Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
File: IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft (raw, json)
Hash identifier: TQjDxbT6a7bRV6OhQWebUjvLYERLtMIuNwzHtn7Nlyo=
Subject key identifier: 5E:3F:CC:A4:FF:70:AF:8A:CB:CD:8D:49:AF:50:8E:B7:FA:04:03:06
Authority key identifier: 21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
Certificate issuer: /CN=2101b6388d6435f54990905382b41dc9675fd490
Certificate serial: 0196821109FAB77E49D34EE7DCBF3C536B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
Manifest number: 03A5
Signing time: Tue 29 Apr 2025 15:01:16 +0000
Manifest this update: Tue 29 Apr 2025 15:01:16 +0000
Manifest next update: Wed 30 Apr 2025 15:01:16 +0000
Files and hashes: 1: EAD0diuoZK02qxxsVWWiclAVX5I.roa (hash: kzXgijoQ+OFnt0McFOmyH17ijOy9UUEek/dQbYMoKFU=)
2: IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl (hash: 1yL8iCwycOjIQ7qoYtPezNu+PHNcukh7Oigioxr06cQ=)
3: nyGLR8VZWMaY-kU1NUM_fc4iRjM.roa (hash: voylSjHlayiNYZNWUzC6whbKd8QLUjoGC1qGpaQazoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:11:09:fa:b7:7e:49:d3:4e:e7:dc:bf:3c:53:6b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101b6388d6435f54990905382b41dc9675fd490
Validity
Not Before: Apr 29 15:01:16 2025 GMT
Not After : Apr 30 15:01:16 2025 GMT
Subject: CN=5e3fcca4ff70af8acbcd8d49af508eb7fa040306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:18:9d:22:46:a6:ba:fa:b8:b3:0e:7d:8e:
66:84:23:07:1b:21:cb:22:01:41:6d:6f:cc:e4:47:
23:5b:c9:42:47:a4:e5:e0:36:ed:5f:7b:d7:86:06:
16:36:38:b5:97:35:4f:17:f3:a6:e2:99:d1:d8:12:
d5:a4:2f:7d:29:d5:ba:00:93:24:f7:2d:a9:83:ad:
60:d5:16:e9:5c:37:f2:d3:3c:3e:8c:22:78:b1:79:
de:b7:9e:bd:59:0c:e4:d3:84:79:f3:23:0d:cd:02:
39:c4:cd:b2:fc:a4:7f:5a:bd:05:29:8c:fb:5c:04:
37:a0:ce:f8:e6:cb:73:b4:fc:ba:a5:3d:67:0c:b9:
05:9a:eb:30:a5:1c:35:4d:38:be:a0:4d:23:d3:ea:
14:44:f9:c0:39:57:1c:c9:6f:31:6b:ec:bc:67:aa:
cc:13:da:52:09:9a:cf:49:42:64:48:2d:9d:98:3a:
e4:71:e1:49:51:2b:14:83:5c:8b:7f:83:20:0a:7e:
79:4f:ac:d1:32:5b:be:88:68:ef:72:3d:26:11:df:
47:a6:91:a7:73:19:1f:75:92:2e:3c:b3:f2:5d:0e:
05:81:b0:36:db:94:12:c8:c8:16:80:bf:76:08:d8:
d9:45:ca:0e:e9:9d:54:54:3f:d3:9a:3f:80:1c:56:
1a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3F:CC:A4:FF:70:AF:8A:CB:CD:8D:49:AF:50:8E:B7:FA:04:03:06
X509v3 Authority Key Identifier:
