Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: Erojra89EWtxAkUDE4rXsd51BduyEuYnJx/sUiu3Fgs=
Subject key identifier: C4:0E:50:6D:42:7F:19:2A:1B:A9:6F:60:D7:56:98:82:05:1B:62:06
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 01976D7479239F5665B4CD6269BBA9CF991A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 08:00:39 +0000
Manifest this update: Sat 14 Jun 2025 08:00:39 +0000
Manifest next update: Sun 15 Jun 2025 08:00:39 +0000
Files and hashes: 1: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: qfzQVFS4XLTFvypgNimVI+U0W6ERt4wDJxjIzT6iUro=)
2: LkiVXeukns_JdhONh74qaRMFBIM.roa (hash: sMLMXJ4GQAf8vdiNw4uFl/nK1+dFlOKAlp+mNZ+YliU=)
3: cd1yHX5UcqryiXUb-rkYleNrwXs.roa (hash: 6h3q+Ehg11sL4jSJjG152eGWFDBSFWsjBJ9eqGT5BtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:79:23:9f:56:65:b4:cd:62:69:bb:a9:cf:99:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Jun 14 08:00:39 2025 GMT
Not After : Jun 15 08:00:39 2025 GMT
Subject: CN=c40e506d427f192a1ba96f60d7569882051b6206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:9d:0b:9d:f2:b7:38:f2:2e:4c:26:28:58:
6d:5a:b4:b6:ba:e7:37:f9:0f:4f:3d:9d:8a:ca:1a:
bf:5c:8a:61:b7:f6:25:9e:a6:66:aa:84:00:f2:c5:
ce:40:da:e4:47:aa:1d:b4:99:b3:8a:ea:e9:68:44:
9a:4b:0a:f1:97:ce:8b:37:0f:db:34:34:02:7a:89:
48:3c:a5:e3:c6:58:2a:c7:00:fb:77:20:89:dc:44:
ba:eb:8a:1c:d8:c5:cb:4b:76:90:10:11:4b:a1:b1:
4a:8f:06:8e:04:71:cb:c2:6a:73:92:c5:82:2d:58:
d4:5e:e4:e3:c3:f8:fb:94:14:32:5e:3d:56:ef:53:
ab:84:67:08:86:04:d9:5f:0d:f6:d6:5b:d6:b9:a3:
94:cd:0e:8e:0e:e9:de:83:f7:0b:70:de:ed:c5:bf:
85:f0:f9:ad:d0:4c:d0:5d:b9:5b:73:a9:31:60:6b:
ab:6a:07:eb:df:e6:16:db:b9:04:5e:aa:88:4c:79:
6f:a6:6e:c9:0b:cc:5e:52:4f:a7:cf:84:29:44:f7:
f9:91:d7:2d:3e:64:0f:09:63:f5:29:7d:e3:7d:92:
75:90:07:9a:ec:98:3b:7a:6b:a3:00:18:3f:d5:45:
42:97:00:e2:be:b8:02:03:28:8d:f6:ac:53:f8:87:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0E:50:6D:42:7F:19:2A:1B:A9:6F:60:D7:56:98:82:05:1B:62:06
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:7f:87:9f:ad:b4:e2:02:0d:a3:eb:57:a9:47:e3:de:fc:e2:
e1:f9:17:89:63:1f:2b:ac:02:02:2c:d2:f4:28:79:75:4a:0d:
77:4b:ce:b3:c4:8e:b9:ed:03:45:eb:74:36:c9:70:7a:7b:3c:
c2:18:8d:4e:db:41:4a:ca:4b:36:33:7f:49:89:4e:3b:07:37:
48:fd:80:1b:cd:ad:4b:1a:a9:32:d6:95:e1:c2:52:e0:b9:7a:
e8:f6:7a:bc:00:4e:36:02:53:af:32:34:8e:e2:89:10:66:e4:
f1:9f:63:3d:c0:98:78:cd:05:f4:ae:c4:91:64:1b:fb:bb:e5:
c2:5b:05:84:4d:56:63:4e:79:7c:ab:db:ae:d1:e7:3f:16:92:
ff:3f:60:59:55:81:6f:95:93:6d:cf:75:a9:dc:68:19:db:67:
bb:61:11:2b:bb:19:c1:9e:d9:64:66:d1:10:b6:6c:1f:00:c7:
50:fe:59:c1:ab:f7:10:94:c0:bf:6e:80:5a:7e:a9:c3:ac:94:
5e:8f:f5:fe:a9:f1:61:ba:94:f3:81:05:95:f5:46:94:a6:a4:
5e:88:4e:06:2d:03:ad:37:f5:f9:64:64:65:0d:48:8a:27:87:
b9:19:9d:51:ed:69:e6:16:9e:0c:00:41:ce:f9:75:fb:8f:f5:
42:37:b2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:56:30 2025 by rpki-client