Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: M6AF0g5pwaBrw/PxCCFHYtWTryTjyh+2vjkyQIpcGj8=
Subject key identifier: 2B:F7:57:F4:A4:EA:16:DA:4D:6D:F6:B7:61:F4:AC:63:64:17:B7:58
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 019759801E43A5CC935BE76FEC936BE92B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 1351
Signing time: Tue 10 Jun 2025 11:00:57 +0000
Manifest this update: Tue 10 Jun 2025 11:00:57 +0000
Manifest next update: Wed 11 Jun 2025 11:00:57 +0000
Files and hashes: 1: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (hash: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=)
2: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (hash: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=)
3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: dzoFqKDGXXC2Hse6PrNxocHvhbl8qfnWbhRMukxmM9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:80:1e:43:a5:cc:93:5b:e7:6f:ec:93:6b:e9:2b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Jun 10 11:00:57 2025 GMT
Not After : Jun 11 11:00:57 2025 GMT
Subject: CN=2bf757f4a4ea16da4d6df6b761f4ac636417b758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:88:ea:f4:99:da:fb:b8:fb:71:23:bb:09:
c1:21:8e:2b:f3:7e:5c:3d:86:a8:f4:ed:9d:ef:17:
56:58:db:f3:2a:90:c0:aa:c3:b1:e1:c7:88:aa:f8:
cb:4a:36:66:ba:32:35:16:02:dc:ec:10:43:5e:a9:
58:51:d0:e5:52:c8:95:a9:4b:c0:eb:b1:52:97:a6:
78:19:8a:80:77:a7:88:5f:6d:85:17:be:33:6d:7b:
a9:13:48:d2:ba:9a:f2:2b:ac:04:0f:61:90:3e:bf:
20:8f:da:0a:5b:4d:5d:56:f1:30:d6:2a:40:67:1b:
17:17:87:77:19:2e:d2:50:0c:73:3b:76:46:98:67:
88:ef:18:cd:98:72:c7:9e:73:5f:bd:7f:5a:1a:93:
02:4a:78:0d:d8:d8:1e:ab:95:d9:6a:c8:9a:d3:58:
6d:b7:1c:46:b4:1c:e8:32:58:0a:12:68:93:42:48:
46:36:80:56:a2:da:d0:38:ff:96:61:30:57:bf:e9:
c6:b3:40:a0:49:b2:fc:f2:74:f1:75:b6:cf:a9:98:
af:6a:22:19:90:70:ec:76:f1:da:c6:58:6c:9a:b3:
52:3e:b4:28:ca:82:fb:49:6c:6a:9b:6c:4d:83:74:
3f:47:48:51:fd:d7:f0:46:8d:f7:1c:89:74:9e:00:
a7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F7:57:F4:A4:EA:16:DA:4D:6D:F6:B7:61:F4:AC:63:64:17:B7:58
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:01:b9:d4:49:43:ce:14:78:14:09:ae:bd:b2:0f:e5:1a:1c:
e9:73:0e:35:d0:18:6e:2e:5b:5e:5a:d6:ec:84:8c:0f:28:70:
a6:f0:07:dd:b6:ba:40:24:be:a9:09:80:68:ba:61:e2:83:45:
83:8c:d0:26:b1:45:9c:89:45:1e:a0:73:0f:f8:17:34:da:5e:
30:65:92:97:32:af:66:5d:2b:32:80:77:54:22:e1:59:47:a9:
17:57:16:53:b5:ea:b0:2e:30:8b:75:63:2c:d0:23:51:6b:67:
2c:8b:c6:b1:94:00:dd:de:09:3b:79:4b:ba:68:03:19:21:62:
2f:29:ab:ff:96:f3:c8:ac:2c:d0:f9:87:b2:59:45:83:65:cf:
00:6a:19:fa:d3:1c:aa:99:d2:d6:90:94:d3:4d:10:6d:49:70:
06:8b:ce:80:d9:14:8c:93:79:00:42:44:30:df:11:7e:54:80:
92:f1:cb:1f:f9:e4:e6:12:d9:0c:ef:cb:4d:8f:e3:4d:3a:0f:
13:a3:a0:1e:07:3b:5a:d5:8a:ac:e9:8b:60:d3:6e:ab:a8:ed:
b5:cd:9a:9a:20:b1:42:de:d5:61:5a:05:69:19:c5:97:46:d9:
86:e4:aa:98:8a:c1:47:19:e6:59:c4:ef:81:6f:ee:01:72:53:
0e:38:cf:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZgB5DpcyTW+dv7JNr6SsJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZDRiY2JmMzVkYjdmZTJlZjY2MzUyMmE1YTNhMzk3OWE0
ZjFmZjgwHhcNMjUwNjEwMTEwMDU3WhcNMjUwNjExMTEwMDU3WjAzMTEwLwYDVQQD
EygyYmY3NTdmNGE0ZWExNmRhNGQ2ZGY2Yjc2MWY0YWM2MzY0MTdiNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIyI6vSZ2vu4+3EjuwnBIY4r835c
PYao9O2d7xdWWNvzKpDAqsOx4ceIqvjLSjZmujI1FgLc7BBDXqlYUdDlUsiVqUvA
67FSl6Z4GYqAd6eIX22FF74zbXupE0jSupryK6wED2GQPr8gj9oKW01dVvEw1ipA
ZxsXF4d3GS7SUAxzO3ZGmGeI7xjNmHLHnnNfvX9aGpMCSngN2Ngeq5XZasia01ht
txxGtBzoMlgKEmiTQkhGNoBWotrQOP+WYTBXv+nGs0CgSbL88nTxdbbPqZivaiIZ
kHDsdvHaxlhsmrNSPrQoyoL7SWxqm2xNg3Q/R0hR/dfwRo33HIl0ngCn+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCv3V/Sk6hbaTW32t2H0rGNkF7dYMB8GA1UdIwQY
MBaAFIvUvL8123/i72Y1IqWjo5eaTx/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAt
NDc4ZWQ3ZjhkMDVlLzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAtNDc4ZWQ3ZjhkMDVl
LzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAG51ElD
zhR4FAmuvbIP5Roc6XMONdAYbi5bXlrW7ISMDyhwpvAH3ba6QCS+qQmAaLph4oNF
g4zQJrFFnIlFHqBzD/gXNNpeMGWSlzKvZl0rMoB3VCLhWUepF1cWU7XqsC4wi3Vj
LNAjUWtnLIvGsZQA3d4JO3lLumgDGSFiLymr/5bzyKws0PmHsllFg2XPAGoZ+tMc
qpnS1pCU000QbUlwBovOgNkUjJN5AEJEMN8RflSAkvHLH/nk5hLZDO/LTY/jTToP
E6OgHgc7WtWKrOmLYNNuq6jttc2amiCxQt7VYVoFaRnFl0bZhuSqmIrBRxnmWcTv
gW/uAXJTDjjPZg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 20:16:39 2025 by rpki-client