Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json)
Hash identifier: 4qasyhJIuk6UJ7bCMJi9WZBzoGyPpgIwrv+VETVeFJk=
Subject key identifier: 42:D2:5D:C1:72:2D:C1:98:BC:93:F4:F8:2C:A6:A0:4F:A4:D6:C5:42
Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Certificate serial: 019750462EF2EBF9D6F72F15A59DB940FE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
Manifest number: 0847
Signing time: Sun 08 Jun 2025 16:01:06 +0000
Manifest this update: Sun 08 Jun 2025 16:01:06 +0000
Manifest next update: Mon 09 Jun 2025 16:01:06 +0000
Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: 9sPgq3crEvjku0ASf7vo1NDv1Q2kQB2eHOq5scxh3Vc=)
2: tYexsQdQ-bwy8SQ16CJTCKZPCX8.roa (hash: 4iRrkMtR/RQqmCmFoKMuS1dWTtpIHivuyEUKzRu+I4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:2e:f2:eb:f9:d6:f7:2f:15:a5:9d:b9:40:fe:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Validity
Not Before: Jun 8 16:01:06 2025 GMT
Not After : Jun 9 16:01:06 2025 GMT
Subject: CN=42d25dc1722dc198bc93f4f82ca6a04fa4d6c542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:69:58:20:1b:3d:f5:d3:8b:91:9e:16:b0:9b:
07:9b:fe:e6:34:45:c8:47:12:58:1d:d6:97:d1:20:
ab:e9:b6:f9:aa:0b:19:b5:eb:93:65:52:87:c7:c9:
d9:f5:e4:e2:8d:67:c8:b7:6d:9b:e9:6e:2f:01:d4:
56:de:65:79:a0:11:0b:00:9d:d2:98:b2:a9:ed:ba:
e1:e2:04:fa:ba:20:fb:4b:0a:69:f6:d5:a4:12:f5:
b0:3d:cd:c2:27:b7:7e:ff:48:d0:98:13:8b:3d:63:
e4:50:99:d6:d1:f0:9e:b5:3a:d6:f9:ac:ff:79:b4:
07:20:39:4f:f1:e2:33:dc:09:38:1d:7d:bf:e0:b6:
d3:7d:ae:20:71:10:08:3a:47:82:39:95:87:cc:5d:
36:d0:67:30:08:27:b1:26:69:3e:f0:2b:38:d6:0f:
86:a2:08:65:76:fa:a0:fb:71:aa:ca:7a:22:8c:aa:
94:51:5b:43:c4:ab:4e:57:75:34:3b:2c:d8:8d:0a:
18:8f:ec:f1:9b:11:4b:49:de:2e:14:2b:b1:ed:7a:
32:58:73:e0:52:39:ab:37:a6:59:be:e7:9f:fe:31:
e7:8f:47:8d:92:5b:e0:7a:b5:05:47:d1:04:55:82:
85:14:b5:7d:fe:d2:fc:e0:eb:fa:07:f9:85:4a:22:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D2:5D:C1:72:2D:C1:98:BC:93:F4:F8:2C:A6:A0:4F:A4:D6:C5:42
X509v3 Authority Key Identifier:
keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b8:1b:f2:fb:6a:51:a2:7f:47:8b:49:a4:17:52:89:22:46:
ac:e7:f5:62:e3:3f:77:ba:c7:98:ec:ef:66:65:a9:fb:3b:fb:
3c:3c:c7:cb:ed:b2:5f:3f:f5:b3:cf:ba:cc:fe:12:f8:d8:fd:
d4:d0:93:aa:69:15:93:bf:fa:0d:64:89:dc:d1:57:de:ed:f1:
9b:51:68:5f:49:23:55:e2:34:b7:cb:d4:19:9e:08:bb:a2:57:
ba:2e:82:d6:13:fa:1a:e8:83:cf:2a:9b:f5:12:87:26:a2:5d:
14:f5:9d:0f:11:23:f7:81:81:d5:7a:b2:41:31:90:74:27:7f:
b9:4d:2d:a2:4e:6e:a0:17:7f:37:92:79:6e:a1:e1:1a:b1:ee:
66:07:7f:1d:1a:3e:6c:e4:25:d1:b3:0b:27:0d:73:1c:75:67:
88:e5:79:72:1a:38:45:cf:f7:51:87:0d:40:7d:6f:8e:0b:9d:
74:25:e8:8f:a8:ce:bb:a8:5e:c2:2a:5b:ab:90:47:b9:2a:e6:
20:a5:aa:48:0e:23:74:e6:da:3e:89:fa:8e:d8:10:7e:49:2b:
62:1b:27:70:0b:e7:18:5a:ef:f4:ca:19:5c:9f:47:dc:55:35:
fe:e5:e9:83:23:24:60:62:a0:4f:01:a8:db:7b:e8:0f:f0:96:
3c:b3:49:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:59:03 2025 by rpki-client