Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json)
Hash identifier: pvasIayq6OVFFCWbYI/PYHsSLe2J2KmMeMU57p3A1XA=
Subject key identifier: 60:1A:1D:B8:D5:A3:F9:3B:28:1C:DA:AF:E6:EB:A7:9D:73:39:B9:45
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial: 019771BF20F37EEA70F2635D0795EFFC6CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
Manifest number: 14F3
Signing time: Sun 15 Jun 2025 04:00:40 +0000
Manifest this update: Sun 15 Jun 2025 04:00:40 +0000
Manifest next update: Mon 16 Jun 2025 04:00:40 +0000
Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: UhDYLZIfLr8vaoKGDr6YWD7n8sxvK/mn6RSwrywbTJg=)
2: oL5s4daZ2-CvSDbZedMFWpoaJg4.roa (hash: rBJTh0rRi4HBxgXoejT0Pcmh+tBjyPVq1RYIy0Ljiec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:20:f3:7e:ea:70:f2:63:5d:07:95:ef:fc:6c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Validity
Not Before: Jun 15 04:00:40 2025 GMT
Not After : Jun 16 04:00:40 2025 GMT
Subject: CN=601a1db8d5a3f93b281cdaafe6eba79d7339b945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2c:24:3a:a4:7f:97:eb:c9:fa:4e:27:c3:bc:
de:e8:2b:44:4f:3a:a2:ad:74:71:c8:69:46:b6:04:
21:12:b1:62:08:4f:13:72:35:e7:11:a6:6b:13:e9:
7f:b5:28:4a:2c:dd:75:56:4e:b8:79:19:72:2c:3c:
6a:72:19:ca:bb:a3:2e:b5:39:96:42:13:97:a8:5d:
83:16:63:ed:ec:a9:6c:6b:4a:0a:9a:6b:69:26:5c:
1e:97:0d:a7:b2:be:00:62:84:5e:c4:24:31:f9:20:
1c:fb:ac:23:4e:cd:e6:ec:28:78:53:61:8c:89:77:
0b:74:cd:b4:b1:bb:db:63:c7:c3:44:71:5b:bd:3b:
32:c9:58:59:17:8c:a1:b8:2c:77:d6:8f:9b:6e:af:
78:5d:cf:a0:32:7a:22:27:8b:4a:26:09:4b:b1:a1:
77:81:46:f5:b9:00:c4:7e:50:d5:81:ef:7a:13:78:
49:7b:c6:60:e5:d0:7d:20:bd:1a:32:2b:58:c3:39:
40:18:31:fd:a7:ea:50:8f:f4:38:f5:d5:ef:71:d4:
d4:e3:c8:41:ac:b6:53:59:b6:6a:02:ba:a0:9a:6c:
21:45:d3:80:10:f0:c5:6a:dd:33:de:6d:18:b4:15:
54:62:fb:ae:f6:a7:5a:e9:30:e2:58:7c:59:73:e2:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1A:1D:B8:D5:A3:F9:3B:28:1C:DA:AF:E6:EB:A7:9D:73:39:B9:45
X509v3 Authority Key Identifier:
keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:96:13:74:bb:50:37:b4:01:ba:32:09:f2:7e:6c:0b:3d:43:
6d:c8:6e:f0:43:63:af:ed:28:2c:9c:b0:36:af:c9:51:41:80:
2c:81:43:99:15:2c:62:de:82:5d:f6:18:6b:d4:2e:53:11:59:
6e:4b:0a:b2:3a:82:a3:58:1c:18:3a:a2:cc:da:db:07:e1:51:
02:fb:a7:21:13:a8:cb:b5:a9:7a:ee:8c:24:48:6e:a8:17:9d:
87:df:34:ff:9f:02:eb:4a:8d:20:67:8c:29:29:bd:65:d5:b4:
7e:a9:eb:3a:c8:11:f7:43:81:54:63:c1:d6:d3:90:0e:eb:bc:
4c:35:68:e6:1b:68:6c:07:c6:74:25:f3:25:24:df:bf:62:ee:
72:d6:93:13:e0:82:8c:12:c3:5a:ec:4f:57:ad:94:50:71:26:
0f:f1:92:2d:5d:b6:a9:c5:57:70:b4:c1:9f:86:c9:e5:89:68:
7e:97:58:ef:0c:2d:25:b0:43:a0:4f:c9:cd:5c:c3:b4:5f:61:
25:65:98:10:dc:4f:bf:db:55:33:cf:ad:67:34:6a:8a:6c:af:
7e:57:4c:32:6d:b0:0c:6b:24:f6:85:90:45:ab:df:cb:5c:58:
14:91:59:f1:0c:a9:7e:47:3a:8a:2a:98:ac:07:10:b3:b9:91:
d3:38:10:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:41 2025 by rpki-client