Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
File: IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft (raw, json)
Hash identifier: I2izt6pYYICBEaQLLZPGp65EUMD5qn7snatm1a0/t5M=
Subject key identifier: A6:85:2E:16:9E:EB:05:1D:FC:FB:72:8C:C6:2C:CC:68:C9:C0:36:6D
Authority key identifier: 22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
Certificate issuer: /CN=220c904d430e4f999d147e214515e9cba7ac7e84
Certificate serial: 01976C624B9554EB1FB8C949777B7AD5E1DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
Manifest number: 1521
Signing time: Sat 14 Jun 2025 03:01:10 +0000
Manifest this update: Sat 14 Jun 2025 03:01:10 +0000
Manifest next update: Sun 15 Jun 2025 03:01:10 +0000
Files and hashes: 1: IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl (hash: 0fr1RX3FU84dEun2Onap0H1X2SfzUYLJVICcWpQrX/k=)
2: odQGUN-Kmc4e9-CaRDN5nSDsv3c.roa (hash: 5YkjQrGLAuUCDKfkmJYVY1GAYOevmrtsFzJdDn6fqmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:4b:95:54:eb:1f:b8:c9:49:77:7b:7a:d5:e1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220c904d430e4f999d147e214515e9cba7ac7e84
Validity
Not Before: Jun 14 03:01:10 2025 GMT
Not After : Jun 15 03:01:10 2025 GMT
Subject: CN=a6852e169eeb051dfcfb728cc62ccc68c9c0366d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:a8:79:68:62:ac:fe:93:3c:b6:00:d4:07:
35:11:b5:73:1d:55:be:a9:df:f8:aa:a2:6d:41:d7:
ec:7c:b5:c8:dd:b2:04:c4:3c:21:c8:b7:12:b9:48:
c1:57:bf:83:92:a0:15:2c:23:af:c5:8a:94:5d:ba:
12:0c:71:ef:51:07:d1:db:83:5b:bf:b0:e9:3a:d1:
28:34:b7:fe:2d:98:e2:ca:71:08:ba:d3:d6:8c:98:
ee:9c:60:82:71:d5:42:b4:2f:04:d2:2e:40:d7:1b:
67:c7:d0:02:1c:2e:a2:32:0a:72:16:d8:d1:32:8a:
d0:fb:a5:e2:72:f4:e0:18:57:02:73:fc:32:ad:d7:
9f:36:ea:f7:a8:5d:45:af:e7:cb:7b:60:ff:6a:89:
d5:a2:20:ae:61:41:97:44:15:23:a1:c6:bc:f6:43:
9a:36:88:bd:91:79:ab:fd:47:c2:41:84:0b:0a:ff:
a0:45:7a:a2:88:aa:f2:f1:6b:0f:f8:81:3a:11:c5:
7e:79:af:00:b5:80:21:37:27:86:73:ce:44:1c:06:
86:80:e7:4a:cc:45:77:3d:da:a9:75:b2:9c:94:ed:
c9:ab:8c:bc:2d:7f:f1:08:e5:7e:3c:76:83:eb:38:
55:65:45:d8:9b:83:c1:8c:db:e5:5a:4c:34:cd:c7:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:85:2E:16:9E:EB:05:1D:FC:FB:72:8C:C6:2C:CC:68:C9:C0:36:6D
X509v3 Authority Key Identifier:
keyid:22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ed:fb:3a:13:a0:2e:1d:25:91:81:05:6e:10:fd:37:fe:72:
30:aa:c3:65:e0:dd:cc:10:4c:de:47:f5:1e:2c:bd:6d:d7:a4:
65:73:e4:f9:69:cd:00:52:a0:a9:92:3d:e5:9d:37:70:e2:cd:
a6:5c:5e:3f:1e:8c:a6:8d:a1:94:cc:16:f4:4a:69:51:fa:55:
c8:60:ac:20:ef:e0:8c:7c:80:0b:4c:32:24:f1:d7:74:ea:78:
1a:b7:27:f9:b6:d6:79:6a:de:8c:09:92:e7:06:e6:56:b4:33:
ef:8f:b7:28:f6:4c:d8:4a:49:01:6b:3a:2b:85:f6:85:de:1d:
72:0a:ef:8e:77:06:ca:ee:62:bb:87:dd:f9:57:14:6b:d0:d2:
a2:90:c3:ac:95:c0:a1:3c:c7:bb:14:f7:d3:11:8d:4f:27:c8:
0e:8a:35:58:3b:15:22:1a:9c:8d:10:03:8b:8d:94:7e:29:e3:
75:ff:0c:78:b5:74:24:d4:d7:b0:b1:d5:45:e0:06:06:c2:43:
68:3e:3c:f7:8b:ad:39:d6:57:51:99:b4:3f:ad:d9:eb:af:25:
5e:70:f1:61:08:f3:70:2c:0b:6f:00:4b:48:10:c0:5b:d1:d4:
e6:6a:66:c9:2a:3e:af:56:f6:3a:b9:db:88:54:d6:23:9c:55:
be:cd:af:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:17:07 2025 by rpki-client