keyid:21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ee:85:1b:f2:50:21:4d:ea:27:98:57:df:cb:cd:3e:48:57:
54:ab:98:13:63:74:26:f6:98:85:d9:73:63:fe:a9:20:b8:2e:
80:bc:2f:07:d0:3c:90:f5:b6:7b:b6:17:06:63:44:72:8b:66:
db:f3:0f:9d:83:dd:ff:d7:e5:67:7b:60:10:40:41:b1:b1:c2:
7a:cd:8d:6a:83:f7:d6:e7:a3:76:d6:15:63:4c:f3:a0:31:e1:
03:ed:0f:e5:22:f1:0a:7f:35:65:3d:16:5d:ad:ee:9b:a5:7c:
4e:74:5f:ad:b9:72:ec:8a:ec:05:99:91:0a:0e:12:a2:49:f5:
cf:b0:3a:c2:ed:81:0b:fc:1c:bc:42:18:5f:de:a6:8c:38:be:
92:5b:e7:50:0c:61:fc:e0:f7:ee:e9:15:fe:eb:c9:16:e0:66:
2b:7b:33:a6:c8:ce:2b:dd:85:95:f7:64:c0:9a:32:cb:2e:fe:
f8:db:55:64:09:93:bf:bb:65:14:1a:35:46:22:fb:77:52:3a:
9d:32:54:64:c1:63:17:2b:18:67:09:09:75:a2:14:92:b1:da:
54:dc:58:64:c8:94:67:92:54:c9:2b:74:4a:43:79:71:b1:68:
ad:9f:86:60:5e:09:39:84:51:b3:a5:68:41:2c:f7:1a:07:1a:
47:84:a3:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCEQn6t35J007n3L88U2tcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDFiNjM4OGQ2NDM1ZjU0OTkwOTA1MzgyYjQxZGM5Njc1
ZmQ0OTAwHhcNMjUwNDI5MTUwMTE2WhcNMjUwNDMwMTUwMTE2WjAzMTEwLwYDVQQD
Eyg1ZTNmY2NhNGZmNzBhZjhhY2JjZDhkNDlhZjUwOGViN2ZhMDQwMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztMYnSJGprr6uLMOfY5mhCMHGyHL
IgFBbW/M5EcjW8lCR6Tl4DbtX3vXhgYWNji1lzVPF/Om4pnR2BLVpC99KdW6AJMk
9y2pg61g1RbpXDfy0zw+jCJ4sXnet569WQzk04R58yMNzQI5xM2y/KR/Wr0FKYz7
XAQ3oM745stztPy6pT1nDLkFmuswpRw1TTi+oE0j0+oURPnAOVccyW8xa+y8Z6rM
E9pSCZrPSUJkSC2dmDrkceFJUSsUg1yLf4MgCn55T6zRMlu+iGjvcj0mEd9HppGn
cxkfdZIuPLPyXQ4FgbA225QSyMgWgL92CNjZRcoO6Z1UVD/Tmj+AHFYa/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4/zKT/cK+Ky82NSa9Qjrf6BAMGMB8GA1UdIwQY
MBaAFCEBtjiNZDX1SZCQU4K0HclnX9SQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjA5NWEtM2IzZC00YWM0LTljMzIt
NGRmODkxMjE4OGY3LzEvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jMjA5NWEtM2IzZC00YWM0LTljMzItNGRmODkxMjE4OGY3
LzEvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+6FG/JQ
IU3qJ5hX38vNPkhXVKuYE2N0JvaYhdlzY/6pILgugLwvB9A8kPW2e7YXBmNEcotm
2/MPnYPd/9flZ3tgEEBBsbHCes2NaoP31uejdtYVY0zzoDHhA+0P5SLxCn81ZT0W
Xa3um6V8TnRfrbly7IrsBZmRCg4Sokn1z7A6wu2BC/wcvEIYX96mjDi+klvnUAxh
/OD37ukV/uvJFuBmK3szpsjOK92FlfdkwJoyyy7++NtVZAmTv7tlFBo1RiL7d1I6
nTJUZMFjFysYZwkJdaIUkrHaVNxYZMiUZ5JUySt0SkN5cbForZ+GYF4JOYRRs6Vo
QSz3GgcaR4SjUg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:02:09 2025 by rpki-client