Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
File: IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft (raw, json)
Hash identifier: J3CgMP4mir1PwK3IliubgORiwKG4QS/U4CQBqQQJga8=
Subject key identifier: F7:D8:B5:E4:9E:34:E3:3F:02:FB:D6:D1:94:CF:CC:06:D0:24:29:04
Authority key identifier: 22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
Certificate issuer: /CN=220c904d430e4f999d147e214515e9cba7ac7e84
Certificate serial: 01974D7C06021F97E79CBE48597D6BF2C262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
Manifest number: 1511
Signing time: Sun 08 Jun 2025 03:01:03 +0000
Manifest this update: Sun 08 Jun 2025 03:01:03 +0000
Manifest next update: Mon 09 Jun 2025 03:01:03 +0000
Files and hashes: 1: IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl (hash: spDWA/SCgIwYpdPtC+GO4zrnBSaoqEwhUkrKgvHZEH0=)
2: odQGUN-Kmc4e9-CaRDN5nSDsv3c.roa (hash: 5YkjQrGLAuUCDKfkmJYVY1GAYOevmrtsFzJdDn6fqmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:06:02:1f:97:e7:9c:be:48:59:7d:6b:f2:c2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220c904d430e4f999d147e214515e9cba7ac7e84
Validity
Not Before: Jun 8 03:01:03 2025 GMT
Not After : Jun 9 03:01:03 2025 GMT
Subject: CN=f7d8b5e49e34e33f02fbd6d194cfcc06d0242904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:d6:74:ef:e1:8d:55:f4:b9:cf:c0:8b:79:
08:62:d3:09:15:ce:e9:dd:1c:76:32:9c:73:22:33:
cf:51:80:5a:1e:40:d0:16:ea:26:b0:b0:65:25:b3:
77:76:e2:6b:32:e3:ab:1b:76:af:6a:6f:c5:66:ad:
0a:95:ef:e1:ca:d8:0b:c6:94:65:e4:7a:d8:8b:e8:
38:13:2c:bb:a3:dc:1d:59:84:da:38:62:02:92:4c:
8b:1e:30:54:14:83:e7:f3:18:d4:19:12:43:9f:00:
f6:3a:4e:42:d6:8b:50:29:10:c5:be:c0:ab:63:f5:
da:96:77:aa:7a:ab:bd:0d:53:eb:df:b7:9f:00:17:
65:01:88:48:70:65:53:cb:82:fd:7b:bd:20:09:dc:
50:e7:82:97:b5:d0:0e:32:36:99:6f:7d:61:f5:7a:
59:d2:f7:b9:ea:6b:a4:ee:62:e0:e0:64:cc:c3:9c:
8a:6b:10:74:d8:6c:9a:e1:6e:fb:a9:8b:80:bd:64:
47:44:25:5f:48:da:05:e2:0e:48:d4:db:22:02:6b:
ca:0c:11:c2:0b:03:3c:6e:13:19:7c:96:26:5d:b7:
c6:86:7a:11:1d:6c:47:9f:4b:08:57:c6:ee:76:df:
85:ad:1a:bb:13:44:e4:ce:ed:9c:93:b2:61:44:95:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D8:B5:E4:9E:34:E3:3F:02:FB:D6:D1:94:CF:CC:06:D0:24:29:04
X509v3 Authority Key Identifier:
keyid:22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:71:d2:69:bd:5c:d8:7a:50:63:e0:dd:00:a0:46:db:93:bb:
4d:41:be:7f:7f:f6:c3:c9:0f:f2:2d:6c:cc:fd:50:8e:ac:20:
