Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
File: iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json)
Hash identifier: 1o4SljSo/LCjEJjR4fW2hodjTmstD7b8pLKDvn4zIME=
Subject key identifier: C2:11:11:11:E1:C0:8A:B0:A6:A6:0E:3E:E2:03:D8:C3:2F:67:A7:6C
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 019746D4DFCD69E8968FDCFDEEEF0B39F876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
Manifest number: 06BD
Signing time: Fri 06 Jun 2025 20:00:45 +0000
Manifest this update: Fri 06 Jun 2025 20:00:45 +0000
Manifest next update: Sat 07 Jun 2025 20:00:45 +0000
Files and hashes: 1: DSjiByReVAFtGenTha4D-8dSQJA.roa (hash: LTaqsJLmNorNuR9w6MCAPY47C39e6eSxiN8KzBSficg=)
2: N3Ms1tO5Rc3q58ZodMbwcW3QRxA.roa (hash: QeEjLFu1bfyi8L5wOE2F/BxSn3Wihpq/1jEicr1OiIU=)
3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: dcmCp4MoLabXnR+4Kt40zKj2xlJ6kQrmNh0APSbtb54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:df:cd:69:e8:96:8f:dc:fd:ee:ef:0b:39:f8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: Jun 6 20:00:45 2025 GMT
Not After : Jun 7 20:00:45 2025 GMT
Subject: CN=c2111111e1c08ab0a6a60e3ee203d8c32f67a76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:6f:6b:98:0a:45:3a:47:3f:38:08:a7:31:
f6:71:95:5b:79:d4:43:2b:41:91:8e:8a:45:a9:db:
34:d2:31:63:f8:42:f6:51:9f:c7:68:20:f5:31:c2:
39:35:37:bf:03:e0:5d:35:33:0a:d5:df:55:f9:76:
c3:9d:30:1a:df:79:28:6e:e9:f3:cb:a9:9c:a8:e5:
52:d0:47:b3:df:ac:09:ae:d6:10:ce:f6:42:2a:36:
70:ee:a6:19:a4:99:6c:c2:99:31:69:e4:71:27:00:
19:5e:bb:51:ce:d9:0c:3e:be:76:7f:a5:32:74:5d:
bf:64:60:2c:03:be:fa:61:81:9a:fc:da:26:ff:b2:
3d:94:c7:47:ec:ad:5e:11:5b:63:2c:43:f1:00:d3:
2f:e1:93:b5:41:eb:03:00:e9:61:d7:48:30:e9:e6:
9f:f1:c9:85:88:0b:f2:80:57:e9:43:df:a8:77:7f:
2b:87:b3:7a:40:f1:ec:78:22:0d:8f:a3:ef:f3:0b:
25:42:27:1e:f1:c0:49:86:df:76:f6:79:76:b0:62:
87:e0:8e:91:eb:82:e4:44:2e:48:ff:bb:6f:8e:e3:
f6:02:41:9f:13:fa:6e:66:15:87:46:30:96:71:19:
ad:7c:76:c7:cf:df:4b:41:24:df:85:fb:ae:98:42:
33:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:11:11:11:E1:C0:8A:B0:A6:A6:0E:3E:E2:03:D8:C3:2F:67:A7:6C
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:80:b7:52:d6:d5:7b:c6:8e:f2:63:07:63:8c:68:94:b1:36:
61:49:d4:e4:f3:31:c9:72:ac:71:16:c5:e5:94:1f:9b:f2:0f:
d6:d5:8c:56:b1:95:87:d8:00:fb:12:49:d3:b4:67:a0:4a:69:
3d:56:1a:6c:4f:66:d7:61:da:5a:26:eb:fe:17:df:eb:fd:cf:
57:11:0d:63:b2:d0:f0:a2:9a:01:12:66:d9:3e:58:78:e4:7c:
d5:17:d1:96:5b:ca:0a:2d:09:50:4a:13:87:63:af:38:43:1f:
e3:8b:1c:35:8d:c3:41:fd:ed:c7:cd:c9:04:72:8e:ed:61:8c:
e1:f7:4f:ad:f3:f8:8e:54:d6:21:07:0a:28:1f:30:e5:a4:25:
f7:4d:0a:56:f3:24:e1:79:f8:d0:25:1a:c3:a9:b7:e4:08:ef:
c9:98:ba:08:f4:e1:4b:76:e5:f8:f1:d3:5d:a1:4e:ab:6c:f1:
e0:7f:c8:f8:19:1b:ea:85:59:88:0e:65:70:19:bc:5b:84:ec:
5f:35:32:ea:aa:24:b6:95:62:af:12:ac:c4:61:a1:e8:13:94:
a5:3c:ba:72:65:c2:1e:2c:20:a2:20:8a:d3:36:da:d2:45:56:
ed:e9:ad:65:79:cb:aa:a4:ea:9d:32:da:b1:23:0a:e1:82:71:
1a:b1:b0:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1N/NaeiWj9z97u8LOfh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmUxOTA1Y2Q3YWYzNmU2M2FkYTYzNjZjMTQ3YjYxZDg1
YzlmMmIwHhcNMjUwNjA2MjAwMDQ1WhcNMjUwNjA3MjAwMDQ1WjAzMTEwLwYDVQQD
EyhjMjExMTExMWUxYzA4YWIwYTZhNjBlM2VlMjAzZDhjMzJmNjdhNzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZFva5gKRTpHPzgIpzH2cZVbedRD
K0GRjopFqds00jFj+EL2UZ/HaCD1McI5NTe/A+BdNTMK1d9V+XbDnTAa33kobunz
y6mcqOVS0Eez36wJrtYQzvZCKjZw7qYZpJlswpkxaeRxJwAZXrtRztkMPr52f6Uy
dF2/ZGAsA776YYGa/Nom/7I9lMdH7K1eEVtjLEPxANMv4ZO1QesDAOlh10gw6eaf
8cmFiAvygFfpQ9+od38rh7N6QPHseCINj6Pv8wslQice8cBJht929nl2sGKH4I6R
64LkRC5I/7tvjuP2AkGfE/puZhWHRjCWcRmtfHbHz99LQSTfhfuumEIzFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIRERHhwIqwpqYOPuID2MMvZ6dsMB8GA1UdIwQY
MBaAFIj+GQXNevNuY62mNmwUe2HYXJ8rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUt
ZDYzM2FhNzBkZDY2LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUtZDYzM2FhNzBkZDY2
LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYC3UtbV
e8aO8mMHY4xolLE2YUnU5PMxyXKscRbF5ZQfm/IP1tWMVrGVh9gA+xJJ07RnoEpp
PVYabE9m12HaWibr/hff6/3PVxENY7LQ8KKaARJm2T5YeOR81RfRllvKCi0JUEoT
h2OvOEMf44scNY3DQf3tx83JBHKO7WGM4fdPrfP4jlTWIQcKKB8w5aQl900KVvMk
4Xn40CUaw6m35AjvyZi6CPThS3bl+PHTXaFOq2zx4H/I+Bkb6oVZiA5lcBm8W4Ts
XzUy6qoktpVirxKsxGGh6BOUpTy6cmXCHiwgoiCK0zba0kVW7emtZXnLqqTqnTLa
sSMK4YJxGrGwtg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:49:19 2025 by rpki-client