Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: YqMV4LpVArEnKjYuAgDUWPy8tNiJER5noz9H8Dvjx7s=
Subject key identifier: 83:04:F6:3B:06:C9:50:CA:25:52:AF:27:43:19:DE:91:65:6A:43:B8
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 01988D341E4301B9307025479FE7967D5B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 05:00:59 +0000
Manifest this update: Sat 09 Aug 2025 05:00:59 +0000
Manifest next update: Sun 10 Aug 2025 05:00:59 +0000
Files and hashes: 1: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: bUQh/24WESkbIPfB/uXP/7erECmsyUYML7m4LqTpGzc=)
2: LkiVXeukns_JdhONh74qaRMFBIM.roa (hash: sMLMXJ4GQAf8vdiNw4uFl/nK1+dFlOKAlp+mNZ+YliU=)
3: cd1yHX5UcqryiXUb-rkYleNrwXs.roa (hash: 6h3q+Ehg11sL4jSJjG152eGWFDBSFWsjBJ9eqGT5BtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:34:1e:43:01:b9:30:70:25:47:9f:e7:96:7d:5b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Aug 9 05:00:59 2025 GMT
Not After : Aug 10 05:00:59 2025 GMT
Subject: CN=8304f63b06c950ca2552af274319de91656a43b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:16:1d:97:59:f0:f0:e3:27:cc:f4:d2:4f:
42:01:dc:d4:90:7d:82:d0:aa:33:35:4c:51:01:86:
c2:ca:d9:43:a3:7c:6b:a9:f8:5d:df:97:20:cb:05:
66:61:96:79:08:50:24:ef:9a:93:f3:e2:40:b3:64:
56:97:9c:97:a1:18:a3:07:ba:de:d5:ec:a7:31:5b:
ba:68:f0:46:41:b5:39:3f:30:25:88:92:7c:16:fa:
03:a8:92:0a:3a:ec:60:35:21:1d:19:79:b7:d5:9b:
ad:ac:ae:6e:11:e5:9a:f9:97:85:40:d3:61:96:b6:
d1:76:05:90:24:c4:81:7a:6a:d5:d7:8d:b5:ed:36:
c3:27:bb:1a:a5:fa:09:df:14:da:63:0e:58:ef:81:
cf:e3:6e:14:70:80:49:f9:63:79:2e:e8:40:79:27:
08:f2:bc:94:33:69:5a:84:4f:0d:3c:b5:86:9b:78:
37:28:c3:73:1f:07:62:c7:92:fa:af:28:96:cf:c0:
64:a9:6b:92:2c:67:10:84:44:5e:ef:20:bd:a4:d0:
12:32:2f:c0:9c:b6:17:af:f7:56:8c:a0:bb:2e:b9:
3e:a7:8a:f5:6f:f8:f9:b7:1f:a8:49:56:74:d3:b4:
76:a8:db:36:30:36:ed:f7:9d:3c:06:ec:d4:8b:3c:
a0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:04:F6:3B:06:C9:50:CA:25:52:AF:27:43:19:DE:91:65:6A:43:B8
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:38:8c:68:6a:7d:12:ef:81:86:5e:02:0b:be:64:f0:6b:e5:
d7:44:03:c7:18:45:61:d6:cb:59:27:ce:f5:1f:2f:1b:06:15:
ba:b8:6a:7d:05:b0:4f:47:00:eb:e0:62:12:98:cc:f4:95:ff:
47:d9:c6:72:09:3b:b6:4e:2e:e2:68:92:8d:4e:f5:da:cb:c2:
45:62:52:e8:24:14:a4:fd:92:1a:d4:31:87:17:ed:f2:1e:60:
9e:5d:c7:f8:f1:f4:2c:06:77:0d:a3:17:97:46:3d:fc:ed:55:
01:f3:71:82:0b:ce:5b:65:5e:93:3f:ce:dc:cd:9d:ac:70:3c:
c5:84:bc:72:ab:1a:73:67:3f:af:e9:c2:de:a7:ed:72:41:00:
de:6c:bd:cc:a6:6e:10:3d:b9:55:a2:50:b1:72:b5:d5:a5:8e:
ce:d6:8e:fb:c8:e6:51:81:62:31:59:a2:43:c0:3d:1f:ba:a8:
63:68:73:01:cf:e3:cc:4e:a3:52:78:41:85:b9:19:61:b1:02:
40:6d:93:a7:d4:75:35:0f:69:d9:83:e0:4b:03:5a:f2:f8:a3:
8b:42:64:99:6e:68:7d:83:d4:68:b6:97:e6:ec:61:e8:4c:1f:
df:02:f7:d0:0c:d7:f1:5e:c0:59:ca:f0:64:00:b9:d5:ce:a2:
63:20:7d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:24 2025 by rpki-client