
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3872cf-aa59-4c98-b7a3-c1b10239dd58/1/IgTxXPMNc4SLB038rCYTgAYVatQ.mft
File: IgTxXPMNc4SLB038rCYTgAYVatQ.mft (raw, json)
Hash identifier: 0UOMeK6y3pK8EkjJoFEqas7a62ZKUrcSbAb5eNi/oXk=
Subject key identifier: 25:6B:99:09:34:D8:64:C5:78:F7:8C:75:C9:88:76:05:E6:C8:CC:9C
Authority key identifier: 22:04:F1:5C:F3:0D:73:84:8B:07:4D:FC:AC:26:13:80:06:15:6A:D4
Certificate issuer: /CN=2204f15cf30d73848b074dfcac26138006156ad4
Certificate serial: 0197469EB2D37FEA346BAB12A07599A31A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgTxXPMNc4SLB038rCYTgAYVatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3872cf-aa59-4c98-b7a3-c1b10239dd58/1/IgTxXPMNc4SLB038rCYTgAYVatQ.mft
Manifest number: 0C88
Signing time: Fri 06 Jun 2025 19:01:34 +0000
Manifest this update: Fri 06 Jun 2025 19:01:34 +0000
Manifest next update: Sat 07 Jun 2025 19:01:34 +0000
Files and hashes: 1: IgTxXPMNc4SLB038rCYTgAYVatQ.crl (hash: UDjlmBjV35tiM2G51SSyUCQwXAvAs9n3HFkJsnfo/yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3872cf-aa59-4c98-b7a3-c1b10239dd58/1/IgTxXPMNc4SLB038rCYTgAYVatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3872cf-aa59-4c98-b7a3-c1b10239dd58/1/IgTxXPMNc4SLB038rCYTgAYVatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgTxXPMNc4SLB038rCYTgAYVatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:b2:d3:7f:ea:34:6b:ab:12:a0:75:99:a3:1a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2204f15cf30d73848b074dfcac26138006156ad4
Validity
Not Before: Jun 6 19:01:34 2025 GMT
Not After : Jun 7 19:01:34 2025 GMT
Subject: CN=256b990934d864c578f78c75c9887605e6c8cc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bd:2a:03:50:9c:73:8d:b6:17:64:d4:73:1e:
d0:b9:c4:c9:37:7e:a9:83:f0:ee:8e:62:b7:1c:d3:
6f:e0:47:f2:ae:ee:48:35:34:34:95:78:e5:c5:94:
74:bf:9b:e6:07:34:51:50:e0:37:79:f0:64:79:ea:
71:70:54:33:01:17:1a:77:fc:98:8c:2e:f6:58:4e:
48:d7:c8:ba:66:11:01:9a:86:af:34:43:b1:a8:ad:
f7:35:a1:17:96:6a:27:2f:21:c0:21:a5:f3:ee:6d:
b6:d3:66:20:67:c9:87:c2:c8:3c:16:fa:aa:cc:37:
5b:0f:53:00:56:9e:ad:24:24:5f:80:27:77:94:0b:
8c:7c:0a:de:81:40:bc:12:e4:af:de:a3:b6:38:c1:
82:26:b1:3c:59:92:66:75:6b:1a:03:ea:25:a8:df:
01:b9:84:15:c7:77:5f:ca:a9:64:1e:83:f1:6e:dd:
e3:5d:19:61:85:2b:4e:57:9c:44:28:c9:dc:c8:30:
2b:ca:59:4c:d8:6b:57:f2:67:e3:21:1a:ef:bc:d2:
98:a3:0e:6e:61:4f:d3:3a:cd:84:46:b0:76:60:8c:
31:c8:2b:48:d2:6d:60:ef:7a:81:ce:86:9b:e7:33:
7b:2c:83:fe:dc:e3:de:f9:f8:58:56:f5:10:8a:64:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6B:99:09:34:D8:64:C5:78:F7:8C:75:C9:88:76:05:E6:C8:CC:9C
X509v3 Authority Key Identifier:
