Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json)
Hash identifier: rDIA9ZjjdutlB4lE2dwgngw5WXS09Y6ZvnJTqhtc5qI=
Subject key identifier: E1:CB:B4:F4:52:75:B5:DC:02:C4:24:CA:1F:08:73:A7:AC:BA:71:52
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 019681A27E25707207AF93E7984A3AC9FC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
Manifest number: 1520
Signing time: Tue 29 Apr 2025 13:00:32 +0000
Manifest this update: Tue 29 Apr 2025 13:00:32 +0000
Manifest next update: Wed 30 Apr 2025 13:00:32 +0000
Files and hashes: 1: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: juijlwhUCoKEH8VfasSnq2lM0i/h9NuKhoMR5w3jAoI=)
2: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=)
3: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=)
4: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=)
5: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=)
6: TUZ6y7pTC-5h8yiVjQcSGGkQXIQ.roa (hash: RP8h/kz7Pd7+pel4dUfykVi8a9ETWLO7hEEL7qoA3AU=)
7: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=)
8: eOgvquigvzDPj-8dhQt95xkui_E.roa (hash: zEpy4lJB9tJ5de8zvRSwkcXfAVk3pin2iihLqa8DHd8=)
9: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:7e:25:70:72:07:af:93:e7:98:4a:3a:c9:fc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: Apr 29 13:00:32 2025 GMT
Not After : Apr 30 13:00:32 2025 GMT
Subject: CN=e1cbb4f45275b5dc02c424ca1f0873a7acba7152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:ee:b9:81:13:45:1e:f2:b4:c3:df:2e:90:
17:6d:f4:7e:0a:ce:e5:a1:4e:4a:5b:01:fa:b2:5b:
83:5b:97:9c:5f:33:cb:3b:04:d3:a9:11:a1:7e:8f:
ea:d4:87:13:7c:c7:f4:01:f4:a1:e2:64:65:1d:7c:
b7:21:4f:28:22:2d:6e:5f:90:4b:c4:e6:e9:80:2e:
ef:8d:e3:c9:8c:7b:24:cc:e6:a2:37:20:46:e5:7b:
11:01:d9:ea:06:29:7d:1a:62:88:42:b5:72:d6:74:
b5:0d:46:51:bd:b8:f4:d2:e0:4b:02:13:eb:4f:af:
1b:71:5d:27:18:bd:34:29:41:65:ab:68:9e:ae:ee:
79:21:07:b3:1b:1e:25:c3:00:1c:5d:ef:ef:4d:18:
04:52:49:9f:80:d4:fa:22:88:6c:98:e2:16:31:d4:
4f:8a:56:bc:ce:c1:04:03:d7:35:59:9a:90:68:12:
1c:db:ea:ed:93:3d:b8:5c:18:d6:ee:16:c1:da:82:
e8:43:34:c6:80:3e:4e:54:0b:c2:68:10:da:73:63:
5b:27:27:f8:7b:6a:93:6d:19:78:d8:18:78:d6:2e:
65:fd:ba:28:ba:2f:e0:5f:c3:f2:09:d9:a8:ad:d7:
f1:49:d4:7b:13:a1:d7:1b:67:42:be:83:18:3c:76:
4c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CB:B4:F4:52:75:B5:DC:02:C4:24:CA:1F:08:73:A7:AC:BA:71:52
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e0:b4:1c:f0:2d:e7:f4:ae:18:3a:1e:e5:1b:ca:55:14:7f:
09:7d:13:43:9a:62:c1:a4:03:df:85:c3:98:d8:d0:29:6e:42:
30:ad:be:25:c6:11:cf:36:fb:84:4f:d0:0f:9b:0d:7f:d6:43:
db:f8:57:4e:30:59:5d:de:07:6d:ff:cb:0e:23:bf:b0:c9:99:
e3:ea:cb:c4:56:76:a2:60:64:08:dc:77:07:39:25:9f:33:65:
d9:80:e5:fb:aa:0b:d0:a6:15:98:a5:89:f9:39:56:ca:33:aa:
e9:dc:79:45:70:6e:d7:7d:3d:4e:3e:91:f5:af:92:c6:39:95:
5c:ca:f0:ad:76:d7:c8:1e:4f:8a:58:22:19:65:88:f6:e4:71:
72:0d:df:8e:e8:78:5d:71:d6:f6:ab:e9:98:6f:34:da:08:cb:
f4:0c:b7:e9:bd:71:c8:6f:60:f8:a9:2a:58:31:dd:61:9f:48:
cb:c3:b5:a7:fb:d9:ea:f5:f3:1b:4a:fb:ae:a0:61:40:0b:b3:
70:4a:55:ef:2c:97:14:27:f0:49:52:78:0e:52:15:ad:bd:08:
49:9e:cc:52:31:69:55:48:24:a6:f7:74:42:02:97:86:04:20:
22:81:cc:69:15:46:67:e7:23:ed:07:be:f4:af:96:9f:93:08:
01:3e:b2:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBon4lcHIHr5PnmEo6yfwXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5
MjFlYzMwHhcNMjUwNDI5MTMwMDMyWhcNMjUwNDMwMTMwMDMyWjAzMTEwLwYDVQQD
EyhlMWNiYjRmNDUyNzViNWRjMDJjNDI0Y2ExZjA4NzNhN2FjYmE3MTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0LuuYETRR7ytMPfLpAXbfR+Cs7l
oU5KWwH6sluDW5ecXzPLOwTTqRGhfo/q1IcTfMf0AfSh4mRlHXy3IU8oIi1uX5BL
xObpgC7vjePJjHskzOaiNyBG5XsRAdnqBil9GmKIQrVy1nS1DUZRvbj00uBLAhPr
T68bcV0nGL00KUFlq2ieru55IQezGx4lwwAcXe/vTRgEUkmfgNT6IohsmOIWMdRP
ila8zsEEA9c1WZqQaBIc2+rtkz24XBjW7hbB2oLoQzTGgD5OVAvCaBDac2NbJyf4
e2qTbRl42Bh41i5l/booui/gX8PyCdmordfxSdR7E6HXG2dCvoMYPHZMXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHLtPRSdbXcAsQkyh8Ic6esunFSMB8GA1UdIwQY
MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt
YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy
LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuC0HPAt
5/SuGDoe5RvKVRR/CX0TQ5piwaQD34XDmNjQKW5CMK2+JcYRzzb7hE/QD5sNf9ZD
2/hXTjBZXd4Hbf/LDiO/sMmZ4+rLxFZ2omBkCNx3BzklnzNl2YDl+6oL0KYVmKWJ
+TlWyjOq6dx5RXBu1309Tj6R9a+SxjmVXMrwrXbXyB5PilgiGWWI9uRxcg3fjuh4
XXHW9qvpmG802gjL9Ay36b1xyG9g+KkqWDHdYZ9Iy8O1p/vZ6vXzG0r7rqBhQAuz
cEpV7yyXFCfwSVJ4DlIVrb0ISZ7MUjFpVUgkpvd0QgKXhgQgIoHMaRVGZ+cj7Qe+
9K+Wn5MIAT6yGQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:41:42 2025 by rpki-client