Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
File: INJjO_-xbaLXXtr0m8ghGHz7iO8.mft (raw, json)
Hash identifier: 24fRdBmgP396S8KaZd2UfliDSTq/O/4NSczvTHdiepo=
Subject key identifier: 1D:CB:4E:69:61:29:F3:B1:43:B8:C3:0A:16:FC:2E:B7:C4:56:F6:EF
Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Certificate issuer: /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Certificate serial: 01974931485B5687284540591F4CE10054C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
Manifest number: 09F4
Signing time: Sat 07 Jun 2025 07:00:55 +0000
Manifest this update: Sat 07 Jun 2025 07:00:55 +0000
Manifest next update: Sun 08 Jun 2025 07:00:55 +0000
Files and hashes: 1: 5OMr3xKs8jvtoFSwFc24Cwr8qm0.roa (hash: yTyBz+xUzE60EnbY56LmeruhsoeDG36ww4aSRH8th0I=)
2: INJjO_-xbaLXXtr0m8ghGHz7iO8.crl (hash: Irr1mJwzrDq3WuRP1P35h4lpXZXCnnYlhoTMRMvKrMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:48:5b:56:87:28:45:40:59:1f:4c:e1:00:54:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Validity
Not Before: Jun 7 07:00:55 2025 GMT
Not After : Jun 8 07:00:55 2025 GMT
Subject: CN=1dcb4e696129f3b143b8c30a16fc2eb7c456f6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:7c:19:b3:88:6c:dc:b1:4c:94:24:dc:e6:
3c:86:14:70:14:96:95:f2:82:ca:77:62:ef:c6:7d:
5b:ad:0d:6b:1c:e3:82:16:d5:34:f6:b2:3c:4b:63:
85:45:10:f2:97:64:9b:cb:45:d9:33:42:49:73:99:
92:f6:d8:ee:8d:41:22:ba:71:1e:10:39:eb:c5:bd:
80:28:ca:54:8e:9f:94:c2:5a:a3:74:19:57:af:3b:
f1:84:ed:a9:37:64:d9:77:1f:66:4f:d0:7c:c0:ff:
c8:4c:f4:9a:6d:5c:bc:08:a8:7b:2f:8f:1b:ec:63:
eb:c9:23:e5:a3:9b:45:99:8e:09:76:2a:f0:2f:a4:
e2:65:c7:b7:d5:0b:9a:ef:fb:80:22:13:1f:d5:fd:
af:7c:b6:0f:53:3a:ea:5b:0c:0c:d3:8b:55:d6:31:
40:3e:14:0d:42:87:34:9a:15:a6:35:fe:b6:5d:c7:
15:fd:69:02:e2:39:47:3a:bb:4d:6d:4a:de:d9:18:
ff:93:49:4a:94:72:4e:d5:ed:ac:ae:53:ee:ce:16:
ba:6f:f8:fd:0c:cf:5b:14:25:e6:a6:f5:78:a8:4b:
13:f5:27:84:c5:6f:eb:a5:e6:ba:d9:0b:b2:cd:b4:
ea:c1:e0:80:25:94:d4:53:d6:5b:fd:31:08:0f:3e:
f6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CB:4E:69:61:29:F3:B1:43:B8:C3:0A:16:FC:2E:B7:C4:56:F6:EF
X509v3 Authority Key Identifier:
keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a7:3a:5c:7e:55:ae:ab:a8:bf:3f:11:dd:7b:38:e6:c2:f4:
e5:0c:d5:e4:32:de:38:a2:34:b6:01:b1:16:0a:c0:eb:eb:c9:
b2:f4:e3:2f:07:cf:44:39:ab:f7:85:dc:ac:fd:c8:f9:57:9c:
f0:71:2f:f1:f7:23:a6:da:6f:8d:b2:7d:e3:52:92:0d:68:d2:
fc:73:cc:fc:fb:14:de:ed:fb:e4:fe:bc:69:e8:cd:79:11:a0:
a3:26:e2:99:ae:91:10:23:eb:2a:24:cd:a5:d9:15:46:7a:c1:
6f:6f:7c:f4:65:e9:0a:c2:02:e2:08:68:f1:d5:7b:a5:f9:9e:
3b:3a:1d:3f:12:95:38:a9:fc:27:02:ed:fc:1e:92:31:cf:26:
26:46:bb:88:01:82:8a:2e:75:c2:40:94:1b:ea:79:f8:ce:05:
5e:db:a4:40:8f:00:24:cd:ac:31:bd:b1:fa:0a:77:cf:19:7b:
76:5b:41:e9:42:97:18:f8:cd:20:84:be:78:a1:e1:fc:78:94:
0e:49:8e:c4:dd:39:3b:a1:cc:ed:fd:9e:ef:47:5f:9d:cb:7e:
67:42:4b:99:bd:f4:2f:04:e8:e7:94:af:d9:be:97:66:9f:49:
1f:b0:f0:e7:97:a3:fc:63:bf:6f:92:d8:a7:3b:0a:ed:e7:11:
01:08:02:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMUhbVocoRUBZH0zhAFTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDI2MzNiZmZiMTZkYTJkNzVlZGFmNDliYzgyMTE4N2Nm
Yjg4ZWYwHhcNMjUwNjA3MDcwMDU1WhcNMjUwNjA4MDcwMDU1WjAzMTEwLwYDVQQD
EygxZGNiNGU2OTYxMjlmM2IxNDNiOGMzMGExNmZjMmViN2M0NTZmNmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX18GbOIbNyxTJQk3OY8hhRwFJaV
8oLKd2Lvxn1brQ1rHOOCFtU09rI8S2OFRRDyl2Sby0XZM0JJc5mS9tjujUEiunEe
EDnrxb2AKMpUjp+UwlqjdBlXrzvxhO2pN2TZdx9mT9B8wP/ITPSabVy8CKh7L48b
7GPrySPlo5tFmY4JdirwL6TiZce31Qua7/uAIhMf1f2vfLYPUzrqWwwM04tV1jFA
PhQNQoc0mhWmNf62XccV/WkC4jlHOrtNbUre2Rj/k0lKlHJO1e2srlPuzha6b/j9
DM9bFCXmpvV4qEsT9SeExW/rpea62QuyzbTqweCAJZTUU9Zb/TEIDz72YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3LTmlhKfOxQ7jDChb8LrfEVvbvMB8GA1UdIwQY
MBaAFCDSYzv/sW2i117a9JvIIRh8+4jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83ZjA0NjQtMjI2ZC00ZjQ5LWEyNzAt
MWNkNmM4NzFjMWU4LzEvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi83ZjA0NjQtMjI2ZC00ZjQ5LWEyNzAtMWNkNmM4NzFjMWU4
LzEvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqc6XH5V
rquovz8R3Xs45sL05QzV5DLeOKI0tgGxFgrA6+vJsvTjLwfPRDmr94XcrP3I+Vec
8HEv8fcjptpvjbJ941KSDWjS/HPM/PsU3u375P68aejNeRGgoybima6RECPrKiTN
pdkVRnrBb2989GXpCsIC4gho8dV7pfmeOzodPxKVOKn8JwLt/B6SMc8mJka7iAGC
ii51wkCUG+p5+M4FXtukQI8AJM2sMb2x+gp3zxl7dltB6UKXGPjNIIS+eKHh/HiU
DkmOxN05O6HM7f2e70dfnct+Z0JLmb30LwTo55Sv2b6XZp9JH7Dw55ej/GO/b5LY
pzsK7ecRAQgCNw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:58 2025 by rpki-client