Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
File: Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json)
Hash identifier: BMETPBEw3pbWf0W1RSgvnlxTz17DzLBHD5RQOTMNL80=
Subject key identifier: 96:F0:2A:DE:E3:FB:AA:7D:0A:3B:1B:BD:9F:77:BA:EC:9C:88:3B:62
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 01963E41E953EAEB0D7FF5A802FCCA3B0374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
Manifest number: 144E
Signing time: Wed 16 Apr 2025 11:00:29 +0000
Manifest this update: Wed 16 Apr 2025 11:00:29 +0000
Manifest next update: Thu 17 Apr 2025 11:00:29 +0000
Files and hashes: 1: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: GfpVsNtgGCdFMe5fmAb8kDtIe/71BEtWlNF2+4oMLdY=)
2: UVEBG1ExZGcscljMEXZmdhHPbmo.roa (hash: OGY1ZCPh4kqtkS+2sWG7TSBefV4b/lqw2cPXHz2iP6A=)
3: l7ZphxTNLdfz3s0c0sr67IQOn_Q.roa (hash: 7qT5TEH8UgfN71QCeNJwaAV6tPLOUHK85hJIN/udCok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:41:e9:53:ea:eb:0d:7f:f5:a8:02:fc:ca:3b:03:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Apr 16 11:00:29 2025 GMT
Not After : Apr 17 11:00:29 2025 GMT
Subject: CN=96f02adee3fbaa7d0a3b1bbd9f77baec9c883b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:32:fd:9a:40:50:5f:ef:be:f3:76:aa:c3:4d:
d1:22:4b:73:2b:71:34:2c:9e:f2:d3:e5:35:7c:58:
8c:9e:2c:a6:11:fa:fb:95:6b:76:5d:59:4c:af:30:
f5:58:9b:9c:20:89:1c:dd:8a:59:4e:9b:db:5f:09:
39:b2:49:22:36:f9:49:6d:cd:c9:93:a3:e4:ba:ce:
42:6b:57:87:42:43:80:e4:f5:8a:8a:ef:e2:00:d6:
b3:9f:3b:f8:4a:5e:4f:60:14:21:67:79:14:a8:a7:
14:ff:9e:44:ba:51:17:d8:be:15:65:87:cd:5f:91:
2d:4d:78:48:f4:ca:b5:40:51:11:a8:20:a7:2b:92:
7d:2a:28:1b:4a:b3:80:8f:b6:4c:44:c8:3d:8f:7e:
eb:47:0e:cb:7c:af:94:7d:ac:bb:f4:b4:1b:be:ea:
e8:02:62:3e:f7:07:98:39:55:75:32:02:8a:0f:cb:
11:ed:52:c8:06:b3:84:df:3e:27:01:6c:81:67:d7:
84:08:d9:51:c6:60:27:e5:5e:9f:93:f2:8c:39:fe:
6c:e2:f4:c2:58:ab:0e:68:05:d9:26:58:97:22:3d:
35:d3:c9:75:91:7b:02:3d:c6:2e:18:cb:9c:ec:4e:
f3:e1:09:ac:ce:51:e1:82:aa:67:3a:72:e7:56:ca:
49:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:2A:DE:E3:FB:AA:7D:0A:3B:1B:BD:9F:77:BA:EC:9C:88:3B:62
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:32:e3:9b:d0:1e:ba:23:be:b5:15:7a:0e:18:66:a6:29:e3:
f4:b7:71:b8:01:23:3c:f7:1e:ea:dc:1a:7c:cb:3a:d6:9e:51:
b0:91:04:35:1c:9b:c8:f2:d1:5d:6c:32:c3:6f:b0:0d:b1:bc:
18:f4:61:ed:0f:7c:3c:2b:18:2f:dd:a9:69:c4:17:8c:85:42:
82:ef:f4:90:fb:e6:fc:a4:5e:61:1f:d7:47:e1:42:1f:ce:ad:
c0:ec:8f:e7:fb:b1:ae:d5:cc:fd:f3:98:3d:c5:0f:58:51:ed:
a1:23:1d:71:ed:96:aa:9d:0a:1c:d6:17:f8:a7:50:f0:a8:35:
25:7a:5c:5a:f9:23:8c:b4:55:38:e5:28:50:76:1d:44:29:a2:
f4:2c:ae:a0:62:fd:0d:99:da:6f:5e:1a:8f:1e:b5:7f:90:ee:
6a:dc:66:44:0f:ee:a8:11:ea:ee:b5:88:b1:89:af:53:80:9a:
cf:af:81:4b:79:c1:96:d3:c1:3a:a3:57:29:22:6c:0d:db:58:
af:25:ee:f7:0f:36:d4:35:6d:eb:7b:82:49:5c:dd:94:c5:6b:
b0:94:af:51:07:af:02:20:7e:b3:83:48:3a:34:01:69:cc:2a:
9d:5f:d8:e5:c7:80:8a:b8:7f:38:88:83:f9:3c:63:ba:ef:f4:
78:03:89:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+QelT6usNf/WoAvzKOwN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYWNmNjZmMDAxOWM1NTYzMzFiZWY5ZWNkOGRmNjUyNzgy
YTYzZjgwHhcNMjUwNDE2MTEwMDI5WhcNMjUwNDE3MTEwMDI5WjAzMTEwLwYDVQQD
Eyg5NmYwMmFkZWUzZmJhYTdkMGEzYjFiYmQ5Zjc3YmFlYzljODgzYjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTL9mkBQX+++83aqw03RIktzK3E0
LJ7y0+U1fFiMniymEfr7lWt2XVlMrzD1WJucIIkc3YpZTpvbXwk5skkiNvlJbc3J
k6Pkus5Ca1eHQkOA5PWKiu/iANaznzv4Sl5PYBQhZ3kUqKcU/55EulEX2L4VZYfN
X5EtTXhI9Mq1QFERqCCnK5J9KigbSrOAj7ZMRMg9j37rRw7LfK+Ufay79LQbvuro
AmI+9weYOVV1MgKKD8sR7VLIBrOE3z4nAWyBZ9eECNlRxmAn5V6fk/KMOf5s4vTC
WKsOaAXZJliXIj0108l1kXsCPcYuGMuc7E7z4QmszlHhgqpnOnLnVspJ3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbwKt7j+6p9CjsbvZ93uuyciDtiMB8GA1UdIwQY
MBaAFCKs9m8AGcVWMxvvns2N9lJ4KmP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yZTk2NzctYzVkZC00YTMxLWE4ZTct
MTY4ZjIxNTA4Yzc0LzEvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8yZTk2NzctYzVkZC00YTMxLWE4ZTctMTY4ZjIxNTA4Yzc0
LzEvSXF6MmJ3QVp4Vll6Ry0tZXpZMzJVbmdxWV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDLjm9Ae
uiO+tRV6Dhhmpinj9LdxuAEjPPce6twafMs61p5RsJEENRybyPLRXWwyw2+wDbG8
GPRh7Q98PCsYL92pacQXjIVCgu/0kPvm/KReYR/XR+FCH86twOyP5/uxrtXM/fOY
PcUPWFHtoSMdce2Wqp0KHNYX+KdQ8Kg1JXpcWvkjjLRVOOUoUHYdRCmi9CyuoGL9
DZnab14ajx61f5DuatxmRA/uqBHq7rWIsYmvU4Caz6+BS3nBltPBOqNXKSJsDdtY
ryXu9w821DVt63uCSVzdlMVrsJSvUQevAiB+s4NIOjQBacwqnV/Y5ceAirh/OIiD
+Txjuu/0eAOJkw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:50:10 2025 by rpki-client