Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: BwcUUzAfh6n8qxmQ+9kr6zxaOVyNsGPbS6SbTTCyTaA=
Subject key identifier: 6F:2C:D6:A1:17:99:4B:DE:8C:65:CA:07:83:12:1F:C1:D6:19:6D:4B
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 0198534468E3A3DA60D5FA86CF1D2195B74F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 23:00:48 +0000
Manifest this update: Mon 28 Jul 2025 23:00:48 +0000
Manifest next update: Tue 29 Jul 2025 23:00:48 +0000
Files and hashes: 1: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: +PknCOuIhzDYhSjSNzf4T8R6PR7+ZmTqfM3viyWd87g=)
2: LkiVXeukns_JdhONh74qaRMFBIM.roa (hash: sMLMXJ4GQAf8vdiNw4uFl/nK1+dFlOKAlp+mNZ+YliU=)
3: cd1yHX5UcqryiXUb-rkYleNrwXs.roa (hash: 6h3q+Ehg11sL4jSJjG152eGWFDBSFWsjBJ9eqGT5BtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:68:e3:a3:da:60:d5:fa:86:cf:1d:21:95:b7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Jul 28 23:00:48 2025 GMT
Not After : Jul 29 23:00:48 2025 GMT
Subject: CN=6f2cd6a117994bde8c65ca0783121fc1d6196d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:f7:9a:27:87:24:1c:cc:03:b1:a4:db:39:
7b:83:7e:de:70:9f:ce:b6:17:3e:3e:04:9b:3b:12:
80:76:12:a4:c0:00:41:2e:3e:69:43:c2:99:a6:b5:
e3:c1:45:68:13:0a:7b:01:5b:ec:87:0e:bb:1a:01:
b0:e5:6b:46:83:54:fa:e1:59:14:aa:89:75:48:38:
49:51:b8:9d:b9:0d:3d:6c:4c:8a:33:0a:cf:82:2f:
43:29:fe:e6:81:f5:bb:f2:34:b9:36:54:8d:6b:a6:
5e:19:d1:1b:9f:e7:dc:75:b6:13:db:f8:25:16:a3:
ac:a0:52:a5:9c:37:67:01:71:fc:10:64:f7:9d:8a:
68:bf:e0:a8:cf:11:74:ea:1f:57:20:64:78:ac:ba:
c6:fa:1b:79:82:af:e9:7f:d7:ad:34:e3:83:49:aa:
c2:2d:67:78:ed:d0:ea:16:da:8f:12:ed:9e:ea:7a:
f6:92:ce:0f:2b:b4:aa:01:f7:44:6f:28:c9:d1:26:
b8:72:dd:06:91:57:df:98:8a:59:00:bd:4b:ae:95:
63:63:9c:bb:0d:23:e0:43:1a:ee:e5:1e:e2:9a:4e:
de:35:39:de:9f:f4:81:9e:65:45:03:72:0e:a3:6f:
f3:0d:35:a3:e8:64:20:12:6b:6f:69:60:04:14:87:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2C:D6:A1:17:99:4B:DE:8C:65:CA:07:83:12:1F:C1:D6:19:6D:4B
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:9c:3e:66:b8:2f:ae:53:1f:b3:ec:24:e3:03:4c:5a:ef:3c:
b6:68:36:55:43:2a:1c:bb:2e:5e:28:15:f6:03:e7:b2:ea:fc:
05:e8:c8:60:e2:03:1c:55:5b:bc:b5:f3:ea:20:d2:64:e0:6d:
b2:78:89:71:65:82:d9:11:65:91:ce:0b:cb:bb:d0:1c:ad:92:
17:ba:64:62:85:70:a0:bf:36:c5:33:3f:b8:bc:17:7a:86:b9:
27:69:04:18:85:11:8a:c7:0e:f4:39:aa:84:cd:a0:36:5a:d5:
7f:5a:42:2a:24:dc:a6:60:fa:ca:94:db:27:c1:0f:4f:a5:c5:
0f:63:34:e5:7a:ec:0e:08:e7:a1:da:b4:6a:5a:d6:78:a1:8a:
a7:b4:b6:4b:67:90:87:ae:91:a4:61:ff:77:bd:c1:fb:e5:2a:
c1:ff:ea:74:e3:c4:b3:a5:1a:12:30:16:fc:96:98:84:03:67:
e4:e9:fe:9b:f2:a9:fa:be:12:13:64:18:ab:33:2a:2f:09:bb:
0e:95:81:ac:47:2a:0e:c2:f6:db:78:f4:df:13:db:52:46:ba:
0f:eb:45:05:0f:e2:15:ee:f8:f7:b0:20:e8:8b:d3:a8:de:38:
ec:fd:e1:02:3c:39:5c:2c:74:c8:07:73:20:92:74:b8:09:8d:
d1:4f:02:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 08:46:55 2025 by rpki-client