Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: AJDHtEZQKlGQQLTQvor7TdiVgOGbJuX12x3xZXYzfts=
Subject key identifier: 63:5E:61:41:A1:5C:C6:8C:2C:31:36:4C:DC:17:F3:EA:F8:B4:97:18
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 01967642F51FD3358F22146666EC91CF5C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 08:00:21 +0000
Manifest this update: Sun 27 Apr 2025 08:00:21 +0000
Manifest next update: Mon 28 Apr 2025 08:00:21 +0000
Files and hashes: 1: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: Gqc/gZs4JG+wOnk8eLUaFvAPC4cnxauGD5TCZ2uxm1o=)
2: LkiVXeukns_JdhONh74qaRMFBIM.roa (hash: sMLMXJ4GQAf8vdiNw4uFl/nK1+dFlOKAlp+mNZ+YliU=)
3: cd1yHX5UcqryiXUb-rkYleNrwXs.roa (hash: 6h3q+Ehg11sL4jSJjG152eGWFDBSFWsjBJ9eqGT5BtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:f5:1f:d3:35:8f:22:14:66:66:ec:91:cf:5c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Apr 27 08:00:21 2025 GMT
Not After : Apr 28 08:00:21 2025 GMT
Subject: CN=635e6141a15cc68c2c31364cdc17f3eaf8b49718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:36:49:81:db:89:02:4a:67:7a:fe:1b:6e:
d5:a2:69:aa:0d:a0:77:d7:09:de:4e:23:39:a4:c9:
e4:b6:f4:bf:fd:33:00:9d:15:5d:5e:29:db:0a:23:
9e:26:b7:d0:2f:a7:4a:02:46:cf:86:ec:e1:76:2a:
c6:4a:b4:24:ca:10:e2:03:2f:6c:21:3e:21:a6:61:
7f:14:d4:93:9c:ef:0e:dd:6d:e6:54:13:f7:0a:2b:
1e:9f:6d:be:6a:e4:ad:bb:87:bd:91:83:37:ad:af:
e6:04:e8:37:4e:51:71:1b:b0:5e:ed:e2:91:54:0a:
4a:7c:b5:fe:9b:01:4f:f1:b8:63:17:f9:f5:76:51:
70:d7:1f:af:71:3e:40:89:ea:11:51:43:af:68:86:
09:a4:11:af:b1:f5:b9:7f:ae:aa:f8:5e:4b:88:d2:
94:0d:e0:83:0d:7f:03:81:28:75:cd:a5:10:c0:1b:
4f:10:76:17:b8:11:d4:16:fe:93:5f:00:80:34:81:
37:14:61:1b:c3:df:c2:53:a8:ec:05:47:34:40:75:
69:20:0d:05:60:a2:d7:9c:67:ad:ef:6a:39:59:a6:
5f:4e:e5:18:fc:3d:9a:15:8d:81:42:bd:63:8c:f7:
43:90:b2:61:12:4e:85:a7:22:70:3d:8b:ff:4c:db:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5E:61:41:A1:5C:C6:8C:2C:31:36:4C:DC:17:F3:EA:F8:B4:97:18
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:44:02:f3:5e:64:41:9e:a4:e8:90:79:3b:a9:63:b6:ec:33:
23:7c:ce:8e:c5:8a:90:77:cf:df:54:dc:ab:fb:62:58:07:9f:
63:a8:67:f1:51:21:bc:37:b3:1b:33:30:e8:11:63:55:1e:7e:
55:49:e1:82:4c:b0:b4:89:45:b9:3b:d9:0e:4b:6c:1c:c2:3f:
d2:7f:d5:d2:c4:ce:a2:94:e4:50:a7:9f:54:5d:4c:49:a5:67:
f0:dd:d0:a7:d7:69:0c:86:13:99:bb:12:91:5e:b0:0a:ec:d2:
77:e3:4a:e3:d2:7c:8a:78:ea:af:b9:a8:6b:e9:35:28:9c:42:
4d:f3:e0:2a:21:3b:fe:83:39:0d:6c:4e:0f:a6:5b:03:90:91:
c4:7e:58:57:58:7f:58:3d:9e:38:f7:af:15:56:b6:d8:1b:a1:
ad:58:4d:80:ca:d2:d5:e9:50:f3:8c:ed:3e:68:27:ef:65:72:
a8:55:4b:c3:8b:ec:70:9f:c5:87:89:36:21:3e:84:4b:63:7a:
90:35:93:c3:61:7f:1f:2d:3c:a6:b9:cb:c3:c4:0f:47:5f:ff:
97:4b:06:4a:27:1f:d3:ea:b4:eb:aa:5b:30:71:db:5a:3e:3f:
db:95:34:df:01:a8:b8:86:c3:3e:aa:eb:5d:ed:da:31:b2:05:
8c:48:f3:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2QvUf0zWPIhRmZuyRz1wHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmY2ODA4ZTA2MDQ2OTcyNzBmYWEzYzNkYjE1OWY3ZmU5
OGVjZGQwHhcNMjUwNDI3MDgwMDIxWhcNMjUwNDI4MDgwMDIxWjAzMTEwLwYDVQQD
Eyg2MzVlNjE0MWExNWNjNjhjMmMzMTM2NGNkYzE3ZjNlYWY4YjQ5NzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgM2SYHbiQJKZ3r+G27VommqDaB3
1wneTiM5pMnktvS//TMAnRVdXinbCiOeJrfQL6dKAkbPhuzhdirGSrQkyhDiAy9s
IT4hpmF/FNSTnO8O3W3mVBP3Cisen22+auStu4e9kYM3ra/mBOg3TlFxG7Be7eKR
VApKfLX+mwFP8bhjF/n1dlFw1x+vcT5AieoRUUOvaIYJpBGvsfW5f66q+F5LiNKU
DeCDDX8DgSh1zaUQwBtPEHYXuBHUFv6TXwCANIE3FGEbw9/CU6jsBUc0QHVpIA0F
YKLXnGet72o5WaZfTuUY/D2aFY2BQr1jjPdDkLJhEk6FpyJwPYv/TNt1vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNeYUGhXMaMLDE2TNwX8+r4tJcYMB8GA1UdIwQY
MBaAFCBvaAjgYEaXJw+qPD2xWff+mOzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUt
ZWI2MmU4YzRkZmE5LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUtZWI2MmU4YzRkZmE5
LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArEQC815k
QZ6k6JB5O6ljtuwzI3zOjsWKkHfP31Tcq/tiWAefY6hn8VEhvDezGzMw6BFjVR5+
VUnhgkywtIlFuTvZDktsHMI/0n/V0sTOopTkUKefVF1MSaVn8N3Qp9dpDIYTmbsS
kV6wCuzSd+NK49J8injqr7moa+k1KJxCTfPgKiE7/oM5DWxOD6ZbA5CRxH5YV1h/
WD2eOPevFVa22BuhrVhNgMrS1elQ84ztPmgn72VyqFVLw4vscJ/Fh4k2IT6ES2N6
kDWTw2F/Hy08prnLw8QPR1//l0sGSicf0+q066pbMHHbWj4/25U03wGouIbDPqrr
Xe3aMbIFjEjzNw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:49:35 2025 by rpki-client