Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: Wf1fCIBHxBVpaGs+Vqt5qxz4koWlFcNvg4IzEbjd2/k=
Subject key identifier: 2E:7A:B5:54:2E:20:FE:1B:7A:F9:56:38:E5:48:28:3D:F6:D6:41:A0
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 01975C81049BAF0580AA2558994B741A94D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 025B
Signing time: Wed 11 Jun 2025 01:00:48 +0000
Manifest this update: Wed 11 Jun 2025 01:00:48 +0000
Manifest next update: Thu 12 Jun 2025 01:00:48 +0000
Files and hashes: 1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: Wyd3TL62QYhSboU2HD3qXkeJAJp3J8SNGyYNiUAA2PI=)
2: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=)
3: c_sMTj7v_tcLPK4ph9KiN4hyel8.roa (hash: WlGUEszKDgI/p0yTM/WRVaqPEPGJ8QjHZwVMfO6NE9k=)
4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:81:04:9b:af:05:80:aa:25:58:99:4b:74:1a:94:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Jun 11 01:00:48 2025 GMT
Not After : Jun 12 01:00:48 2025 GMT
Subject: CN=2e7ab5542e20fe1b7af95638e548283df6d641a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:82:d0:82:74:9b:c4:40:e1:3e:43:92:5f:
31:7e:e3:7c:98:bd:ce:1c:be:da:33:14:75:13:ac:
79:c9:ae:62:be:50:b7:ad:4e:4c:fe:70:1b:10:ce:
48:e5:c1:27:e7:2b:b4:46:d6:cc:5f:e7:c2:96:08:
2a:7f:b6:97:c1:17:1b:b7:a6:4a:75:0c:84:16:9c:
d7:52:83:cf:59:9f:fd:be:3f:02:0e:ed:e7:9e:bf:
f8:3b:bb:8b:2e:77:73:c3:d1:99:29:a9:cb:06:b3:
7e:f6:fe:52:d4:ae:9c:fb:30:8d:c6:26:8c:3a:96:
51:c4:07:29:45:78:99:19:a9:bb:21:f8:51:15:38:
0c:70:74:41:5d:e3:bd:7a:48:53:66:78:9a:a2:bd:
d3:63:4e:01:8e:8e:80:60:7a:55:51:a2:10:1a:57:
60:88:09:ca:21:f7:90:b1:dd:eb:d2:27:20:fe:57:
41:86:8f:a9:d6:ab:65:ea:8a:6d:29:2e:9e:74:bd:
a1:3b:78:57:67:1b:57:e8:fb:36:af:e8:67:ca:95:
ba:82:26:f2:92:a2:27:31:5c:f9:52:d1:33:b3:5d:
e4:02:d6:6a:71:69:10:e3:fd:6b:39:7d:39:92:49:
01:18:4f:2e:0d:5e:ab:6a:a1:ca:b7:cd:6d:c4:a7:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7A:B5:54:2E:20:FE:1B:7A:F9:56:38:E5:48:28:3D:F6:D6:41:A0
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:33:4e:d4:a5:96:65:4a:f4:aa:ab:de:17:d7:99:ae:3b:ea:
15:17:47:ef:92:c9:f4:27:41:1f:7d:66:0c:0b:9b:74:8b:ba:
ea:8b:39:aa:75:71:c7:cf:8c:0a:91:a8:3c:1f:78:e9:7a:f0:
7c:d8:07:da:18:90:68:00:b5:a7:99:a1:49:c5:de:19:dd:98:
d4:d6:8a:48:86:65:9d:86:b0:f0:37:19:76:52:7e:5f:2e:f7:
6d:05:74:a8:e3:08:14:16:be:aa:bb:38:6b:fe:d1:d4:87:c0:
a4:51:dd:dc:9a:e0:a6:f1:0e:7c:f5:30:cf:b8:93:4b:67:94:
4f:fa:c5:e1:eb:12:7f:45:87:86:57:4c:c4:8f:1f:8a:45:ad:
71:e7:8a:3d:20:2e:0f:b8:0b:f4:a1:e3:77:d1:28:89:33:6f:
30:52:31:e8:15:26:fe:a6:37:e3:bf:2e:45:44:d0:62:38:4c:
3e:64:ab:ce:e0:5f:e5:fc:67:00:f5:9d:49:dc:cd:d5:72:16:
e0:9b:76:4f:f3:12:4e:c4:f9:a0:8e:19:94:78:a8:91:00:f6:
c0:c2:49:d9:34:e4:39:a8:99:65:07:c1:3b:c7:d2:84:b5:ef:
e3:02:d8:e2:f4:1b:07:66:5f:92:0c:5b:d6:5c:63:09:5b:4f:
fb:be:e8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:27:46 2025 by rpki-client