Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
File: igr5b5WYkhMXjTPWXwcOj7L-N98.mft (raw, json)
Hash identifier: Y+2pRJ2cEuMaDPswgm6MTdoSOIZIiwVfUt629BoIF88=
Subject key identifier: 65:A5:3D:DB:C7:81:D6:C8:B2:19:3F:0A:D5:21:51:11:CB:4D:97:07
Authority key identifier: 8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
Certificate issuer: /CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Certificate serial: 0197485522BACD93289A6B829E5BD08A3002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
Manifest number: 0623
Signing time: Sat 07 Jun 2025 03:00:28 +0000
Manifest this update: Sat 07 Jun 2025 03:00:28 +0000
Manifest next update: Sun 08 Jun 2025 03:00:28 +0000
Files and hashes: 1: igr5b5WYkhMXjTPWXwcOj7L-N98.crl (hash: AQl61fpSTnJRInUbtOe21Csn6mrB8ElFF7qjbMg7TAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:22:ba:cd:93:28:9a:6b:82:9e:5b:d0:8a:30:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Validity
Not Before: Jun 7 03:00:28 2025 GMT
Not After : Jun 8 03:00:28 2025 GMT
Subject: CN=65a53ddbc781d6c8b2193f0ad5215111cb4d9707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:4b:f3:73:6f:83:f2:53:b8:3f:cd:38:4c:
ac:c6:d9:a2:60:27:06:70:e1:49:68:d7:f4:2a:bc:
97:e0:0c:b7:da:71:6a:c3:ff:68:8a:dd:5a:54:87:
39:2d:ed:6d:d4:75:ec:b1:12:8e:ed:74:75:ba:58:
99:b5:05:c6:10:6b:87:3d:98:75:12:de:90:a7:24:
52:5b:3d:f9:58:c0:58:30:87:62:65:01:5a:fc:cb:
a8:d4:d3:e4:a3:ad:2d:f1:78:b9:e8:56:43:37:ca:
f7:e6:c4:4b:f2:2f:aa:d8:79:b1:11:4c:bc:8f:14:
eb:78:d7:5e:64:22:68:0a:ad:c9:bd:1e:03:39:d2:
04:a5:39:49:21:7a:83:7f:de:13:de:a4:8f:b1:b6:
47:b2:0d:d4:50:36:3d:b6:b4:0e:9a:a1:24:38:7e:
a4:72:3b:95:35:0c:77:52:f7:f1:82:56:29:6b:e3:
90:48:70:2f:9c:25:7b:31:b6:64:38:09:47:0b:66:
e7:9a:b5:d9:18:33:52:35:ec:6d:fc:e5:17:f6:d8:
20:c8:75:7d:55:2b:2d:96:bb:74:eb:95:2d:a0:09:
ed:bd:7a:72:fb:70:85:c8:16:32:03:d5:05:70:cf:
1e:4c:3e:11:3e:b7:93:bf:f7:54:85:17:d2:f7:31:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A5:3D:DB:C7:81:D6:C8:B2:19:3F:0A:D5:21:51:11:CB:4D:97:07
X509v3 Authority Key Identifier:
keyid:8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:01:b1:84:0e:68:a0:c9:65:68:d8:5c:92:29:db:1b:a7:8d:
b6:2f:25:d2:32:fa:75:f5:c2:2f:c2:c3:8c:a9:c9:01:c7:1f:
20:7f:2e:95:d9:2f:a9:69:00:6e:ba:ff:8d:32:f1:04:55:7d:
6c:d3:1e:f6:5c:6e:08:68:4c:25:aa:c7:97:9d:e4:af:8c:7b:
e0:f6:30:ea:67:2b:01:98:eb:6a:66:7a:3f:f1:b5:bf:48:24:
82:89:6d:4b:61:e3:71:a4:5f:dd:22:20:0e:11:83:d2:47:7e:
fb:79:b2:6b:79:85:f2:2b:84:8b:ba:1a:8e:63:ff:d8:5f:fe:
1f:35:1c:fa:42:67:b7:fc:4a:a6:84:3e:a4:f8:7f:0a:9c:8a:
2c:6b:6d:e0:e6:d9:81:40:f3:ae:e5:76:45:7e:87:a6:72:76:
08:13:63:c1:c4:3d:95:37:67:2b:e8:42:49:d2:f0:56:3e:c4:
6c:2e:65:f0:af:94:58:be:5b:1a:f4:76:63:c1:0b:e2:cd:8c:
b3:e8:34:ac:28:4a:aa:f1:6c:43:f3:52:00:f9:d6:4c:b6:53:
e3:de:ed:61:52:50:cb:3e:1d:85:24:d4:6e:c0:dd:d2:a7:3a:
9e:4f:25:e2:3d:03:ef:a2:a5:c1:a4:63:32:a4:de:6d:ff:7c:
45:ba:d1:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVSK6zZMommuCnlvQijACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMGFmOTZmOTU5ODkyMTMxNzhkMzNkNjVmMDcwZThmYjJm
ZTM3ZGYwHhcNMjUwNjA3MDMwMDI4WhcNMjUwNjA4MDMwMDI4WjAzMTEwLwYDVQQD
Eyg2NWE1M2RkYmM3ODFkNmM4YjIxOTNmMGFkNTIxNTExMWNiNGQ5NzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBRL83Nvg/JTuD/NOEysxtmiYCcG
cOFJaNf0KryX4Ay32nFqw/9oit1aVIc5Le1t1HXssRKO7XR1uliZtQXGEGuHPZh1
Et6QpyRSWz35WMBYMIdiZQFa/Muo1NPko60t8Xi56FZDN8r35sRL8i+q2HmxEUy8
jxTreNdeZCJoCq3JvR4DOdIEpTlJIXqDf94T3qSPsbZHsg3UUDY9trQOmqEkOH6k
cjuVNQx3UvfxglYpa+OQSHAvnCV7MbZkOAlHC2bnmrXZGDNSNext/OUX9tggyHV9
VSstlrt065UtoAntvXpy+3CFyBYyA9UFcM8eTD4RPreTv/dUhRfS9zFzowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWlPdvHgdbIshk/CtUhURHLTZcHMB8GA1UdIwQY
MBaAFIoK+W+VmJITF40z1l8HDo+y/jffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdyNWI1V1lraE1YalRQV1h3Y09qN0wtTjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wOWY2ZDMtOTcyZi00YjA1LWIyN2Et
Yjc3YzFmOTcyOWZmLzEvaWdyNWI1V1lraE1YalRQV1h3Y09qN0wtTjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wOWY2ZDMtOTcyZi00YjA1LWIyN2EtYjc3YzFmOTcyOWZm
LzEvaWdyNWI1V1lraE1YalRQV1h3Y09qN0wtTjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQGxhA5o
oMllaNhckinbG6eNti8l0jL6dfXCL8LDjKnJAccfIH8uldkvqWkAbrr/jTLxBFV9
bNMe9lxuCGhMJarHl53kr4x74PYw6mcrAZjramZ6P/G1v0gkgoltS2HjcaRf3SIg
DhGD0kd++3mya3mF8iuEi7oajmP/2F/+HzUc+kJnt/xKpoQ+pPh/CpyKLGtt4ObZ
gUDzruV2RX6HpnJ2CBNjwcQ9lTdnK+hCSdLwVj7EbC5l8K+UWL5bGvR2Y8EL4s2M
s+g0rChKqvFsQ/NSAPnWTLZT497tYVJQyz4dhSTUbsDd0qc6nk8l4j0D76KlwaRj
MqTebf98RbrRfw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:34:00 2025 by rpki-client