Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
File: ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json)
Hash identifier: wxelWnyskYvBVMOQi6DmSfrxHe+MzqFVwblwBVxIFMs=
Subject key identifier: FE:9F:B0:8C:1A:9F:9A:07:0F:36:03:40:6E:B4:97:80:04:21:D2:6D
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial: 0196542538640794356F9B2C630DBB99A05B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
Manifest number: 0C25
Signing time: Sun 20 Apr 2025 17:00:47 +0000
Manifest this update: Sun 20 Apr 2025 17:00:47 +0000
Manifest next update: Mon 21 Apr 2025 17:00:47 +0000
Files and hashes: 1: VD1pOY6vP5TwIHzsVFu_IinabUU.roa (hash: cVzGsu9mooBFFczgcbG8J8W2oDgnSi/7QeWcMNjjuWQ=)
2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: pJsMMZ9O+Eus0BT5zitZWWsWAIDFMmF5yD3nGvXEIHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:38:64:07:94:35:6f:9b:2c:63:0d:bb:99:a0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Validity
Not Before: Apr 20 17:00:47 2025 GMT
Not After : Apr 21 17:00:47 2025 GMT
Subject: CN=fe9fb08c1a9f9a070f3603406eb497800421d26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d8:3d:07:76:82:5a:de:91:a7:58:88:0b:9f:
0a:f0:3c:2a:ae:a5:a1:62:49:f5:8e:d0:57:58:c5:
23:3c:81:66:3a:1b:57:da:d8:29:38:1b:c6:3d:52:
02:cb:bf:97:49:71:b8:20:fa:17:92:a1:c9:53:20:
b8:1c:12:8e:79:e5:6e:f4:a3:25:40:27:59:48:b6:
06:10:62:4e:1b:d9:be:8a:9b:f1:d5:88:f7:90:a1:
0b:39:5b:d0:08:08:4a:f7:3c:28:1c:8e:e9:ec:20:
22:ee:56:ce:b4:ad:3d:ff:b1:e6:5a:3d:77:7e:13:
a3:1c:cd:77:a7:ee:c1:1d:78:78:0f:0c:c8:9d:14:
66:07:45:c4:1f:34:f7:47:e9:cb:25:91:7b:60:91:
b9:aa:66:b9:d2:8b:6b:34:e6:77:1b:cf:7b:50:96:
db:da:ed:02:34:2e:e3:3b:0f:fe:0e:d6:4c:65:d5:
83:98:04:0c:12:85:1e:37:60:33:f9:b5:00:01:bb:
a5:df:d2:e2:45:43:73:17:3f:9c:e5:6b:d0:c9:48:
37:8c:a1:bc:ef:dd:31:fe:57:ea:d1:5f:75:9d:94:
97:39:8d:45:b9:f0:c9:f3:26:e1:a4:f0:51:ea:b0:
0f:28:14:f0:1c:6d:a0:e6:25:2f:27:4b:18:ba:56:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9F:B0:8C:1A:9F:9A:07:0F:36:03:40:6E:B4:97:80:04:21:D2:6D
X509v3 Authority Key Identifier:
keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:05:83:3d:a2:ea:41:14:d6:75:32:15:53:12:41:78:5f:9f:
21:4b:5d:0f:9e:0f:21:12:b9:53:b1:08:8f:78:70:3a:68:a4:
1f:24:bb:a3:25:b9:3c:52:dd:1a:bd:1e:4e:1c:3f:7a:4b:1c:
6f:38:92:57:ea:93:39:3b:11:33:57:1d:fb:7b:be:07:3c:e7:
af:27:9f:b2:a0:a9:2c:42:c7:39:05:68:b2:79:b3:c2:36:c6:
7c:01:24:a8:a0:8f:15:8e:be:db:2e:79:22:00:14:31:0f:d8:
6d:46:29:b9:92:91:b0:48:90:f2:1e:76:85:1c:07:5b:bf:86:
a7:86:95:74:c8:07:0c:c0:4b:be:fb:e8:ff:e2:97:8c:3a:6c:
3f:18:a1:5a:a9:a9:29:c4:37:d9:2c:76:39:76:1c:5c:06:2c:
e7:52:63:b3:45:c5:f7:0e:f5:b6:02:45:04:5f:ca:cf:5f:60:
41:7c:91:2d:e2:29:77:18:a6:a2:ef:05:ec:6d:bb:10:72:bc:
1a:dd:1a:cb:6a:08:2a:8c:e1:2d:c5:9a:4f:d1:7a:ea:0e:9a:
58:3e:ef:c1:23:07:b8:04:92:4e:9a:45:14:99:ba:83:e8:ff:
1d:fe:ff:2c:01:b4:27:49:5e:e9:b5:22:32:fe:79:bf:e1:6b:
b3:e5:e3:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJThkB5Q1b5ssYw27maBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMWI3MjliNzVjNWY4YjJlOWQxNThhYTI5NjM5NmQ2ODBi
ZTcwYWQwHhcNMjUwNDIwMTcwMDQ3WhcNMjUwNDIxMTcwMDQ3WjAzMTEwLwYDVQQD
EyhmZTlmYjA4YzFhOWY5YTA3MGYzNjAzNDA2ZWI0OTc4MDA0MjFkMjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndg9B3aCWt6Rp1iIC58K8DwqrqWh
Ykn1jtBXWMUjPIFmOhtX2tgpOBvGPVICy7+XSXG4IPoXkqHJUyC4HBKOeeVu9KMl
QCdZSLYGEGJOG9m+ipvx1Yj3kKELOVvQCAhK9zwoHI7p7CAi7lbOtK09/7HmWj13
fhOjHM13p+7BHXh4DwzInRRmB0XEHzT3R+nLJZF7YJG5qma50otrNOZ3G897UJbb
2u0CNC7jOw/+DtZMZdWDmAQMEoUeN2Az+bUAAbul39LiRUNzFz+c5WvQyUg3jKG8
790x/lfq0V91nZSXOY1FufDJ8ybhpPBR6rAPKBTwHG2g5iUvJ0sYulb72QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6fsIwan5oHDzYDQG60l4AEIdJtMB8GA1UdIwQY
MBaAFIsbcpt1xfiy6dFYqiljltaAvnCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yZGQyNTYtODE0YS00ZmIzLTg1MTUt
NjY4MTQ5MjYzNTM5LzEvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yZGQyNTYtODE0YS00ZmIzLTg1MTUtNjY4MTQ5MjYzNTM5
LzEvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQWDPaLq
QRTWdTIVUxJBeF+fIUtdD54PIRK5U7EIj3hwOmikHyS7oyW5PFLdGr0eThw/eksc
bziSV+qTOTsRM1cd+3u+BzznryefsqCpLELHOQVosnmzwjbGfAEkqKCPFY6+2y55
IgAUMQ/YbUYpuZKRsEiQ8h52hRwHW7+Gp4aVdMgHDMBLvvvo/+KXjDpsPxihWqmp
KcQ32Sx2OXYcXAYs51Jjs0XF9w71tgJFBF/Kz19gQXyRLeIpdximou8F7G27EHK8
Gt0ay2oIKozhLcWaT9F66g6aWD7vwSMHuASSTppFFJm6g+j/Hf7/LAG0J0le6bUi
Mv55v+Frs+XjVQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:36:04 2025 by rpki-client