Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
File: iC-gGQL06MNH8hFuRkXaGmtOCWI.mft (raw, json)
Hash identifier: cvrKFvc7RNLweDDItKFUOGXQn5dD8KG43JSH8fLTBq8=
Subject key identifier: 52:CE:62:9B:11:8E:73:43:3F:06:84:58:D1:97:65:16:98:EA:AD:7E
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Certificate issuer: /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial: 0196835A23D3662508C12C28D51009F0C218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
Manifest number: 12D6
Signing time: Tue 29 Apr 2025 21:00:44 +0000
Manifest this update: Tue 29 Apr 2025 21:00:44 +0000
Manifest next update: Wed 30 Apr 2025 21:00:44 +0000
Files and hashes: 1: ENS55DqOSCIACYKV88lsj2-9Qt0.roa (hash: DHbJggMAa2s1Y5SQ9CvEy1KweRl3G7QnT7Ch9hrVq4Y=)
2: Eh5XcZTOlwwjICZ8D5e6YinN9to.roa (hash: i3hRAhyXtajePfAySoecKpTzxKsfIbEuHCpoNygQqoo=)
3: iC-gGQL06MNH8hFuRkXaGmtOCWI.crl (hash: LUWJLrg4bkOxedp0olucJh90Ni2u0wxzZMjegDeND7w=)
4: rqFZA9uVkdGBL0x6Ei0L9MHEurQ.roa (hash: L0IGvxVXiMO117M8Wm4IgrHBTq1xuhWbcFCP05D3zJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:5a:23:d3:66:25:08:c1:2c:28:d5:10:09:f0:c2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Validity
Not Before: Apr 29 21:00:44 2025 GMT
Not After : Apr 30 21:00:44 2025 GMT
Subject: CN=52ce629b118e73433f068458d197651698eaad7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:d9:09:0c:d6:c1:ae:71:19:4b:6e:ad:07:
ae:21:96:da:e0:33:e1:0e:71:d3:bd:03:e9:97:8d:
ea:04:6f:78:7a:2e:59:13:87:29:46:aa:84:29:1e:
2c:63:ad:2b:7f:72:75:c2:4c:4f:5e:32:de:d1:24:
f3:dc:9a:aa:cb:dc:67:96:ab:7d:d3:57:82:d8:6f:
70:c2:d0:92:a3:de:32:5d:b9:fe:8e:6d:5a:f2:d6:
1a:80:6d:36:00:8b:93:e3:41:d0:b3:b8:d2:57:28:
e3:f3:fe:2d:91:af:a1:b4:df:e3:53:cd:40:a9:02:
65:ff:ec:f0:d8:2f:93:bb:0d:96:11:7a:38:2b:76:
2b:5f:a2:e0:ca:46:71:36:bb:fc:39:69:79:36:d7:
e6:59:a2:8d:5f:aa:90:ee:cc:5c:b0:30:6d:7c:25:
0e:47:62:f7:14:1e:98:98:25:74:d9:0f:73:36:1d:
62:35:6b:a5:fd:09:4e:cf:a3:e0:94:e4:c1:8d:7a:
5d:f5:20:9a:a7:d0:21:31:44:05:1e:15:64:a3:f6:
a1:04:9d:71:8b:73:2b:4f:60:77:54:af:34:4b:60:
ef:9f:08:d9:40:09:f4:a1:3e:6f:0c:85:57:82:19:
15:4a:b8:fd:5f:68:9e:8c:20:03:2e:b8:71:3b:0b:
df:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CE:62:9B:11:8E:73:43:3F:06:84:58:D1:97:65:16:98:EA:AD:7E
X509v3 Authority Key Identifier:
keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bd:19:00:6e:93:3c:a2:e7:ae:e2:62:24:3b:d5:10:0d:fc:
