Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier: ncsk9k9dYEwdWpiDl5DPyt4Q5Fx+FQMxYbTrmF3Csmc=
Subject key identifier: 61:92:7C:75:6C:80:2A:8B:FB:D2:4B:FC:F7:89:24:28:33:4B:89:9D
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial: 01974D7C1CDBF542120539E66663D3D27FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 03:01:08 +0000
Manifest this update: Sun 08 Jun 2025 03:01:08 +0000
Manifest next update: Mon 09 Jun 2025 03:01:08 +0000
Files and hashes: 1: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: HIwrhR3psnE4uaJdyVWOpg0EXTvS0Jb96Ub54KjHyl8=)
2: yIUv-9UBFSosZaxk_SAM-oPYWDg.roa (hash: A5HtFiQ3ZfwDO/6Fs5djNbIUq/3hrajgNOS9o/n1CuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:1c:db:f5:42:12:05:39:e6:66:63:d3:d2:7f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Validity
Not Before: Jun 8 03:01:08 2025 GMT
Not After : Jun 9 03:01:08 2025 GMT
Subject: CN=61927c756c802a8bfbd24bfcf7892428334b899d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:b1:25:a5:16:f7:98:36:b7:6f:fe:28:27:
5b:54:bb:6f:a5:00:73:db:88:2d:15:49:78:d2:3a:
83:28:6b:c7:c2:c5:05:ae:47:84:68:4e:d5:3e:ed:
e7:2b:70:6a:e5:d0:2a:7a:e2:d8:a8:29:b3:71:59:
f9:a7:a7:22:51:fc:a2:a4:11:5f:28:17:ca:bb:b3:
cf:b0:9c:d6:05:db:30:4e:04:96:49:b7:4e:2e:2d:
ab:75:26:7f:3c:32:31:d0:6e:34:7c:c8:6c:e7:36:
fd:2c:f4:62:3b:30:6f:da:22:e5:2c:c7:d2:29:57:
bc:da:19:57:9c:d7:2b:36:47:8f:ca:db:27:3f:91:
2f:55:86:a5:68:00:54:08:b9:1a:41:63:7a:18:93:
7d:a8:30:2a:78:1a:15:d8:54:8b:35:e2:53:b1:e8:
09:63:e4:c6:0c:da:ca:a1:84:1e:11:46:34:fb:1c:
ff:97:74:2f:e2:b4:d3:67:9d:4a:16:cd:d1:38:62:
8b:0c:1c:fd:e0:e8:36:46:c9:b4:7f:77:d8:04:0d:
d6:70:bf:65:67:c1:e7:bf:15:93:1c:7f:4b:ee:bd:
01:65:9c:de:e7:f4:91:1a:11:d9:75:93:1d:7e:aa:
18:bb:1f:9e:c0:a1:d7:21:7d:a0:9f:43:ad:1b:0f:
41:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:92:7C:75:6C:80:2A:8B:FB:D2:4B:FC:F7:89:24:28:33:4B:89:9D
X509v3 Authority Key Identifier:
keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2f:49:f9:93:6a:8e:bf:90:4e:3c:c9:7c:69:17:0d:04:4b:
a6:23:82:33:b3:6a:31:17:c7:f6:52:49:68:24:af:6a:2c:38:
79:22:27:e6:3a:1b:00:e1:19:e9:84:7c:3a:7c:69:e8:bb:03:
d3:c7:56:85:1c:a4:8a:b5:8f:6e:00:af:bf:3a:29:c6:0f:b5:
32:c2:87:aa:41:37:12:1b:7e:93:1c:52:6a:32:1e:01:1c:69:
91:a1:26:b0:55:2e:76:16:30:68:c4:8c:27:94:8a:a6:65:ac:
10:3e:79:93:17:8e:5b:5e:cb:9a:c8:57:b3:79:c8:4f:5c:b9:
b2:f0:09:87:c1:a8:4b:04:15:45:d9:0d:05:9d:9a:c5:95:b3:
30:7f:40:07:6e:10:76:e7:11:fd:14:54:f4:90:b2:06:9d:67:
58:44:da:2f:0e:65:b9:20:d2:c0:1f:6f:10:b1:de:c4:b1:61:
22:7c:0e:37:a1:6b:1a:a2:ae:f1:34:a9:cd:38:d9:b0:b0:78:
d6:2f:c6:f4:9d:d0:5c:d4:2a:d1:b5:8b:70:88:30:fe:1f:eb:
f9:7f:79:3e:9e:56:f7:06:fd:ea:89:10:62:4c:39:58:80:e0:
fc:a3:57:29:2e:17:4c:43:17:c0:eb:e9:66:9c:a6:c1:43:01:
f9:18:83:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNfBzb9UISBTnmZmPT0n+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMTlmM2Q3ZmZlYTk1NzI2MTUwMWU5MTY2NGZmNjgyM2Vk
OTM2YWQwHhcNMjUwNjA4MDMwMTA4WhcNMjUwNjA5MDMwMTA4WjAzMTEwLwYDVQQD
Eyg2MTkyN2M3NTZjODAyYThiZmJkMjRiZmNmNzg5MjQyODMzNGI4OTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzWxJaUW95g2t2/+KCdbVLtvpQBz
24gtFUl40jqDKGvHwsUFrkeEaE7VPu3nK3Bq5dAqeuLYqCmzcVn5p6ciUfyipBFf
KBfKu7PPsJzWBdswTgSWSbdOLi2rdSZ/PDIx0G40fMhs5zb9LPRiOzBv2iLlLMfS
KVe82hlXnNcrNkePytsnP5EvVYalaABUCLkaQWN6GJN9qDAqeBoV2FSLNeJTsegJ
Y+TGDNrKoYQeEUY0+xz/l3Qv4rTTZ51KFs3ROGKLDBz94Og2Rsm0f3fYBA3WcL9l
Z8HnvxWTHH9L7r0BZZze5/SRGhHZdZMdfqoYux+ewKHXIX2gn0OtGw9B3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGSfHVsgCqL+9JL/PeJJCgzS4mdMB8GA1UdIwQY
MBaAFIsZ89f/6pVyYVAekWZP9oI+2TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEt
YjY1NDJlNjQ0N2EwLzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEtYjY1NDJlNjQ0N2Ew
LzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKi9J+ZNq
jr+QTjzJfGkXDQRLpiOCM7NqMRfH9lJJaCSvaiw4eSIn5jobAOEZ6YR8Onxp6LsD
08dWhRykirWPbgCvvzopxg+1MsKHqkE3Eht+kxxSajIeARxpkaEmsFUudhYwaMSM
J5SKpmWsED55kxeOW17LmshXs3nIT1y5svAJh8GoSwQVRdkNBZ2axZWzMH9AB24Q
ducR/RRU9JCyBp1nWETaLw5luSDSwB9vELHexLFhInwON6FrGqKu8TSpzTjZsLB4
1i/G9J3QXNQq0bWLcIgw/h/r+X95Pp5W9wb96okQYkw5WIDg/KNXKS4XTEMXwOvp
ZpymwUMB+RiDLw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:34:40 2025 by rpki-client