Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
File: I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json)
Hash identifier: M8+QzYdBkbPJkjmtKUihPtdIiuuvSkxX618WbzOMWBE=
Subject key identifier: AE:AA:AD:35:D1:EB:FB:EB:B1:FD:D8:35:50:76:C0:61:FA:19:3D:A7
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 01974930F5DC261AB3A2A27B98FE9E36B840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
Manifest number: 017F
Signing time: Sat 07 Jun 2025 07:00:34 +0000
Manifest this update: Sat 07 Jun 2025 07:00:34 +0000
Manifest next update: Sun 08 Jun 2025 07:00:34 +0000
Files and hashes: 1: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: xbu/cf/CHxY4lix83Kq6wuHYnHLxrrnq+fBTHxb8HWI=)
2: pL8DPUuY6V_LTawy1OdUwrIg01c.roa (hash: yxyfBx5vs5Lhayo07nTfHgtEaPhrWIe0WeuncjCeyYo=)
3: rPtueqwAgjU2IUHv5A02J4kLlys.roa (hash: vDBPmEjKrFXU2lnK2ZWnREJRhpJ1uOnxEsPQx6QBwFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:30:f5:dc:26:1a:b3:a2:a2:7b:98:fe:9e:36:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Jun 7 07:00:34 2025 GMT
Not After : Jun 8 07:00:34 2025 GMT
Subject: CN=aeaaad35d1ebfbebb1fdd8355076c061fa193da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:21:61:5f:f5:ba:7a:6d:83:d9:4f:bf:79:
49:9b:73:11:b7:1f:1a:d8:42:da:91:bb:bf:cb:45:
da:a6:b6:f7:e4:e3:d0:46:fb:dc:17:e0:cb:cc:0f:
0a:44:87:21:0d:02:25:a4:a1:59:b7:98:58:00:10:
1f:fe:27:67:ac:e0:2c:13:40:0a:f1:3b:ac:14:4f:
68:1d:fa:68:51:c5:46:97:f5:1d:58:4a:6a:d8:88:
fe:c5:64:91:9b:70:c5:54:16:05:1b:aa:da:04:fd:
c9:f6:53:57:a8:8e:e4:51:d7:e6:ec:29:6d:0e:6a:
7d:9e:8f:02:f0:87:38:04:3e:8d:f8:67:2f:b2:05:
43:d4:db:34:18:8b:5a:2b:b5:5e:73:97:7c:a6:82:
21:b1:2a:93:11:36:98:9c:ae:8c:14:37:e4:96:e3:
bc:91:32:28:9e:e6:19:b6:68:2f:12:69:79:07:42:
08:ce:c5:a9:0e:18:63:71:b1:04:2f:a7:b2:a8:f3:
ee:f2:1b:ee:eb:ff:57:bc:72:06:96:3a:c9:a8:d0:
a1:d7:7a:ae:a2:b3:42:8b:e9:35:f3:51:72:07:80:
78:84:cb:77:a5:fa:08:f1:b7:e6:56:42:20:8d:71:
ad:0a:73:a6:58:7a:d3:94:3c:2d:9e:88:25:bc:a3:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AA:AD:35:D1:EB:FB:EB:B1:FD:D8:35:50:76:C0:61:FA:19:3D:A7
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6a:40:f2:ea:2a:60:83:88:e7:27:de:53:33:b3:57:98:3f:
3d:e4:75:3f:9b:6c:9b:ea:82:b8:ce:1c:b6:94:4a:70:d6:ad:
a7:eb:df:98:4c:cd:da:c7:f4:0a:8d:86:e9:ab:47:3a:ac:79:
