP2ECLLPCf+ztYv1gkYSvtIbKkmnpVaBLw4AyMwa
RBZRryPV1ZL+sAE+G6p9zUHNJav2FiVAGuItggkxnEeWfVFRwe7prL0C76Zvutbh
6vu3iHDTzC79YA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 12:10:38 2025 by rpki-client