f8:8f:96:93:12:54:d3:db:6c:b0:69:84:67:9e:ca:bb:83:e0:
e7:51:c1:3a:29:58:03:cf:ae:f4:ab:8b:b1:5a:ea:3e:28:b9:
08:be:b9:7d:86:f2:fb:92:c7:f8:3b:46:cb:8a:49:10:82:33:
95:7d:7f:2e:4b:79:c2:5a:1e:55:58:44:b5:93:0e:56:fc:d0:
4e:2a:89:8d:f0:c9:07:9e:9f:c1:fd:0b:52:74:5e:db:ef:cc:
8a:3b:13:3c:29:91:6b:e1:4f:76:b9:eb:91:72:86:35:dd:be:
92:f6:52:0c:9e:03:90:54:b5:cc:05:a2:ca:07:a3:5e:76:07:
7e:17:79:71:cf:07:c6:70:30:ef:63:1b:6e:1d:fb:d5:44:21:
4a:1f:c8:44:17:0b:17:81:58:42:10:00:30:6e:81:c7:02:ad:
e2:5e:91:91:09:4d:23:f2:c4:fe:df:3f:75:e3:cb:39:af:1e:
67:4f:13:78:e3:25:79:90:20:d2:93:24:9f:f3:96:79:00:a9:
ee:20:d7:0e:54:a8:47:15:47:ec:1e:59:57:ff:f1:5c:97:7f:
f3:c5:18:98:22:43:8a:12:c0:cd:59:0e:60:75:69:70:49:c3:
67:19:d7:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDWiPTZiUIwSwo1RAJ8MIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MmZhMDE5MDJmNGU4YzM0N2YyMTE2ZTQ2NDVkYTFhNmI0
ZTA5NjIwHhcNMjUwNDI5MjEwMDQ0WhcNMjUwNDMwMjEwMDQ0WjAzMTEwLwYDVQQD
Eyg1MmNlNjI5YjExOGU3MzQzM2YwNjg0NThkMTk3NjUxNjk4ZWFhZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VfZCQzWwa5xGUturQeuIZba4DPh
DnHTvQPpl43qBG94ei5ZE4cpRqqEKR4sY60rf3J1wkxPXjLe0STz3Jqqy9xnlqt9
01eC2G9wwtCSo94yXbn+jm1a8tYagG02AIuT40HQs7jSVyjj8/4tka+htN/jU81A
qQJl/+zw2C+Tuw2WEXo4K3YrX6LgykZxNrv8OWl5NtfmWaKNX6qQ7sxcsDBtfCUO
R2L3FB6YmCV02Q9zNh1iNWul/QlOz6PglOTBjXpd9SCap9AhMUQFHhVko/ahBJ1x
i3MrT2B3VK80S2DvnwjZQAn0oT5vDIVXghkVSrj9X2iejCADLrhxOwvf0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLOYpsRjnNDPwaEWNGXZRaY6q1+MB8GA1UdIwQY
MBaAFIgvoBkC9OjDR/IRbkZF2hprTgliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUMtZ0dRTDA2TU5IOGhGdVJrWGFHbXRPQ1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lYzA5ODEtZDY4Mi00ZjdiLWIyMTAt
NWMyZDI2NTcwNWUwLzEvaUMtZ0dRTDA2TU5IOGhGdVJrWGFHbXRPQ1dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9lYzA5ODEtZDY4Mi00ZjdiLWIyMTAtNWMyZDI2NTcwNWUw
LzEvaUMtZ0dRTDA2TU5IOGhGdVJrWGFHbXRPQ1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJb0ZAG6T
PKLnruJiJDvVEA38+I+WkxJU09tssGmEZ57Ku4Pg51HBOilYA8+u9KuLsVrqPii5
CL65fYby+5LH+DtGy4pJEIIzlX1/Lkt5wloeVVhEtZMOVvzQTiqJjfDJB56fwf0L
UnRe2+/MijsTPCmRa+FPdrnrkXKGNd2+kvZSDJ4DkFS1zAWiygejXnYHfhd5cc8H
xnAw72Mbbh371UQhSh/IRBcLF4FYQhAAMG6BxwKt4l6RkQlNI/LE/t8/dePLOa8e
Z08TeOMleZAg0pMkn/OWeQCp7iDXDlSoRxVH7B5ZV//xXJd/88UYmCJDihLAzVkO
YHVpcEnDZxnXPg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:06:02 2025 by rpki-client