b7:db:1c:f4:dc:c3:47:05:91:6d:ea:01:65:fe:e2:4e:3c:dc:
e0:b4:15:0a:d8:83:ff:be:7b:ea:5f:bb:ba:20:96:98:4b:81:
f8:26:29:a0:cb:eb:23:bd:cf:5a:b5:65:0e:04:ab:f6:88:d6:
45:0c:bd:5b:42:cf:69:8a:75:7d:93:1e:e3:8a:c8:73:d4:a1:
1d:6c:6d:4e:21:48:12:39:b3:1a:54:77:26:60:a5:80:5e:48:
a2:24:94:2a:3e:67:c8:c9:7d:29:df:df:37:b7:3f:7b:5e:ad:
9f:3c:51:60:b6:6f:e6:2d:67:db:9e:ba:5f:4e:41:6d:bb:c5:
cd:bb:a7:02:01:85:ef:78:61:be:05:96:a8:51:c6:dd:cb:f6:
e9:24:03:93:59:b6:2f:72:6e:e8:43:26:cd:bf:c7:0e:b4:e7:
b6:05:76:8e:7a:64:f2:f3:13:fc:92:7b:04:4f:59:93:36:08:
03:3a:f9:d3:f2:cf:cc:43:b1:56:98:d2:14:c4:b3:55:fc:26:
da:96:d1:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMPXcJhqzoqJ7mP6eNrhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNjA3MTA1OTU1Yzc2NGE4MTNmZDk1MjRhN2U0MWI5NDBj
NTY4MzIwHhcNMjUwNjA3MDcwMDM0WhcNMjUwNjA4MDcwMDM0WjAzMTEwLwYDVQQD
EyhhZWFhYWQzNWQxZWJmYmViYjFmZGQ4MzU1MDc2YzA2MWZhMTkzZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X0hYV/1unptg9lPv3lJm3MRtx8a
2ELakbu/y0Xaprb35OPQRvvcF+DLzA8KRIchDQIlpKFZt5hYABAf/idnrOAsE0AK
8TusFE9oHfpoUcVGl/UdWEpq2Ij+xWSRm3DFVBYFG6raBP3J9lNXqI7kUdfm7Clt
Dmp9no8C8Ic4BD6N+GcvsgVD1Ns0GItaK7Vec5d8poIhsSqTETaYnK6MFDfkluO8
kTIonuYZtmgvEml5B0IIzsWpDhhjcbEEL6eyqPPu8hvu6/9XvHIGljrJqNCh13qu
orNCi+k181FyB4B4hMt3pfoI8bfmVkIgjXGtCnOmWHrTlDwtnoglvKMniwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6qrTXR6/vrsf3YNVB2wGH6GT2nMB8GA1UdIwQY
MBaAFCNgcQWVXHZKgT/ZUkp+QblAxWgyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTJCeEJaVmNka3FCUDlsU1NuNUJ1VURGYURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yYTI5NjktZDVkZS00ZWUwLTkzOTkt
NDg0NzBmNjlkNzlkLzEvSTJCeEJaVmNka3FCUDlsU1NuNUJ1VURGYURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yYTI5NjktZDVkZS00ZWUwLTkzOTktNDg0NzBmNjlkNzlk
LzEvSTJCeEJaVmNka3FCUDlsU1NuNUJ1VURGYURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWpA8uoq
YIOI5yfeUzOzV5g/PeR1P5tsm+qCuM4ctpRKcNatp+vfmEzN2sf0Co2G6atHOqx5
t9sc9NzDRwWRbeoBZf7iTjzc4LQVCtiD/7576l+7uiCWmEuB+CYpoMvrI73PWrVl
DgSr9ojWRQy9W0LPaYp1fZMe44rIc9ShHWxtTiFIEjmzGlR3JmClgF5IoiSUKj5n
yMl9Kd/fN7c/e16tnzxRYLZv5i1n2566X05BbbvFzbunAgGF73hhvgWWqFHG3cv2
6SQDk1m2L3Ju6EMmzb/HDrTntgV2jnpk8vMT/JJ7BE9ZkzYIAzr50/LPzEOxVpjS
FMSzVfwm2pbRiQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:19 2025 by rpki-client