Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier: omrhCIQf6BgzHlu2riGO5OHbWyMUF92+cCFnzC6BYVg=
Subject key identifier: 12:A1:D3:07:2B:23:D8:81:B8:72:3F:16:C2:2F:5E:2F:63:2F:0B:A3
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 019747B0C875F3F308423953FAF3EDA3CBED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 00:00:57 +0000
Manifest this update: Sat 07 Jun 2025 00:00:57 +0000
Manifest next update: Sun 08 Jun 2025 00:00:57 +0000
Files and hashes: 1: 0R4cTom2N3Ffy-a36Ai0y_lwR7M.roa (hash: Nepk/Ut8yLvwSKOE+VPPTDkKY+eqYlx1ya61v2fExqo=)
2: DO5JxSipVW_jSyusVYE1KNyV5oM.roa (hash: fTaf/BSF7U37w4OYShE1QwyUlpAokZv3Xb6JIFlzFT0=)
3: MHydlao-1yBTTsCdp3bBe4bDnkc.roa (hash: OnwOrVTgc/R+eeJsST7imMdVV9F4opbfB++sLNDhiX8=)
4: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: z+1qKisz7KDB2SpkM1sTmweR9s4Hh8hsKlmbcjwOHwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:c8:75:f3:f3:08:42:39:53:fa:f3:ed:a3:cb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Jun 7 00:00:57 2025 GMT
Not After : Jun 8 00:00:57 2025 GMT
Subject: CN=12a1d3072b23d881b8723f16c22f5e2f632f0ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:05:a0:c9:25:5b:c7:cd:f2:02:8d:f6:5c:
6e:14:27:73:aa:15:84:cf:64:7a:bf:e9:7e:6f:86:
8a:c6:36:14:5f:18:00:4a:05:3b:8b:92:3c:5f:f6:
30:e5:52:fd:75:9d:ba:34:cc:a1:3d:2e:1c:18:88:
d5:d8:5b:d2:61:f2:44:9f:1b:8a:35:74:26:1a:d2:
09:52:6e:93:8f:d8:5c:fc:75:52:33:20:10:8e:c6:
15:97:19:f3:d6:1f:09:de:61:d5:f5:68:22:be:2b:
52:97:09:c6:85:22:fe:c7:2b:8b:09:fa:d1:05:10:
5d:f4:ec:3f:c0:48:0a:22:1c:e5:37:af:67:d7:ae:
87:a0:cc:8b:44:c2:7a:a8:65:55:55:de:31:22:c8:
91:35:09:e4:e5:75:f6:b2:b6:7f:9b:00:77:5d:6c:
dc:37:2e:22:ef:cb:a7:61:55:f1:2f:37:5b:d0:ce:
9e:4d:99:55:3b:16:7c:6e:44:19:ec:15:ae:5a:96:
f9:3d:81:b6:74:69:a1:bf:c4:5e:b1:9e:82:c2:ad:
6c:af:3a:ef:6b:86:6c:6a:a7:4e:6a:4f:2e:af:a1:
dc:af:2a:17:b4:9b:dd:45:11:04:bc:27:92:82:2b:
bb:6b:b1:b0:04:c3:00:3d:95:80:57:ab:ef:06:72:
9e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A1:D3:07:2B:23:D8:81:B8:72:3F:16:C2:2F:5E:2F:63:2F:0B:A3
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a8:8e:c9:cf:41:ff:fa:3d:3a:b6:d1:b1:7e:d1:34:97:c9:
b8:e3:3b:ca:f6:d3:2f:61:20:e9:e0:ed:7e:d1:4b:e2:bf:3d:
11:2a:f9:90:44:53:75:1b:ff:de:97:a1:ab:74:e0:4b:bd:44:
cd:02:9f:23:59:7d:b2:e7:3c:8b:73:d2:d9:32:6b:c3:70:53:
db:ac:b8:f9:37:34:1a:7d:69:46:17:8a:21:d4:5b:c5:23:0d:
19:4f:41:36:63:c3:a4:cb:13:33:11:f0:37:6c:95:62:13:90:
f4:8e:c8:9c:d8:41:b7:e5:aa:f8:08:b3:7b:ba:26:43:b7:a8:
69:82:85:e2:65:93:26:54:5c:dc:03:dc:bf:29:2d:82:c4:3a:
40:44:30:91:f7:a8:3f:ec:77:cb:a4:8e:23:cd:44:99:b4:a1:
74:5f:59:00:73:38:96:54:d9:bf:af:b8:5d:ef:10:e6:d2:19:
25:ca:c3:4d:f6:5d:a5:4f:e3:b7:e0:0d:57:51:f4:22:31:41:
37:23:45:c6:76:93:27:73:45:49:6c:74:7b:1b:36:a8:34:47:
ea:95:d1:47:9d:f7:ef:99:46:a7:24:a6:70:a8:0b:c6:36:4b:
54:71:d1:de:e5:ab:3c:21:9e:cb:18:62:3c:77:34:77:fa:0f:
f0:85:0a:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsMh18/MIQjlT+vPto8vtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYjNlOTY1Yzg3NDdlMmZhNWRkZDEyODU3NjczZjA2MDQy
ZWZhNDMwHhcNMjUwNjA3MDAwMDU3WhcNMjUwNjA4MDAwMDU3WjAzMTEwLwYDVQQD
EygxMmExZDMwNzJiMjNkODgxYjg3MjNmMTZjMjJmNWUyZjYzMmYwYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyssFoMklW8fN8gKN9lxuFCdzqhWE
z2R6v+l+b4aKxjYUXxgASgU7i5I8X/Yw5VL9dZ26NMyhPS4cGIjV2FvSYfJEnxuK
NXQmGtIJUm6Tj9hc/HVSMyAQjsYVlxnz1h8J3mHV9WgivitSlwnGhSL+xyuLCfrR
BRBd9Ow/wEgKIhzlN69n166HoMyLRMJ6qGVVVd4xIsiRNQnk5XX2srZ/mwB3XWzc
Ny4i78unYVXxLzdb0M6eTZlVOxZ8bkQZ7BWuWpb5PYG2dGmhv8ResZ6Cwq1srzrv
a4ZsaqdOak8ur6HcryoXtJvdRREEvCeSgiu7a7GwBMMAPZWAV6vvBnKeJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKh0wcrI9iBuHI/FsIvXi9jLwujMB8GA1UdIwQY
MBaAFIqz6WXIdH4vpd3RKFdnPwYELvpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzIt
MDQ0MjdhOTlmMWM1LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzItMDQ0MjdhOTlmMWM1
LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaiOyc9B
//o9OrbRsX7RNJfJuOM7yvbTL2Eg6eDtftFL4r89ESr5kERTdRv/3pehq3TgS71E
zQKfI1l9suc8i3PS2TJrw3BT26y4+Tc0Gn1pRheKIdRbxSMNGU9BNmPDpMsTMxHw
N2yVYhOQ9I7InNhBt+Wq+Aize7omQ7eoaYKF4mWTJlRc3APcvyktgsQ6QEQwkfeo
P+x3y6SOI81EmbShdF9ZAHM4llTZv6+4Xe8Q5tIZJcrDTfZdpU/jt+ANV1H0IjFB
NyNFxnaTJ3NFSWx0exs2qDRH6pXRR53375lGpySmcKgLxjZLVHHR3uWrPCGeyxhi
PHc0d/oP8IUKmg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:59:08 2025 by rpki-client