Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: PFM3RL2/KXQZLwBVQARv0Nahey8Kao8HAkQnmxaf2FI=
Subject key identifier: A6:8D:07:CA:FE:96:56:50:1E:CC:98:55:56:D6:5C:45:BD:D2:E3:43
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 019752D8B8599732BD5D114D065DB01E0FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 0256
Signing time: Mon 09 Jun 2025 04:00:24 +0000
Manifest this update: Mon 09 Jun 2025 04:00:24 +0000
Manifest next update: Tue 10 Jun 2025 04:00:24 +0000
Files and hashes: 1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: PYPNUpixAu2DvD1TfGoHYZ3+wKPMhM2/+jl/+X9ylxw=)
2: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=)
3: c_sMTj7v_tcLPK4ph9KiN4hyel8.roa (hash: WlGUEszKDgI/p0yTM/WRVaqPEPGJ8QjHZwVMfO6NE9k=)
4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:b8:59:97:32:bd:5d:11:4d:06:5d:b0:1e:0f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Jun 9 04:00:24 2025 GMT
Not After : Jun 10 04:00:24 2025 GMT
Subject: CN=a68d07cafe9656501ecc985556d65c45bdd2e343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:01:88:98:cb:e6:4d:4b:8e:54:63:e7:b3:
17:44:71:fb:a5:a9:ba:16:b8:c0:60:26:49:d4:6d:
27:5f:8d:28:ee:76:14:9c:36:a0:de:ae:3f:12:65:
32:0a:f1:75:64:04:e0:c6:c1:89:37:ef:9d:11:57:
94:46:17:a1:81:4f:4d:43:bc:9c:24:76:0a:7f:09:
dc:f3:8c:ff:4e:88:9d:84:ad:a4:e5:8a:fe:16:65:
1d:fa:ea:71:5c:a9:5b:cc:84:66:7c:1d:49:65:c4:
6c:45:55:b9:3d:cf:43:58:7e:fc:69:27:ff:a6:4d:
53:be:80:03:87:df:25:58:a7:87:57:e3:94:55:94:
0d:73:32:7a:29:98:5d:02:57:48:60:38:a1:69:86:
50:f9:41:ba:8b:3e:2a:83:bc:ad:fe:20:f4:da:8f:
ae:32:33:9f:1c:76:66:ec:42:ee:96:3d:aa:61:ee:
18:c2:ee:d6:45:4b:a9:c6:3a:1b:d9:a0:89:e1:f3:
48:11:d8:bb:f7:81:34:b7:3c:56:90:30:e4:60:e9:
f9:99:cf:7d:52:6e:b8:d6:3c:02:ac:93:01:38:4b:
0c:6b:b4:fb:37:c7:2c:27:32:40:51:32:1c:cb:58:
f6:0c:c2:61:9b:18:e3:f1:e1:00:b8:08:9c:30:57:
ec:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8D:07:CA:FE:96:56:50:1E:CC:98:55:56:D6:5C:45:BD:D2:E3:43
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b7:21:3f:51:29:8d:0d:ac:23:43:0f:e6:7b:4e:5e:ed:cb:
8c:19:e4:a7:e3:14:d5:dd:a8:f2:d8:c9:ba:20:e6:f5:af:60:
e6:53:56:43:f8:2c:a4:4e:1b:a1:6e:40:81:aa:66:3b:2b:67:
c9:94:5d:64:7b:11:c7:6e:ed:b2:9e:3a:ba:4e:8d:00:23:5f:
15:5f:e8:8b:3f:06:c9:e6:70:2c:48:12:85:97:f0:76:a4:5d:
b8:3a:a8:88:c5:85:75:54:c8:08:88:c4:c3:13:76:27:b9:f8:
25:77:6e:95:5b:82:bc:62:36:f4:9a:b0:fa:df:c1:d2:17:06:
02:81:65:d8:35:9f:cb:44:48:bd:69:95:3d:ba:f1:11:d2:e4:
ec:00:71:8b:3a:c2:58:8e:a5:86:07:9e:10:8d:c5:02:70:c0:
da:a8:a9:a6:43:0e:19:99:19:a7:7d:5f:65:44:fe:f4:8f:f0:
35:4b:b5:d6:b0:4a:1c:cd:9f:01:ce:11:0a:65:76:b6:2e:8b:
6e:12:19:2d:a3:93:0a:a2:1d:6b:8e:fc:62:48:2a:45:b0:c1:
d3:84:2b:06:b1:9f:7a:e2:a8:cd:3d:01:be:53:94:a0:b2:fa:
1a:4e:af:c9:cf:73:ae:82:7b:4f:db:b2:da:78:c8:94:05:95:
b3:90:68:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:48:33 2025 by rpki-client