Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.mft
File: IGcM4wRP1TINnHYtX5viba8wI-w.mft (raw, json)
Hash identifier: x4LV6hbQG5CKGZB4ibXtqFOCUiXxrO982iA/UQtKspI=
Subject key identifier: A6:F4:BC:A0:5E:8E:88:D3:3A:96:C3:AB:EC:4F:C9:55:28:97:93:5F
Authority key identifier: 20:67:0C:E3:04:4F:D5:32:0D:9C:76:2D:5F:9B:E2:6D:AF:30:23:EC
Certificate issuer: /CN=20670ce3044fd5320d9c762d5f9be26daf3023ec
Certificate serial: 01965D2819A1D98B3A3CED4C88B42FC21F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGcM4wRP1TINnHYtX5viba8wI-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.mft
Manifest number: 97
Signing time: Tue 22 Apr 2025 11:00:31 +0000
Manifest this update: Tue 22 Apr 2025 11:00:31 +0000
Manifest next update: Wed 23 Apr 2025 11:00:31 +0000
Files and hashes: 1: BtHL3XHEieb1gWKcjsadU5qjZac.roa (hash: 1jFZs/t3ujMVEG8CZ4mhr6EfSszS7y3HVxTcxs6WBzE=)
2: IGcM4wRP1TINnHYtX5viba8wI-w.crl (hash: qBWBPj5yVIhIQfMZ3EaqPHN+Ty9XMdyBN79WGNO3owY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGcM4wRP1TINnHYtX5viba8wI-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:28:19:a1:d9:8b:3a:3c:ed:4c:88:b4:2f:c2:1f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20670ce3044fd5320d9c762d5f9be26daf3023ec
Validity
Not Before: Apr 22 11:00:31 2025 GMT
Not After : Apr 23 11:00:31 2025 GMT
Subject: CN=a6f4bca05e8e88d33a96c3abec4fc9552897935f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:57:53:39:45:b7:bf:fa:47:2d:0f:25:4d:
67:f9:41:26:41:f9:aa:30:5e:eb:67:73:9f:59:73:
20:30:59:4b:10:63:db:d5:76:0b:b3:7d:8e:74:f8:
42:71:07:a5:a3:2c:f9:bb:9a:3e:90:06:1b:47:d7:
0f:12:c9:4b:d0:fb:89:02:24:cf:46:c3:e7:3c:76:
e0:66:b1:1e:17:ac:43:92:e0:c0:08:9d:91:65:f7:
84:f8:bb:a2:74:bf:4d:2c:50:5a:44:fb:68:f1:b4:
99:bb:70:84:de:a1:dc:6f:39:97:a9:42:41:d5:d9:
90:9c:d2:7f:32:cf:7d:20:a3:45:bd:45:1f:fd:a2:
00:c3:41:4f:e3:a5:66:4c:28:16:fe:d3:d9:07:35:
8e:9b:1e:0d:d3:dc:8f:c5:ea:7b:ff:64:67:df:9a:
c6:28:ba:3f:a4:2b:8b:9f:15:26:29:3a:d8:b8:02:
98:99:57:bf:4f:d7:74:3a:b7:4c:a0:5f:9c:cf:9e:
10:b9:1e:93:5b:90:c1:a0:38:d4:4c:b1:d2:af:9a:
91:3c:91:3a:a2:df:e6:cb:fa:4f:e4:d4:8b:c6:be:
23:74:7a:8a:91:83:2f:84:7f:2d:eb:d6:16:f4:17:
7f:2a:79:fc:91:24:a0:46:72:fa:9a:da:51:2c:cd:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F4:BC:A0:5E:8E:88:D3:3A:96:C3:AB:EC:4F:C9:55:28:97:93:5F
X509v3 Authority Key Identifier:
keyid:20:67:0C:E3:04:4F:D5:32:0D:9C:76:2D:5F:9B:E2:6D:AF:30:23:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGcM4wRP1TINnHYtX5viba8wI-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:89:53:73:5a:35:33:66:f7:ea:5a:a2:2d:42:c2:76:5e:60:
