Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
File: IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft (raw, json)
Hash identifier: DXEEWpcHNpNCrDsHADTnRF2q8K++EjX5ZCoaPNF0f0U=
Subject key identifier: 79:79:FD:12:5B:15:67:E2:50:E2:EF:74:0E:CB:BE:D9:59:DB:E3:07
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Certificate issuer: /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial: 01974E8E563D30AC7F8747514528387A698C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
Manifest number: 0206
Signing time: Sun 08 Jun 2025 08:00:40 +0000
Manifest this update: Sun 08 Jun 2025 08:00:40 +0000
Manifest next update: Mon 09 Jun 2025 08:00:40 +0000
Files and hashes: 1: 796f0rlncfK0yTtaD6CkZkwRT4s.roa (hash: AKdoTIc+C1lS10KwNLkNmoqljPTVyyEtoThk5e5KIYw=)
2: IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl (hash: CBgZojIfhn6+BBPA/3tvh7HewnMGQnQLLYk1JsExlck=)
3: a2o1g4APvxlN0jKtdCAcLm-d9r4.roa (hash: 6oo0KVFeY/9ZKOW6xWsGvfnXs8r9cGNTgACNAHR8fOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:56:3d:30:ac:7f:87:47:51:45:28:38:7a:69:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Validity
Not Before: Jun 8 08:00:40 2025 GMT
Not After : Jun 9 08:00:40 2025 GMT
Subject: CN=7979fd125b1567e250e2ef740ecbbed959dbe307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:32:cc:d0:80:46:2e:f0:3d:65:c7:19:36:
61:9d:6e:e3:f6:0a:a0:ce:43:15:b1:08:44:bd:1a:
de:8b:5b:74:05:a8:67:53:22:27:29:f2:62:90:a2:
67:7e:46:2f:61:24:e8:4f:3e:ee:a6:b9:ca:db:78:
e9:01:57:4e:ac:60:34:b5:9c:8e:36:ec:1c:e0:37:
68:35:17:d9:c9:63:77:92:ed:a1:14:8f:a8:1a:3e:
45:26:1b:68:2e:94:91:95:7b:ad:e8:1b:ab:e6:5e:
c7:73:84:d9:11:12:29:ce:60:2f:d0:32:ff:af:3b:
c2:73:86:29:fb:da:46:1e:19:b4:61:0d:b6:ed:f3:
cf:df:91:d2:d5:53:b5:c4:3b:20:4d:9d:6c:26:5a:
a2:14:13:3c:9b:ef:32:33:e2:8c:00:e3:9b:1e:ea:
f0:8a:32:68:bd:a6:d7:14:82:45:8c:be:a5:d8:70:
f9:19:38:fd:95:26:31:a8:a1:21:f7:33:c2:02:76:
ba:14:b3:26:2b:d8:ff:46:b2:d3:8c:38:71:8e:b5:
2d:53:de:58:20:c1:1c:46:d9:5c:da:dc:81:88:da:
f1:21:e9:31:ba:d8:3f:73:28:76:1f:0e:87:f4:f2:
71:63:37:f9:cf:f1:84:b9:68:84:1f:0a:36:74:93:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:79:FD:12:5B:15:67:E2:50:E2:EF:74:0E:CB:BE:D9:59:DB:E3:07
X509v3 Authority Key Identifier:
keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:10:57:f5:26:93:51:29:5a:7b:f7:d8:43:f6:d2:3a:17:7b:
ab:46:16:44:2a:46:8c:9a:39:57:3c:97:d4:a5:62:49:d6:6d:
81:89:7d:6f:f4:1a:e5:4a:38:dc:d2:3e:32:99:c8:f0:05:29:
12:80:56:31:ed:b3:8f:5d:2b:6b:b9:a6:40:f1:23:31:76:2b:
e9:00:d1:a1:0b:e1:19:9c:a6:b8:fe:c4:df:c3:04:ac:59:5f:
4c:be:6d:d7:3f:88:9f:60:75:a9:4c:0d:b9:ad:40:a3:89:fb:
5b:dd:81:ac:93:44:ad:54:65:1b:8d:ee:ff:7a:62:f9:59:ea:
0d:11:38:08:d3:c2:8e:1c:f5:47:19:0f:45:aa:8d:83:69:29:
25:fc:19:b5:db:c8:b6:93:05:eb:1f:50:b8:0f:15:61:9e:7e:
1f:e5:09:48:6b:80:15:3d:20:78:c2:59:ab:f0:8f:f0:82:b3:
7e:c5:a2:a7:33:d0:39:23:20:91:2b:b2:e9:d8:89:98:0b:ce:
11:68:c7:2b:d6:cc:1a:9c:fc:d9:b4:a3:db:ed:01:a7:36:29:
71:71:e4:86:76:ed:2d:12:4a:20:14:ff:6d:bd:61:7d:6c:d8:
c4:0d:56:08:08:7f:82:01:cf:4a:e7:6a:b8:fa:f4:e9:d3:d4:
1e:c1:7a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:37:18 2025 by rpki-client