Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json)
Hash identifier: F/i8PjgpKH81PnEif43FgubtcDAx/nbAokWqh24vz2Q=
Subject key identifier: 98:8C:03:BA:F1:28:3B:7B:AD:74:56:EB:DB:53:C1:75:3F:0F:DE:3B
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial: 01984A0A612D269C2857BFB5967900B2204E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
Manifest number: 1563
Signing time: Sun 27 Jul 2025 04:00:50 +0000
Manifest this update: Sun 27 Jul 2025 04:00:50 +0000
Manifest next update: Mon 28 Jul 2025 04:00:50 +0000
Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: yRCQyDE/fezi7CteX9qC3lP1GoFVcOEQwVqMlGnUwUw=)
2: oL5s4daZ2-CvSDbZedMFWpoaJg4.roa (hash: rBJTh0rRi4HBxgXoejT0Pcmh+tBjyPVq1RYIy0Ljiec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:61:2d:26:9c:28:57:bf:b5:96:79:00:b2:20:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Validity
Not Before: Jul 27 04:00:50 2025 GMT
Not After : Jul 28 04:00:50 2025 GMT
Subject: CN=988c03baf1283b7bad7456ebdb53c1753f0fde3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4d:57:fc:cc:eb:42:28:05:20:00:d6:df:f1:
1c:f2:eb:c3:ed:c9:ca:1d:5d:5f:17:d6:87:c2:e4:
13:48:3b:22:f3:1f:be:61:f6:64:f0:c1:33:f4:e9:
15:3b:33:4d:52:c9:fe:54:f2:84:2d:f1:18:cb:9c:
58:a8:a5:5d:f3:3d:40:cd:7d:99:2b:0d:a4:10:cb:
36:53:07:33:d9:cb:aa:55:79:ce:0c:89:4c:d3:34:
c3:5a:26:17:fd:af:76:33:59:8c:a9:af:8d:de:da:
02:fe:54:79:d6:df:7f:61:55:79:94:3a:9c:af:a1:
42:fd:c2:bc:fd:05:1b:09:c9:40:bb:d9:f2:af:9f:
2e:d3:4d:68:48:f9:80:fa:13:0e:58:69:43:82:b3:
d3:c4:22:8b:c8:01:3c:13:d8:d1:7d:70:f0:39:f1:
cc:93:42:9c:e4:10:1c:14:19:3f:e8:ef:9d:26:12:
f9:56:3d:bb:6f:53:89:b7:9a:0f:38:51:88:96:6d:
3e:31:62:99:ae:94:90:8e:31:0e:aa:90:1c:36:60:
17:e5:d7:e6:a8:86:17:c7:72:21:15:cc:73:f8:6e:
b8:fe:60:05:13:16:bd:bb:dd:a6:ff:75:4f:6d:8f:
0f:a5:c5:d1:67:61:19:46:01:99:ed:60:41:90:13:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8C:03:BA:F1:28:3B:7B:AD:74:56:EB:DB:53:C1:75:3F:0F:DE:3B
X509v3 Authority Key Identifier:
keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:79:f9:cf:df:fa:01:25:f4:be:fc:e8:99:57:02:73:03:af:
26:52:0e:30:68:09:26:a4:81:55:ea:84:cc:c1:3e:5b:45:56:
a1:b3:54:c8:df:36:bc:5e:33:8f:88:3d:95:b4:21:0c:c0:4c:
e6:d1:9b:7a:51:16:72:d5:cd:a0:08:bd:47:87:4e:e7:90:ed:
7c:6e:b5:ec:6c:2c:d6:4f:7d:4c:7b:06:94:63:dc:b3:1e:90:
9d:8e:4b:ea:e8:d5:51:fd:8b:95:78:78:69:bd:b2:3a:f7:95:
fc:6c:ec:68:16:6d:f4:66:b4:37:8d:99:ea:42:62:af:2e:0a:
b9:38:14:ce:f8:9a:35:40:9e:0d:e1:12:88:e8:70:fc:f6:9a:
87:c2:dd:af:fd:dd:38:7b:93:18:b0:cc:0e:36:6c:02:8c:27:
2b:99:0b:56:f7:c9:57:d0:96:96:3b:e7:72:b4:33:d1:31:e9:
6d:55:ab:30:2d:04:06:fc:fa:12:d6:32:2d:13:15:e3:11:65:
5d:eb:70:ae:46:53:33:f7:80:c5:e2:1a:28:98:d7:d3:9e:54:
99:2f:dd:7c:65:7a:b4:fc:c7:1b:63:f8:e3:56:98:1a:0d:ad:
44:ab:3f:8d:a5:78:0f:aa:79:27:2e:6d:85:d6:cc:de:d6:d2:
93:28:65:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCmEtJpwoV7+1lnkAsiBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmQxODJhM2I0NGE3YmUwNWQzZWU3MGRjOTBhODVkNTdh
YmZiOGQwHhcNMjUwNzI3MDQwMDUwWhcNMjUwNzI4MDQwMDUwWjAzMTEwLwYDVQQD
Eyg5ODhjMDNiYWYxMjgzYjdiYWQ3NDU2ZWJkYjUzYzE3NTNmMGZkZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA301X/MzrQigFIADW3/Ec8uvD7cnK
HV1fF9aHwuQTSDsi8x++YfZk8MEz9OkVOzNNUsn+VPKELfEYy5xYqKVd8z1AzX2Z
Kw2kEMs2Uwcz2cuqVXnODIlM0zTDWiYX/a92M1mMqa+N3toC/lR51t9/YVV5lDqc
r6FC/cK8/QUbCclAu9nyr58u001oSPmA+hMOWGlDgrPTxCKLyAE8E9jRfXDwOfHM
k0Kc5BAcFBk/6O+dJhL5Vj27b1OJt5oPOFGIlm0+MWKZrpSQjjEOqpAcNmAX5dfm
qIYXx3IhFcxz+G64/mAFExa9u92m/3VPbY8PpcXRZ2EZRgGZ7WBBkBMxiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiMA7rxKDt7rXRW69tTwXU/D947MB8GA1UdIwQY
MBaAFCBtGCo7RKe+BdPucNyQqF1Xq/uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNmYyZWUtMDQ3Ni00MGI0LWJiNmEt
NjYwNzc4MDk5YjNkLzEvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lNmYyZWUtMDQ3Ni00MGI0LWJiNmEtNjYwNzc4MDk5YjNk
LzEvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3n5z9/6
ASX0vvzomVcCcwOvJlIOMGgJJqSBVeqEzME+W0VWobNUyN82vF4zj4g9lbQhDMBM
5tGbelEWctXNoAi9R4dO55DtfG617Gws1k99THsGlGPcsx6QnY5L6ujVUf2LlXh4
ab2yOveV/GzsaBZt9Ga0N42Z6kJiry4KuTgUzviaNUCeDeESiOhw/Paah8Ldr/3d
OHuTGLDMDjZsAownK5kLVvfJV9CWljvncrQz0THpbVWrMC0EBvz6EtYyLRMV4xFl
XetwrkZTM/eAxeIaKJjX055UmS/dfGV6tPzHG2P441aYGg2tRKs/jaV4D6p5Jy5t
hdbM3tbSkyhlcA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:27:35 2025 by rpki-client