Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
File: iCGjmu2dpO46tmOdJEUI-h6NIPY.mft (raw, json)
Hash identifier: t1NpJWoQ+6ECvuTF5gAkyH0rXNK3FRNtHyiXj7F5EoM=
Subject key identifier: EF:68:2C:C0:3B:1E:87:87:CC:A2:B6:0E:D9:55:79:37:6B:D3:84:2A
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial: 01973BE3802E82B7A948E3BC95CF6850DE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
Manifest number: 1296
Signing time: Wed 04 Jun 2025 17:00:54 +0000
Manifest this update: Wed 04 Jun 2025 17:00:54 +0000
Manifest next update: Thu 05 Jun 2025 17:00:54 +0000
Files and hashes: 1: OIDmEPbDXYESb6L8W110fitW4aA.roa (hash: AIH3VvHzWUC8AtgPyCBt/ld6YdiGtY4TDL+tLd/3C+w=)
2: OuQJP3rTcu0if4kJ5A5ZWqxKYpo.roa (hash: UN46ctiu4ND9IXGCd4EhP/dQ+ESw5QeLedCQ9yxaLnU=)
3: WV7QPmFglb32ubsYCfgK2rSXhGk.roa (hash: 7jclXGuRVqisqCezIaon+r4NXFS6nrK/O3nscYXGo0k=)
4: WYkwsfl1LrYxcZc4hOn_dwqrnKU.roa (hash: OFI3Jc8HI7chg6jym9Pd2h5sq7FHfkNT1WJbvujMSAY=)
5: iCGjmu2dpO46tmOdJEUI-h6NIPY.crl (hash: rLGNjPK418bhSTk8Yi2Z1sdvXnCq669CvPnLnD1aDEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:e3:80:2e:82:b7:a9:48:e3:bc:95:cf:68:50:de:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Validity
Not Before: Jun 4 17:00:54 2025 GMT
Not After : Jun 5 17:00:54 2025 GMT
Subject: CN=ef682cc03b1e8787cca2b60ed95579376bd3842a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:10:6e:76:38:df:d8:e0:13:bf:34:de:a5:75:
c3:1e:7a:47:bd:0c:fa:71:2c:4d:5d:c6:c1:6e:10:
6a:bb:e7:c7:fe:8e:d1:ad:9b:9a:cd:c7:14:0c:0f:
2a:38:54:d0:d4:2f:22:c6:5b:8a:2f:1f:86:86:c0:
9a:1b:5d:44:25:3d:db:66:ed:1c:e9:26:33:0e:65:
56:2a:14:11:1f:4a:9b:9a:b7:23:51:76:5d:f3:28:
50:80:34:ae:e7:51:bd:68:09:36:e9:15:d8:99:32:
dd:eb:dd:ad:63:66:fd:ce:6f:3e:7a:83:43:6e:3b:
b6:ae:3a:56:7c:6c:f0:af:50:76:f4:51:b5:e1:29:
f2:e7:a5:fd:cb:f4:57:05:a2:ca:1c:75:41:e9:d6:
e6:77:80:a2:8c:7d:70:5c:a4:bc:d1:55:3d:0a:4c:
6f:4f:56:d0:b6:3a:f1:32:fd:68:8c:e3:79:25:39:
aa:fe:24:dc:43:18:06:4b:7f:bf:86:da:96:b2:01:
01:fa:b4:2d:f8:cb:9a:7d:7b:b5:bb:90:6a:3b:81:
6a:86:10:47:0c:1a:e5:f4:53:26:88:25:55:31:c6:
6e:f4:d8:48:0d:54:28:03:4f:f5:97:33:e6:12:7b:
b0:2a:3c:76:b1:e0:20:fe:0a:79:29:07:58:8d:e5:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:68:2C:C0:3B:1E:87:87:CC:A2:B6:0E:D9:55:79:37:6B:D3:84:2A
X509v3 Authority Key Identifier:
keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c5:66:95:7e:53:c5:c2:a9:9b:ef:d7:1e:04:c1:02:c8:c6:
77:75:e3:f0:4a:95:d2:d9:7a:1a:5c:26:c6:77:58:85:f5:ef:
b9:ef:93:d0:bf:e0:1d:87:70:91:d9:77:aa:c1:7a:c5:1d:3c:
12:a0:4b:cc:02:48:09:84:e8:65:1f:56:ba:47:ba:05:53:e6:
d0:59:78:97:ce:a8:6e:71:05:e4:76:e4:38:85:71:5b:55:5b:
23:fd:e9:72:e1:8c:90:eb:56:53:f6:90:02:ef:9b:2a:21:5e:
f3:28:04:f8:55:cc:0f:58:15:79:8f:bf:61:4e:4f:c9:3a:25:
f1:c8:97:d1:3d:ac:c9:03:19:b2:cb:31:8a:9c:98:44:22:35:
e2:9a:2e:09:86:7a:36:bb:29:d4:ac:2c:d6:86:f3:ce:b9:70:
fa:86:03:06:4c:e8:be:b6:c8:67:87:37:9b:7a:90:51:92:34:
df:6a:46:2a:b0:87:3e:9c:13:4c:29:c2:3c:35:e1:d5:8d:73:
b6:cc:e7:03:88:7b:5a:45:bb:8d:df:0c:0c:6b:9f:fe:ee:a4:
a1:4f:0c:2b:c2:c0:72:a7:be:7c:ef:33:bf:03:98:d9:e4:da:
9d:2c:38:c3:54:d3:ae:f7:1a:a4:b3:eb:b8:49:58:2d:a5:5a:
78:ef:fb:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc744AugrepSOO8lc9oUN6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MjFhMzlhZWQ5ZGE0ZWUzYWI2NjM5ZDI0NDUwOGZhMWU4
ZDIwZjYwHhcNMjUwNjA0MTcwMDU0WhcNMjUwNjA1MTcwMDU0WjAzMTEwLwYDVQQD
EyhlZjY4MmNjMDNiMWU4Nzg3Y2NhMmI2MGVkOTU1NzkzNzZiZDM4NDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RBudjjf2OATvzTepXXDHnpHvQz6
cSxNXcbBbhBqu+fH/o7RrZuazccUDA8qOFTQ1C8ixluKLx+GhsCaG11EJT3bZu0c
6SYzDmVWKhQRH0qbmrcjUXZd8yhQgDSu51G9aAk26RXYmTLd692tY2b9zm8+eoND
bju2rjpWfGzwr1B29FG14Sny56X9y/RXBaLKHHVB6dbmd4CijH1wXKS80VU9Ckxv
T1bQtjrxMv1ojON5JTmq/iTcQxgGS3+/htqWsgEB+rQt+MuafXu1u5BqO4FqhhBH
DBrl9FMmiCVVMcZu9NhIDVQoA0/1lzPmEnuwKjx2seAg/gp5KQdYjeWsVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9oLMA7HoeHzKK2DtlVeTdr04QqMB8GA1UdIwQY
MBaAFIgho5rtnaTuOrZjnSRFCPoejSD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAt
ZjYwZDZmNzE4MmExLzEvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAtZjYwZDZmNzE4MmEx
LzEvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8VmlX5T
xcKpm+/XHgTBAsjGd3Xj8EqV0tl6GlwmxndYhfXvue+T0L/gHYdwkdl3qsF6xR08
EqBLzAJICYToZR9Wuke6BVPm0Fl4l86obnEF5HbkOIVxW1VbI/3pcuGMkOtWU/aQ
Au+bKiFe8ygE+FXMD1gVeY+/YU5PyTol8ciX0T2syQMZsssxipyYRCI14pouCYZ6
Nrsp1Kws1obzzrlw+oYDBkzovrbIZ4c3m3qQUZI032pGKrCHPpwTTCnCPDXh1Y1z
tsznA4h7WkW7jd8MDGuf/u6koU8MK8LAcqe+fO8zvwOY2eTanSw4w1TTrvcapLPr
uElYLaVaeO/7xQ==
-----END CERTIFICATE-----
Generated at Wed Jun 4 23:25:15 2025 by rpki-client