Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier: Tx0LU10/t/0YNUQMSWAsoczTJVnvj9ODj+SL3Ur1imU=
Subject key identifier: BE:C9:33:C5:64:68:FB:36:85:B7:5A:87:99:21:97:95:0A:9E:D2:34
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 01959073ACE2B1512A7579C500CC3B758917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number: 0FA4
Signing time: Thu 13 Mar 2025 17:00:54 +0000
Manifest this update: Thu 13 Mar 2025 17:00:54 +0000
Manifest next update: Fri 14 Mar 2025 17:00:54 +0000
Files and hashes: 1: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: qwTrJ7FDIfNefIRkhfHgTpjbEFh17SsJOwDSiXljqtc=)
2: p1lTEKoE5j8hz4v8NDCkph3vHZg.roa (hash: MpUjtf+IJwp4Op1WMMfO/E6/RTTXrzH8PWzDLygUE3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:73:ac:e2:b1:51:2a:75:79:c5:00:cc:3b:75:89:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Mar 13 17:00:54 2025 GMT
Not After : Mar 14 17:00:54 2025 GMT
Subject: CN=bec933c56468fb3685b75a87992197950a9ed234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:aa:13:f7:06:4b:84:94:cd:bb:6e:72:2f:
a2:e6:2d:6b:1b:f1:5d:a5:4b:74:68:10:af:42:34:
fc:a3:65:fa:80:92:e3:39:0e:11:3d:88:c8:b6:04:
80:03:a4:1c:07:67:50:90:7b:34:6c:7d:87:de:eb:
83:a1:4d:1b:96:d2:2d:f1:2c:77:23:09:7f:c8:70:
02:ae:81:4f:74:80:89:2c:f9:1c:46:74:1c:62:15:
39:90:bd:47:5d:50:0e:00:e2:18:8b:68:77:44:ea:
dd:d7:d4:5d:29:73:f3:75:b9:16:04:9d:7c:b4:46:
d5:04:d9:30:ff:71:73:81:7b:82:3a:92:73:2f:e3:
b8:aa:d5:85:c8:0f:e5:0b:63:a9:cc:bb:06:c0:57:
24:cc:54:69:98:9b:12:bf:1d:1e:1c:fc:ca:59:01:
08:e8:c0:73:2e:f8:ba:95:f5:f5:37:84:48:83:30:
94:27:7c:79:56:fd:07:f4:43:5a:04:03:5d:3a:2c:
00:e2:cf:57:c4:fa:9c:44:b2:8e:b7:77:78:9a:8d:
c2:01:fc:5a:4d:40:bf:b8:1b:92:f8:5a:88:7a:8b:
fd:5e:2c:bb:26:bb:a6:84:e5:d1:b5:4f:fc:c2:9d:
89:5c:28:96:b1:80:65:8b:e7:a9:2c:7f:84:20:6e:
f4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C9:33:C5:64:68:FB:36:85:B7:5A:87:99:21:97:95:0A:9E:D2:34
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a0:8e:67:5b:a6:73:5b:08:7f:0b:bb:bb:91:02:9f:e2:4b:
40:6e:9c:b2:13:ec:f2:0a:8c:1a:25:2b:90:48:d0:9b:a7:aa:
fc:9f:60:f9:4f:b0:31:c6:2c:ad:2f:83:5a:4e:ed:3a:e7:9a:
e8:26:a7:ce:3e:0a:89:4f:71:18:d2:05:2c:be:e5:84:a1:c2:
1f:7d:07:2f:47:ac:76:0c:3e:98:64:91:75:b9:7c:29:42:c0:
8f:42:e4:0e:88:69:33:c5:c2:ca:2a:18:fb:d8:31:3f:54:f4:
41:e5:86:2c:54:ea:e7:e6:dc:8d:a6:05:f5:7f:39:85:ac:af:
30:84:eb:3c:99:e8:93:00:3b:23:a8:d8:4b:4b:bd:c4:a0:01:
a3:d6:ae:6b:c3:fc:b7:dd:29:48:ad:b8:1c:87:96:78:f1:da:
81:eb:17:63:f7:1f:79:49:24:77:0b:2c:b1:89:44:93:e1:84:
7e:80:b8:d4:a5:28:31:42:bd:a2:37:89:1a:35:42:08:f5:75:
b1:3c:fd:28:0b:d7:61:4d:97:71:60:a8:88:18:bb:d1:ed:18:
e4:ea:cc:cc:27:63:4a:03:eb:56:0e:ef:79:5e:7c:9f:ed:db:
3a:3d:b6:4d:80:65:bc:e9:47:69:76:37:73:e1:09:93:37:54:
18:ea:8f:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQc6zisVEqdXnFAMw7dYkXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMDVmZTYzODAyNDk0MjU1NTY4M2Q3NjVlZGY3ZmE5M2Yy
ZTg0MzAwHhcNMjUwMzEzMTcwMDU0WhcNMjUwMzE0MTcwMDU0WjAzMTEwLwYDVQQD
EyhiZWM5MzNjNTY0NjhmYjM2ODViNzVhODc5OTIxOTc5NTBhOWVkMjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7WqE/cGS4SUzbtuci+i5i1rG/Fd
pUt0aBCvQjT8o2X6gJLjOQ4RPYjItgSAA6QcB2dQkHs0bH2H3uuDoU0bltIt8Sx3
Iwl/yHACroFPdICJLPkcRnQcYhU5kL1HXVAOAOIYi2h3ROrd19RdKXPzdbkWBJ18
tEbVBNkw/3FzgXuCOpJzL+O4qtWFyA/lC2OpzLsGwFckzFRpmJsSvx0eHPzKWQEI
6MBzLvi6lfX1N4RIgzCUJ3x5Vv0H9ENaBANdOiwA4s9XxPqcRLKOt3d4mo3CAfxa
TUC/uBuS+FqIeov9Xiy7JrumhOXRtU/8wp2JXCiWsYBli+epLH+EIG70ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7JM8VkaPs2hbdah5khl5UKntI0MB8GA1UdIwQY
MBaAFCIF/mOAJJQlVWg9dl7ff6k/LoQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi81ODlhNWEtNmJkYi00MGYxLWE0ZjMt
ODRlMTFlNTFmMTM0LzEvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi81ODlhNWEtNmJkYi00MGYxLWE0ZjMtODRlMTFlNTFmMTM0
LzEvSWdYLVk0QWtsQ1ZWYUQxMlh0OV9xVDh1aERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6COZ1um
c1sIfwu7u5ECn+JLQG6cshPs8gqMGiUrkEjQm6eq/J9g+U+wMcYsrS+DWk7tOuea
6Canzj4KiU9xGNIFLL7lhKHCH30HL0esdgw+mGSRdbl8KULAj0LkDohpM8XCyioY
+9gxP1T0QeWGLFTq5+bcjaYF9X85hayvMITrPJnokwA7I6jYS0u9xKABo9aua8P8
t90pSK24HIeWePHagesXY/cfeUkkdwsssYlEk+GEfoC41KUoMUK9ojeJGjVCCPV1
sTz9KAvXYU2XcWCoiBi70e0Y5OrMzCdjSgPrVg7veV58n+3bOj22TYBlvOlHaXY3
c+EJkzdUGOqPIA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:49:55 2025 by rpki-client