c1:67:54:be:47:77:13:5e:90:db:0d:cb:91:72:02:a7:85:e9:
21:39:68:06:0e:99:2f:2b:49:47:36:d3:9d:1a:ea:9b:ba:07:
84:da:1a:53:7e:ed:ab:e4:f1:98:a8:24:65:b9:b0:39:97:8f:
63:85:87:b1:af:16:a4:84:92:91:f5:b8:b1:9c:26:ef:c0:e3:
a0:8d:1e:0e:ba:27:83:c4:b5:c4:0a:8a:bb:69:4b:e0:65:15:
db:53:62:96:92:97:97:80:49:12:00:a7:a2:5b:7b:e5:f2:4f:
b3:88:60:c1:95:ef:95:95:3e:90:3f:ef:2c:51:51:99:0f:a1:
70:ba:01:33:e5:f9:b2:15:37:9a:22:9a:ed:a0:bd:05:c4:04:
b1:78:0a:7e:97:95:a4:13:39:28:83:44:8b:3f:84:e9:aa:b5:
b5:3d:19:cd:db:9b:87:7d:6e:32:d2:ad:58:d8:c2:0f:31:86:
63:76:2b:a2:74:d0:4b:d7:1f:46:61:77:3e:6e:64:bd:bc:07:
10:76:7f:b9:67:83:e8:8e:62:90:7d:b2:bc:f6:bb:a0:6a:ac:
cc:ae:2e:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNfAYCH5fnnL5IWX1r8sJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMGM5MDRkNDMwZTRmOTk5ZDE0N2UyMTQ1MTVlOWNiYTdh
YzdlODQwHhcNMjUwNjA4MDMwMTAzWhcNMjUwNjA5MDMwMTAzWjAzMTEwLwYDVQQD
EyhmN2Q4YjVlNDllMzRlMzNmMDJmYmQ2ZDE5NGNmY2MwNmQwMjQyOTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHzWdO/hjVX0uc/Ai3kIYtMJFc7p
3Rx2MpxzIjPPUYBaHkDQFuomsLBlJbN3duJrMuOrG3avam/FZq0Kle/hytgLxpRl
5HrYi+g4Eyy7o9wdWYTaOGICkkyLHjBUFIPn8xjUGRJDnwD2Ok5C1otQKRDFvsCr
Y/Xalneqequ9DVPr37efABdlAYhIcGVTy4L9e70gCdxQ54KXtdAOMjaZb31h9XpZ
0ve56muk7mLg4GTMw5yKaxB02Gya4W77qYuAvWRHRCVfSNoF4g5I1NsiAmvKDBHC
CwM8bhMZfJYmXbfGhnoRHWxHn0sIV8budt+FrRq7E0Tkzu2ck7JhRJUwXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfYteSeNOM/AvvW0ZTPzAbQJCkEMB8GA1UdIwQY
MBaAFCIMkE1DDk+ZnRR+IUUV6cunrH6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWd5UVRVTU9UNW1kRkg0aFJSWHB5NmVzZm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80YjA2ZDMtYTU4Yi00YTI5LWI2OGQt
NzY0ZGUzYjdiZjNkLzEvSWd5UVRVTU9UNW1kRkg0aFJSWHB5NmVzZm9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80YjA2ZDMtYTU4Yi00YTI5LWI2OGQtNzY0ZGUzYjdiZjNk
LzEvSWd5UVRVTU9UNW1kRkg0aFJSWHB5NmVzZm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHHSab1c
2HpQY+DdAKBG25O7TUG+f3/2w8kP8i1szP1QjqwgwWdUvkd3E16Q2w3LkXICp4Xp
ITloBg6ZLytJRzbTnRrqm7oHhNoaU37tq+TxmKgkZbmwOZePY4WHsa8WpISSkfW4
sZwm78DjoI0eDrong8S1xAqKu2lL4GUV21NilpKXl4BJEgCnolt75fJPs4hgwZXv
lZU+kD/vLFFRmQ+hcLoBM+X5shU3miKa7aC9BcQEsXgKfpeVpBM5KINEiz+E6aq1
tT0Zzdubh31uMtKtWNjCDzGGY3YronTQS9cfRmF3Pm5kvbwHEHZ/uWeD6I5ikH2y
vPa7oGqszK4uHg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:25:52 2025 by rpki-client