8d:bc:da:9c:ca:28:e3:84:06:23:31:34:ed:a0:74:6e:ab:68:
94:e2:91:cd:74:72:67:20:d9:0a:9b:6b:3b:50:ba:6f:fb:c7:
cc:28:fb:ae:32:d7:3c:9f:61:db:84:54:08:fd:44:dc:bc:75:
35:55:aa:db:71:b3:97:23:4d:00:39:92:bc:83:47:3a:02:11:
8d:b3:0f:f1:f4:dc:45:54:a5:93:3a:42:0a:70:4b:f2:01:d0:
0b:b3:e8:2a:92:3a:a0:f9:00:c4:a0:38:28:29:08:59:71:31:
92:80:53:99:0e:70:97:0d:1f:63:5e:c5:cf:e1:8e:a4:3c:87:
00:74:01:ad:11:fe:e6:c2:aa:ff:fe:63:b8:6c:bb:b3:17:24:
4b:e0:2d:35:15:81:2c:a7:90:41:14:db:c6:b7:06:92:73:8d:
8b:c2:f9:c4:28:a7:f9:03:ea:bc:ce:b7:c3:ec:89:f6:70:f5:
51:84:23:64:5c:55:7b:57:f9:9a:16:b7:4b:e1:0b:55:ed:0f:
d5:da:ec:be:b0:3d:3e:fe:9e:0c:b4:f6:e2:2a:7e:84:1a:bc:
93:33:00:9d:b1:30:58:70:74:12:70:7b:9c:29:57:16:41:bf:
5f:1f:27:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdKBmh2Ys6PO1MiLQvwh98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNjcwY2UzMDQ0ZmQ1MzIwZDljNzYyZDVmOWJlMjZkYWYz
MDIzZWMwHhcNMjUwNDIyMTEwMDMxWhcNMjUwNDIzMTEwMDMxWjAzMTEwLwYDVQQD
EyhhNmY0YmNhMDVlOGU4OGQzM2E5NmMzYWJlYzRmYzk1NTI4OTc5MzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydtXUzlFt7/6Ry0PJU1n+UEmQfmq
MF7rZ3OfWXMgMFlLEGPb1XYLs32OdPhCcQeloyz5u5o+kAYbR9cPEslL0PuJAiTP
RsPnPHbgZrEeF6xDkuDACJ2RZfeE+LuidL9NLFBaRPto8bSZu3CE3qHcbzmXqUJB
1dmQnNJ/Ms99IKNFvUUf/aIAw0FP46VmTCgW/tPZBzWOmx4N09yPxep7/2Rn35rG
KLo/pCuLnxUmKTrYuAKYmVe/T9d0OrdMoF+cz54QuR6TW5DBoDjUTLHSr5qRPJE6
ot/my/pP5NSLxr4jdHqKkYMvhH8t69YW9Bd/Knn8kSSgRnL6mtpRLM055wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb0vKBejojTOpbDq+xPyVUol5NfMB8GA1UdIwQY
MBaAFCBnDOMET9UyDZx2LV+b4m2vMCPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUdjTTR3UlAxVElObkhZdFg1dmliYTh3SS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83ZjFjMjUtZDUwNi00YWU1LWE1MWQt
YzFjODE1Yjk1NzI2LzEvSUdjTTR3UlAxVElObkhZdFg1dmliYTh3SS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83ZjFjMjUtZDUwNi00YWU1LWE1MWQtYzFjODE1Yjk1NzI2
LzEvSUdjTTR3UlAxVElObkhZdFg1dmliYTh3SS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIlTc1o1
M2b36lqiLULCdl5gjbzanMoo44QGIzE07aB0bqtolOKRzXRyZyDZCptrO1C6b/vH
zCj7rjLXPJ9h24RUCP1E3Lx1NVWq23GzlyNNADmSvINHOgIRjbMP8fTcRVSlkzpC
CnBL8gHQC7PoKpI6oPkAxKA4KCkIWXExkoBTmQ5wlw0fY17Fz+GOpDyHAHQBrRH+
5sKq//5juGy7sxckS+AtNRWBLKeQQRTbxrcGknONi8L5xCin+QPqvM63w+yJ9nD1
UYQjZFxVe1f5mha3S+ELVe0P1drsvrA9Pv6eDLT24ip+hBq8kzMAnbEwWHB0EnB7
nClXFkG/Xx8nPQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 14:27:19 2025 by rpki-client