Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
File: Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft (raw, json)
Hash identifier: QbFa4KavRzkUaukq5bNjRogfb+XTEWMXBWaev3D+590=
Subject key identifier: 64:DD:E2:CD:4E:1E:46:B9:D7:EA:DC:31:24:CE:EE:82:B0:68:E7:CD
Authority key identifier: 23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
Certificate issuer: /CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Certificate serial: 019749D5A7BE7F30D7E6DE4C808F1A8C51CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
Manifest number: 122A
Signing time: Sat 07 Jun 2025 10:00:28 +0000
Manifest this update: Sat 07 Jun 2025 10:00:28 +0000
Manifest next update: Sun 08 Jun 2025 10:00:28 +0000
Files and hashes: 1: Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl (hash: GxHh+20kRA8+2FRr9Rb9ApSZkA7uiLdDouGbT22b1mw=)
2: NCoehdmUvbF9hjrmMyI6BY_y1Tg.roa (hash: oKUbCP0RxT560oSwid+jhRboIkVkQAnDdP+HNoQNqUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:a7:be:7f:30:d7:e6:de:4c:80:8f:1a:8c:51:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Validity
Not Before: Jun 7 10:00:28 2025 GMT
Not After : Jun 8 10:00:28 2025 GMT
Subject: CN=64dde2cd4e1e46b9d7eadc3124ceee82b068e7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:ea:9a:45:5f:76:57:4d:85:f6:d2:32:df:
8a:90:05:06:96:f7:bb:91:3e:07:75:c7:c5:d7:b1:
bd:35:ad:d9:5a:cd:57:88:a6:d9:4b:ee:69:d4:85:
2e:83:4f:db:33:cf:8f:90:e4:17:54:a2:14:76:5d:
b3:51:16:fd:9d:12:df:ae:4f:3a:26:97:0f:b6:66:
c7:8f:f5:16:e1:26:68:25:39:b7:c4:5e:38:93:04:
01:e6:b7:5d:f0:b0:44:be:82:44:87:2d:88:24:1c:
0c:f2:d8:30:bd:0d:be:87:93:d2:37:e6:a2:d3:99:
0e:d5:ab:41:38:96:75:2f:3d:4b:d1:79:c0:73:37:
29:7f:cb:30:2a:20:69:80:1e:69:39:49:b7:16:ea:
41:6b:28:3a:1a:36:e0:94:36:b0:4a:5b:00:55:3e:
29:a5:ea:c9:0a:15:0c:d8:0b:27:89:e8:bf:a5:c9:
04:30:e9:81:55:85:29:5f:37:87:bf:08:86:c6:51:
87:29:ee:49:1b:68:42:6e:60:6e:8f:60:9a:a6:6e:
18:0e:37:2d:af:27:16:84:80:c0:74:38:8a:69:2c:
2a:f3:17:0e:a5:c9:4c:b3:22:83:06:d4:31:5e:3f:
11:39:09:e1:5d:1f:70:28:c3:52:3c:f5:44:cf:62:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DD:E2:CD:4E:1E:46:B9:D7:EA:DC:31:24:CE:EE:82:B0:68:E7:CD
X509v3 Authority Key Identifier:
keyid:23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fc:48:f3:84:d0:bb:b4:c3:5b:82:8c:65:9d:23:6d:1c:f2:
44:20:01:c0:f1:64:fa:26:e6:8b:55:bd:b4:00:6c:14:84:b0:
b6:05:ed:37:e1:b7:1d:50:50:6f:39:24:45:58:16:e2:22:1a:
e4:07:8f:5f:3e:b5:fe:33:d3:af:5f:a1:1a:6d:c5:a7:82:89:
d6:81:7c:a1:14:8d:05:da:00:6a:b0:e1:0e:20:5a:2c:f2:c0:
ab:9d:a7:f7:67:21:fe:83:10:31:cf:25:b1:0f:94:a4:5c:4f:
d4:a4:10:a3:7d:d9:52:04:dc:10:f0:96:0e:8f:f8:fa:d0:f0:
0b:59:8b:28:6c:28:b6:fc:fc:19:d9:f6:b3:9a:17:db:a0:8d:
76:2d:3e:74:c2:2b:d0:74:a8:97:de:f0:45:66:e2:22:45:4f:
e5:83:6f:13:4b:0a:74:9b:68:79:69:02:53:da:ed:7d:67:c2:
35:07:33:50:b7:86:e5:7e:4d:fd:c7:5b:84:6d:a0:2f:d2:8d:
82:4f:9f:12:67:f5:50:5d:c0:2f:73:86:b9:94:3a:92:20:75:
c5:a9:7f:ab:a0:77:0e:88:dc:6f:04:db:58:2d:57:60:98:39:
7a:e5:ad:2d:54:2f:ea:82:2f:cf:be:a2:a4:42:19:1d:22:da:
ae:45:72:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1ae+fzDX5t5MgI8ajFHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzM2UzODI4NDExYmFmYWIwMDZlNzVmZDBkZDVmNWY5ZWY1
NWVjMjUwHhcNMjUwNjA3MTAwMDI4WhcNMjUwNjA4MTAwMDI4WjAzMTEwLwYDVQQD
Eyg2NGRkZTJjZDRlMWU0NmI5ZDdlYWRjMzEyNGNlZWU4MmIwNjhlN2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRPqmkVfdldNhfbSMt+KkAUGlve7
kT4HdcfF17G9Na3ZWs1XiKbZS+5p1IUug0/bM8+PkOQXVKIUdl2zURb9nRLfrk86
JpcPtmbHj/UW4SZoJTm3xF44kwQB5rdd8LBEvoJEhy2IJBwM8tgwvQ2+h5PSN+ai
05kO1atBOJZ1Lz1L0XnAczcpf8swKiBpgB5pOUm3FupBayg6GjbglDawSlsAVT4p
perJChUM2Asniei/pckEMOmBVYUpXzeHvwiGxlGHKe5JG2hCbmBuj2Capm4YDjct
rycWhIDAdDiKaSwq8xcOpclMsyKDBtQxXj8ROQnhXR9wKMNSPPVEz2KnmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTd4s1OHka51+rcMSTO7oKwaOfNMB8GA1UdIwQY
MBaAFCM+OChBG6+rAG51/Q3V9fnvVewlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNmNmZmMtYmU2NC00ZDA4LTk0YTYt
YTE1ZjBlNzhhNWE5LzEvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNmNmZmMtYmU2NC00ZDA4LTk0YTYtYTE1ZjBlNzhhNWE5
LzEvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfxI84TQ
u7TDW4KMZZ0jbRzyRCABwPFk+ibmi1W9tABsFISwtgXtN+G3HVBQbzkkRVgW4iIa
5AePXz61/jPTr1+hGm3Fp4KJ1oF8oRSNBdoAarDhDiBaLPLAq52n92ch/oMQMc8l
sQ+UpFxP1KQQo33ZUgTcEPCWDo/4+tDwC1mLKGwotvz8Gdn2s5oX26CNdi0+dMIr
0HSol97wRWbiIkVP5YNvE0sKdJtoeWkCU9rtfWfCNQczULeG5X5N/cdbhG2gL9KN
gk+fEmf1UF3AL3OGuZQ6kiB1xal/q6B3DojcbwTbWC1XYJg5euWtLVQv6oIvz76i
pEIZHSLarkVyag==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:09 2025 by rpki-client