keyid:22:04:F1:5C:F3:0D:73:84:8B:07:4D:FC:AC:26:13:80:06:15:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgTxXPMNc4SLB038rCYTgAYVatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3872cf-aa59-4c98-b7a3-c1b10239dd58/1/IgTxXPMNc4SLB038rCYTgAYVatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3872cf-aa59-4c98-b7a3-c1b10239dd58/1/IgTxXPMNc4SLB038rCYTgAYVatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:15:12:12:78:b0:fa:a8:60:9e:15:7c:bd:c4:95:83:0c:d8:
ad:2d:34:02:0e:61:6e:81:db:11:dd:f9:7a:85:a9:10:bc:74:
0f:b2:c6:b0:25:1d:2f:e4:3c:d2:f9:e1:ab:f5:00:73:96:c4:
2f:a6:d6:07:b1:a8:2d:33:9a:30:12:1a:09:a0:11:a7:9f:02:
6b:5f:91:2b:64:de:ee:a1:fd:d7:f5:fe:3c:41:1b:9c:fb:a8:
6e:7d:67:e6:43:d1:aa:46:b7:87:e2:db:d9:63:14:27:08:e3:
b8:63:60:49:39:05:b4:ec:99:25:9f:ba:5f:4e:46:60:31:65:
9c:ac:db:a0:d1:05:77:3f:50:7e:0c:b9:8f:97:c9:7b:42:8d:
3e:52:8b:11:62:08:f1:c7:a7:91:c4:60:b1:40:a6:ad:8c:41:
ad:5c:00:b4:7f:87:a5:d6:7b:d5:97:49:05:35:17:68:62:ef:
53:0a:9c:3c:8c:a0:e0:d1:4d:e4:c6:80:24:b5:6d:7c:4b:b1:
87:39:74:34:fa:fd:8f:1d:45:44:d4:ae:6c:b4:4f:ca:f1:35:
6c:d9:f8:8a:ce:33:ff:0c:b7:fb:d0:3b:a7:aa:87:dd:43:ae:
b5:68:59:bc:ee:73:98:bf:6e:09:24:ff:d1:19:49:a9:49:55:
93:87:a2:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnrLTf+o0a6sSoHWZoxqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMDRmMTVjZjMwZDczODQ4YjA3NGRmY2FjMjYxMzgwMDYx
NTZhZDQwHhcNMjUwNjA2MTkwMTM0WhcNMjUwNjA3MTkwMTM0WjAzMTEwLwYDVQQD
EygyNTZiOTkwOTM0ZDg2NGM1NzhmNzhjNzVjOTg4NzYwNWU2YzhjYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4b0qA1Ccc422F2TUcx7QucTJN36p
g/DujmK3HNNv4Efyru5INTQ0lXjlxZR0v5vmBzRRUOA3efBkeepxcFQzARcad/yY
jC72WE5I18i6ZhEBmoavNEOxqK33NaEXlmonLyHAIaXz7m2202YgZ8mHwsg8Fvqq
zDdbD1MAVp6tJCRfgCd3lAuMfAregUC8EuSv3qO2OMGCJrE8WZJmdWsaA+olqN8B
uYQVx3dfyqlkHoPxbt3jXRlhhStOV5xEKMncyDAryllM2GtX8mfjIRrvvNKYow5u
YU/TOs2ERrB2YIwxyCtI0m1g73qBzoab5zN7LIP+3OPe+fhYVvUQimSz3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVrmQk02GTFePeMdcmIdgXmyMycMB8GA1UdIwQY
MBaAFCIE8VzzDXOEiwdN/KwmE4AGFWrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWdUeFhQTU5jNFNMQjAzOHJDWVRnQVlWYXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zODcyY2YtYWE1OS00Yzk4LWI3YTMt
YzFiMTAyMzlkZDU4LzEvSWdUeFhQTU5jNFNMQjAzOHJDWVRnQVlWYXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zODcyY2YtYWE1OS00Yzk4LWI3YTMtYzFiMTAyMzlkZDU4
LzEvSWdUeFhQTU5jNFNMQjAzOHJDWVRnQVlWYXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRUSEniw
+qhgnhV8vcSVgwzYrS00Ag5hboHbEd35eoWpELx0D7LGsCUdL+Q80vnhq/UAc5bE
L6bWB7GoLTOaMBIaCaARp58Ca1+RK2Te7qH91/X+PEEbnPuobn1n5kPRqka3h+Lb
2WMUJwjjuGNgSTkFtOyZJZ+6X05GYDFlnKzboNEFdz9Qfgy5j5fJe0KNPlKLEWII
8cenkcRgsUCmrYxBrVwAtH+HpdZ71ZdJBTUXaGLvUwqcPIyg4NFN5MaAJLVtfEux
hzl0NPr9jx1FRNSubLRPyvE1bNn4is4z/wy3+9A7p6qH3UOutWhZvO5zmL9uCST/
0RlJqUlVk4eicA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:32 2025 by rpki-client