Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier: jL4I3YedCy0Rq3XQh5rEDJYPvQMoGVuyEQ9JrrWqP+c=
Subject key identifier: 00:1D:4E:AC:7D:78:62:99:D9:AB:85:EE:5F:AE:6C:60:4E:09:D1:30
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 019748C340882636E98EF96E2BD9EE3759F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number: 1088
Signing time: Sat 07 Jun 2025 05:00:45 +0000
Manifest this update: Sat 07 Jun 2025 05:00:45 +0000
Manifest next update: Sun 08 Jun 2025 05:00:45 +0000
Files and hashes: 1: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: eqMu/PaLzD7ofq1LkliPMa89qFmqGfbZKErTh4nBu70=)
2: p1lTEKoE5j8hz4v8NDCkph3vHZg.roa (hash: MpUjtf+IJwp4Op1WMMfO/E6/RTTXrzH8PWzDLygUE3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:40:88:26:36:e9:8e:f9:6e:2b:d9:ee:37:59:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Jun 7 05:00:45 2025 GMT
Not After : Jun 8 05:00:45 2025 GMT
Subject: CN=001d4eac7d786299d9ab85ee5fae6c604e09d130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b3:42:49:7b:51:9e:3a:58:b3:73:ba:b2:37:
d5:80:26:91:a4:1b:de:fb:21:de:cc:8d:17:b9:d5:
21:21:37:39:84:44:88:7e:9c:02:12:12:3f:96:05:
ad:07:6d:4a:73:00:97:c4:14:01:54:3f:1e:ff:03:
4e:bb:c5:b1:36:ad:95:c6:61:ad:d4:6e:e4:e2:9c:
ac:33:c3:d1:1c:b5:70:22:f6:32:3f:2f:ab:eb:71:
ff:64:68:6f:db:0b:b8:63:99:06:71:9c:7e:79:85:
e2:79:d2:14:15:c6:ac:0c:8c:e9:55:38:2f:e5:40:
80:88:43:06:7c:42:bc:c2:fc:0a:07:41:d7:b0:55:
74:f6:8d:8e:23:8b:07:12:fe:ac:76:3b:73:97:d3:
5c:67:50:2c:cf:30:51:03:0e:74:6e:35:dc:67:48:
22:49:55:2e:3b:b5:f8:95:3a:9d:a9:e8:9e:b5:74:
d6:0e:51:90:5c:fc:dd:87:2f:72:14:00:67:8e:2b:
15:29:2a:b5:35:4b:ea:4a:47:32:2f:ca:f1:1b:02:
c5:e1:0d:c0:7f:43:e4:fe:7c:5b:03:f7:4e:5a:2f:
f2:cf:7f:e7:aa:7a:d1:14:6a:4b:a4:6b:77:43:26:
50:03:5b:02:9c:17:43:d1:35:09:a5:cb:58:f0:5e:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1D:4E:AC:7D:78:62:99:D9:AB:85:EE:5F:AE:6C:60:4E:09:D1:30
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:70:96:e9:ca:00:7c:b3:63:17:c4:69:66:09:f7:2c:83:35:
49:86:cc:43:cb:bb:10:e1:bf:e7:e2:7a:08:e4:0f:cb:f3:ce:
7e:1c:92:13:14:32:db:a0:64:9b:19:1b:2c:ce:f1:2c:18:65:
2d:0e:fc:57:8d:6e:13:60:14:87:d7:c3:43:d7:64:96:6d:8f:
ff:d4:3b:fa:20:7e:63:a7:bb:2c:c9:10:1e:44:6b:90:22:8c:
76:c7:77:18:49:38:1d:d8:0a:7a:3e:e2:d1:3d:e9:68:4d:7c:
78:04:25:e5:4a:19:69:e6:85:bd:62:a3:49:b3:3a:e2:bc:06:
b1:df:a2:e8:08:63:cc:89:ef:6b:bd:af:32:3e:5a:d1:5c:6a:
f7:ce:12:4d:1a:fa:a7:c0:6d:09:1e:ce:1e:2b:57:ce:25:c2:
cb:93:bc:0e:de:31:3b:fb:6b:7b:d1:b2:26:7e:e7:b4:ed:9d:
25:5a:ff:e1:59:3a:77:fd:cf:6e:66:fe:c7:17:0a:92:b8:a8:
da:c7:2d:9a:c8:fc:2f:7a:a2:12:5e:ac:b0:ef:46:fe:06:26:
4e:ef:64:31:e7:42:c3:13:61:88:f3:eb:d9:10:1d:ec:3f:16:
e0:ee:1b:a8:f8:c4:b0:42:05:a0:d5:00:e4:b2:8a:50:45:2f:
66:4b:d6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:40 2025 by rpki-client