
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
File: ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json)
Hash identifier: rmk7VhrzhJKhD/IxdocLMlB1Ag5hp7K8oEBIdjD+Ynk=
Subject key identifier: E7:C3:7F:8D:9F:B3:F5:97:54:A4:E5:54:16:A1:07:E9:D2:F2:40:25
Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
Certificate issuer: /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Certificate serial: 01974A7AAA36C0D022CA941BBB7D197CF48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
Manifest number: 1069
Signing time: Sat 07 Jun 2025 13:00:42 +0000
Manifest this update: Sat 07 Jun 2025 13:00:42 +0000
Manifest next update: Sun 08 Jun 2025 13:00:42 +0000
Files and hashes: 1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: FK5ZtpckA1vNFjJqLeossfQaOFE4xhUdwHC/DgVR/rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:aa:36:c0:d0:22:ca:94:1b:bb:7d:19:7c:f4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Validity
Not Before: Jun 7 13:00:42 2025 GMT
Not After : Jun 8 13:00:42 2025 GMT
Subject: CN=e7c37f8d9fb3f59754a4e55416a107e9d2f24025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:6a:eb:b3:d1:71:d1:20:da:77:75:f2:57:
24:54:2e:8f:44:76:b0:e6:8b:0b:5f:db:80:be:32:
cd:66:bd:99:fe:ec:5f:71:30:b1:a9:cf:81:71:20:
9a:0d:39:ee:84:6e:ec:06:bc:ad:ec:72:1a:3c:6d:
10:5c:be:58:f4:a9:ca:8a:23:b9:39:f7:b3:8d:aa:
16:fd:57:e7:f6:99:9d:fd:6c:74:ec:50:31:71:ed:
66:dc:6d:7d:e6:eb:d2:d5:4a:b5:37:42:98:48:15:
34:52:cf:3f:8c:7f:16:79:14:85:43:e0:6d:dc:a3:
da:d1:37:4a:0d:30:4c:40:41:81:97:30:42:8e:b2:
de:b0:14:36:2a:43:41:4e:df:11:30:75:3d:89:8c:
43:a2:60:9a:5b:03:86:c7:4c:67:0b:ed:bd:90:d6:
ad:eb:b5:76:c6:58:1e:61:e7:19:e2:97:73:7d:8f:
ad:71:a6:81:15:d5:3c:34:16:85:96:06:1e:bf:29:
10:ce:d7:7c:cd:cd:93:fa:28:8a:cd:82:8f:ad:f9:
e1:ef:5c:77:85:88:74:ff:d0:ad:44:fb:9d:ed:93:
66:b3:4d:93:5e:bf:ec:d2:7f:a2:58:02:53:59:06:
96:45:ef:cc:85:2e:5b:df:49:8a:c1:a6:40:b2:01:
0c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C3:7F:8D:9F:B3:F5:97:54:A4:E5:54:16:A1:07:E9:D2:F2:40:25
X509v3 Authority Key Identifier:
keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c0:05:42:cf:d5:b4:35:ab:95:47:64:3e:a4:06:fb:57:09:
b1:23:84:40:f2:c2:d3:5e:9f:c0:fb:72:36:38:71:d4:33:49:
50:67:27:f2:e3:f3:fc:aa:30:6b:87:07:74:4e:e6:cc:89:f5:
e2:90:36:23:f1:57:3a:91:36:7f:9d:70:cc:3f:78:34:dd:07:
9f:9f:40:5f:e1:a0:4a:61:71:4c:50:7e:24:2f:ae:44:22:9f:
2c:3f:a3:28:da:e2:ed:c6:37:fe:eb:21:6b:fe:6a:cd:f0:85:
51:98:5f:e8:ec:f6:9e:1d:ea:6c:3e:36:1c:16:02:65:f9:d1:
02:45:cd:45:49:fe:d9:82:29:92:bb:c8:81:b4:45:ee:f1:6c:
8a:b8:5e:c5:04:ac:d3:8d:c4:9d:51:00:6e:22:32:d6:a9:2b:
75:6d:db:98:c6:45:17:27:86:1b:cc:c1:b3:f6:42:75:66:dd:
c4:dc:a6:e7:7b:26:bb:15:b4:01:15:d0:6a:47:1f:04:62:42:
7d:bc:1d:62:7e:e1:17:2d:48:f0:14:c5:fa:42:39:05:d3:7b:
77:ec:1c:8f:d2:89:a9:95:ea:43:43:d1:3e:d6:ac:bb:ca:1c:
2c:54:3e:fa:c4:22:42:53:be:fa:45:44:9d:3b:08:7d:af:9d:
e0:ba:a4:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeqo2wNAiypQbu30ZfPSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMzdiOGMwZTE1OTdjZDFkYTY1YzlhMDdmYWMwNWFjZDg0
NGNjNmEwHhcNMjUwNjA3MTMwMDQyWhcNMjUwNjA4MTMwMDQyWjAzMTEwLwYDVQQD
EyhlN2MzN2Y4ZDlmYjNmNTk3NTRhNGU1NTQxNmExMDdlOWQyZjI0MDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DJq67PRcdEg2nd18lckVC6PRHaw
5osLX9uAvjLNZr2Z/uxfcTCxqc+BcSCaDTnuhG7sBryt7HIaPG0QXL5Y9KnKiiO5
OfezjaoW/Vfn9pmd/Wx07FAxce1m3G195uvS1Uq1N0KYSBU0Us8/jH8WeRSFQ+Bt
3KPa0TdKDTBMQEGBlzBCjrLesBQ2KkNBTt8RMHU9iYxDomCaWwOGx0xnC+29kNat
67V2xlgeYecZ4pdzfY+tcaaBFdU8NBaFlgYevykQztd8zc2T+iiKzYKPrfnh71x3
hYh0/9CtRPud7ZNms02TXr/s0n+iWAJTWQaWRe/MhS5b30mKwaZAsgEM/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfDf42fs/WXVKTlVBahB+nS8kAlMB8GA1UdIwQY
MBaAFIo3uMDhWXzR2mXJoH+sBazYRMxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mZDIyYWQtZjc5Mi00NzVjLThiYWUt
MjYwMjRlMmE1ZjNlLzEvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mZDIyYWQtZjc5Mi00NzVjLThiYWUtMjYwMjRlMmE1ZjNl
LzEvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8AFQs/V
tDWrlUdkPqQG+1cJsSOEQPLC016fwPtyNjhx1DNJUGcn8uPz/Kowa4cHdE7mzIn1
4pA2I/FXOpE2f51wzD94NN0Hn59AX+GgSmFxTFB+JC+uRCKfLD+jKNri7cY3/ush
a/5qzfCFUZhf6Oz2nh3qbD42HBYCZfnRAkXNRUn+2YIpkrvIgbRF7vFsirhexQSs
043EnVEAbiIy1qkrdW3bmMZFFyeGG8zBs/ZCdWbdxNym53smuxW0ARXQakcfBGJC
fbwdYn7hFy1I8BTF+kI5BdN7d+wcj9KJqZXqQ0PRPtasu8ocLFQ++sQiQlO++kVE
nTsIfa+d4LqkVA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:16 2025 by rpki-client