Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
File: iK09YNkgV_8PoBH0UMNkbjUtpdg.mft (raw, json)
Hash identifier: cp6pMYh5cFNAPqR5r6js5Ne+LQmKmCzr+QFixrVnrXs=
Subject key identifier: BC:D6:72:F1:A2:4D:53:6A:87:00:7D:81:14:69:00:A3:7A:21:A1:73
Authority key identifier: 88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
Certificate issuer: /CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Certificate serial: 01974B1FAA281EE8F0E461845B86FAF0EEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
Manifest number: 01D1
Signing time: Sat 07 Jun 2025 16:00:55 +0000
Manifest this update: Sat 07 Jun 2025 16:00:55 +0000
Manifest next update: Sun 08 Jun 2025 16:00:55 +0000
Files and hashes: 1: ZbzYnCdTKy9eNC3OK0DEdLUOyKk.roa (hash: oL/nHAdw2PWuZlbLqbaKwj0TlvoNl+Sz5bzNx/L6zWY=)
2: iK09YNkgV_8PoBH0UMNkbjUtpdg.crl (hash: Y+mGCrTmYq6BnoggcLisUT9H30nJVdnUYAiSIIbtUQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:aa:28:1e:e8:f0:e4:61:84:5b:86:fa:f0:ee:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Validity
Not Before: Jun 7 16:00:55 2025 GMT
Not After : Jun 8 16:00:55 2025 GMT
Subject: CN=bcd672f1a24d536a87007d81146900a37a21a173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:05:16:f7:8f:96:19:17:9b:ab:54:74:ef:
74:43:57:65:43:13:02:8a:45:ea:70:f3:57:d4:10:
5f:90:43:ba:70:33:5f:28:62:6b:12:e6:70:49:dd:
47:13:3a:4e:84:96:c7:69:1c:34:5a:fc:93:d5:d5:
99:58:c5:4a:ba:db:4a:0a:02:c3:14:33:51:16:48:
c0:a6:ce:4f:14:ff:67:db:5b:a9:95:48:c1:3b:a4:
58:42:7c:3f:14:ca:43:4b:ce:90:ad:1b:40:fc:44:
58:8f:94:5f:57:47:cb:ca:3c:f9:a5:3c:15:ba:a8:
da:a9:57:be:af:e2:29:da:75:1f:af:a9:ef:a0:4c:
4e:e7:db:7b:89:3a:2e:a8:47:37:55:ce:40:7a:f6:
10:99:52:dc:0f:7e:b9:2c:c0:4b:ae:2c:16:c7:60:
15:e1:d9:ce:d3:c5:51:3f:bc:98:7e:5d:a6:e5:41:
55:20:c8:b1:f4:3a:15:d5:28:e9:ca:8f:a3:d0:e4:
47:a1:a3:8c:82:a1:36:aa:a8:41:aa:12:2a:7d:6f:
09:1c:e9:68:97:85:27:9a:a6:69:68:ec:3a:fe:2d:
f1:27:23:57:f5:d6:af:7f:a7:71:ea:af:56:01:71:
87:4b:cf:b4:24:a7:71:09:05:fe:c0:93:02:50:21:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D6:72:F1:A2:4D:53:6A:87:00:7D:81:14:69:00:A3:7A:21:A1:73
X509v3 Authority Key Identifier:
keyid:88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a1:7b:d1:46:4c:15:25:8e:54:6e:6a:02:5b:ce:48:54:ab:
ee:86:17:23:b2:61:4e:21:01:d7:14:66:d5:6b:e0:16:7a:86:
19:8c:d2:f6:89:fc:c4:3d:24:e4:27:b1:ae:a4:9b:83:b3:3f:
2b:9b:f1:4c:5b:4c:e6:78:c2:e6:71:07:4c:1e:73:f2:90:a7:
95:8d:f1:ae:f8:24:c9:d5:73:f9:b1:50:7d:c6:4d:b4:39:f7:
2d:95:79:53:d3:8e:e1:be:07:47:cd:5c:8f:7c:dc:a6:9d:2a:
c0:f5:9f:88:48:6d:98:db:61:38:27:ff:82:d8:93:24:da:48:
d6:a5:72:4a:dc:39:a5:e5:94:16:d7:e7:bd:fb:0a:10:11:12:
3a:02:72:3a:63:df:f5:e9:fc:4b:3e:17:63:7f:53:26:9e:4a:
20:85:f4:40:71:25:f7:63:b8:6b:49:e8:f2:67:c8:45:9a:7f:
a6:60:47:e7:8a:d5:aa:69:94:fc:96:a2:b9:4c:5e:b8:bd:c9:
db:29:0e:67:ef:6a:fe:e4:10:38:12:14:8f:af:5a:b7:1b:08:
4c:79:eb:98:43:e3:70:dd:a6:d6:10:ef:c8:a1:33:23:28:46:
3f:c1:f2:db:cc:13:a6:b8:6a:ac:cd:16:b0:54:48:64:df:34:
36:e7:e7:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLH6ooHujw5GGEW4b68O6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWQzZDYwZDkyMDU3ZmYwZmEwMTFmNDUwYzM2NDZlMzUy
ZGE1ZDgwHhcNMjUwNjA3MTYwMDU1WhcNMjUwNjA4MTYwMDU1WjAzMTEwLwYDVQQD
EyhiY2Q2NzJmMWEyNGQ1MzZhODcwMDdkODExNDY5MDBhMzdhMjFhMTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP4FFvePlhkXm6tUdO90Q1dlQxMC
ikXqcPNX1BBfkEO6cDNfKGJrEuZwSd1HEzpOhJbHaRw0WvyT1dWZWMVKuttKCgLD
FDNRFkjAps5PFP9n21uplUjBO6RYQnw/FMpDS86QrRtA/ERYj5RfV0fLyjz5pTwV
uqjaqVe+r+Ip2nUfr6nvoExO59t7iTouqEc3Vc5AevYQmVLcD365LMBLriwWx2AV
4dnO08VRP7yYfl2m5UFVIMix9DoV1Sjpyo+j0ORHoaOMgqE2qqhBqhIqfW8JHOlo
l4UnmqZpaOw6/i3xJyNX9davf6dx6q9WAXGHS8+0JKdxCQX+wJMCUCF6SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzWcvGiTVNqhwB9gRRpAKN6IaFzMB8GA1UdIwQY
MBaAFIitPWDZIFf/D6AR9FDDZG41LaXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wNzlkZGItODIwYS00ZDUxLWJmOGQt
OGQxMWVhZDNhZjhjLzEvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wNzlkZGItODIwYS00ZDUxLWJmOGQtOGQxMWVhZDNhZjhj
LzEvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaF70UZM
FSWOVG5qAlvOSFSr7oYXI7JhTiEB1xRm1WvgFnqGGYzS9on8xD0k5CexrqSbg7M/
K5vxTFtM5njC5nEHTB5z8pCnlY3xrvgkydVz+bFQfcZNtDn3LZV5U9OO4b4HR81c
j3zcpp0qwPWfiEhtmNthOCf/gtiTJNpI1qVyStw5peWUFtfnvfsKEBESOgJyOmPf
9en8Sz4XY39TJp5KIIX0QHEl92O4a0no8mfIRZp/pmBH54rVqmmU/JaiuUxeuL3J
2ykOZ+9q/uQQOBIUj69atxsITHnrmEPjcN2m1hDvyKEzIyhGP8Hy28wTprhqrM0W
sFRIZN80NufnRQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:27:41 2025 by rpki-client