Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
File: IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft (raw, json)
Hash identifier: vOj/fn/1GChycH4Bl8WK3TdHDtCSrXn5eLyukqeJKLY=
Subject key identifier: E2:7D:8D:63:99:10:91:8D:3A:57:A4:FB:40:58:D4:8C:67:65:21:3D
Authority key identifier: 20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
Certificate issuer: /CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Certificate serial: 01974D447487F38E3AB9C2ECEF4A08C03325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
Manifest number: 0BE4
Signing time: Sun 08 Jun 2025 02:00:21 +0000
Manifest this update: Sun 08 Jun 2025 02:00:21 +0000
Manifest next update: Mon 09 Jun 2025 02:00:21 +0000
Files and hashes: 1: IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl (hash: dFPzKJWQ/y/exFCRp7AujyDLymEJ4IMpdWMENgczYbs=)
2: yvbz_UH1uJZVqDKchWjC2DbH2u0.roa (hash: A7u8f2W74RMi57K78M26+2R7Yi1xzIaztv6J4Ydr5ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:74:87:f3:8e:3a:b9:c2:ec:ef:4a:08:c0:33:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Validity
Not Before: Jun 8 02:00:21 2025 GMT
Not After : Jun 9 02:00:21 2025 GMT
Subject: CN=e27d8d639910918d3a57a4fb4058d48c6765213d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:7c:fe:1f:e9:49:00:c6:74:ec:cd:32:0f:
e3:03:84:bc:d3:2f:ff:1a:a5:0c:d1:17:62:e8:5a:
b0:ef:8f:81:d8:b6:79:15:11:81:e8:c1:50:b5:bb:
40:d6:ea:d0:f9:d1:49:4f:3b:1c:b1:91:5f:a1:1d:
a7:e8:b3:d7:b4:16:3d:60:54:c8:25:9d:d3:63:8c:
8a:46:45:a2:5a:2d:f1:31:93:58:de:9c:34:eb:db:
69:57:31:a6:9d:7e:86:a0:c1:ab:81:37:f7:00:39:
56:4a:ab:d1:94:e0:f7:44:1c:f6:91:81:33:f8:2b:
d7:bf:78:e5:e1:2e:30:a9:fc:27:42:d1:a6:c6:8f:
14:f6:8a:39:9f:e9:9f:27:42:08:9b:77:0b:71:cc:
88:35:da:67:31:4a:f3:62:04:57:b5:05:8b:8b:d5:
52:7d:b8:13:96:4b:2c:6e:7d:7d:0a:5a:f4:4d:17:
2f:79:d8:f3:75:d3:a5:4a:35:11:62:49:83:04:e6:
16:49:b8:a8:cd:9f:4f:12:34:1d:85:3b:a7:c2:fc:
1d:50:0e:05:32:19:01:f1:6c:b6:22:ae:dc:d8:7e:
73:37:ec:49:0d:5a:8e:9b:2d:c8:37:df:ab:75:dc:
14:40:8f:50:39:83:bb:69:b4:05:90:51:3c:f9:7c:
22:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7D:8D:63:99:10:91:8D:3A:57:A4:FB:40:58:D4:8C:67:65:21:3D
X509v3 Authority Key Identifier:
keyid:20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:11:27:a0:25:a1:21:6c:8c:14:2a:42:f8:b6:bb:36:ed:0c:
eb:44:10:2f:1c:1b:5b:2a:1b:bc:1e:97:5b:b0:58:70:bc:16:
ab:d4:b4:19:ea:ab:ba:eb:15:db:dc:83:12:99:4a:42:55:87:
7e:49:ff:be:a1:6d:8c:a4:26:d1:9a:36:77:8b:ab:34:4e:b9:
01:82:5f:cf:b3:9a:7d:70:ea:84:49:d1:99:fb:c6:8c:98:70:
fd:41:ef:1d:50:84:36:df:b3:09:b7:fe:3f:71:b9:05:1f:23:
58:f2:93:94:7e:77:e8:f9:f1:55:6a:b6:9f:06:be:f1:c2:e2:
af:e5:5a:20:04:b6:38:28:97:97:3d:96:ee:29:af:59:6a:67:
4e:f3:fe:65:1e:25:12:89:9b:f1:cc:1e:c0:03:36:72:fc:88:
a8:03:90:14:6c:be:cb:b6:09:5c:7b:09:01:07:3a:6d:2d:da:
d4:e0:f5:ee:dd:fd:56:e4:53:03:7c:15:b4:6e:52:7c:78:c1:
07:28:e7:32:63:e8:41:52:45:f3:fb:e6:b6:d7:40:aa:f2:f6:
f7:85:8a:61:88:00:7e:0e:4a:b1:97:f1:1e:02:4a:f8:55:a5:
33:7a:c4:0d:5e:37:0c:10:67:f4:4e:87:fc:12:39:a6:3c:5e:
0b:a0:f9:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRHSH8446ucLs70oIwDMlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZjgxMjc0ZjY2YmRlODlmMTJjMjQzZDA5YTllZGMzZTVi
MWUyMjkwHhcNMjUwNjA4MDIwMDIxWhcNMjUwNjA5MDIwMDIxWjAzMTEwLwYDVQQD
EyhlMjdkOGQ2Mzk5MTA5MThkM2E1N2E0ZmI0MDU4ZDQ4YzY3NjUyMTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjJ8/h/pSQDGdOzNMg/jA4S80y//
GqUM0Rdi6Fqw74+B2LZ5FRGB6MFQtbtA1urQ+dFJTzscsZFfoR2n6LPXtBY9YFTI
JZ3TY4yKRkWiWi3xMZNY3pw069tpVzGmnX6GoMGrgTf3ADlWSqvRlOD3RBz2kYEz
+CvXv3jl4S4wqfwnQtGmxo8U9oo5n+mfJ0IIm3cLccyINdpnMUrzYgRXtQWLi9VS
fbgTlkssbn19Clr0TRcvedjzddOlSjURYkmDBOYWSbiozZ9PEjQdhTunwvwdUA4F
MhkB8Wy2Iq7c2H5zN+xJDVqOmy3IN9+rddwUQI9QOYO7abQFkFE8+Xwi8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJ9jWOZEJGNOlek+0BY1IxnZSE9MB8GA1UdIwQY
MBaAFCD4EnT2a96J8SwkPQmp7cPlseIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zZWY5NmUtZjhhNi00ZjliLTliYzct
ZmUyNmU4OTlkZWI4LzEvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zZWY5NmUtZjhhNi00ZjliLTliYzctZmUyNmU4OTlkZWI4
LzEvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQREnoCWh
IWyMFCpC+La7Nu0M60QQLxwbWyobvB6XW7BYcLwWq9S0GeqruusV29yDEplKQlWH
fkn/vqFtjKQm0Zo2d4urNE65AYJfz7OafXDqhEnRmfvGjJhw/UHvHVCENt+zCbf+
P3G5BR8jWPKTlH536PnxVWq2nwa+8cLir+VaIAS2OCiXlz2W7imvWWpnTvP+ZR4l
Eomb8cwewAM2cvyIqAOQFGy+y7YJXHsJAQc6bS3a1OD17t39VuRTA3wVtG5SfHjB
ByjnMmPoQVJF8/vmttdAqvL294WKYYgAfg5KsZfxHgJK+FWlM3rEDV43DBBn9E6H
/BI5pjxeC6D5JA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:00:19 2025 by rpki-client