Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json)
Hash identifier: F03NQDx6EZ93qZI9ZTihbBJfvqL5r8/pMJFWNykOTpc=
Subject key identifier: 86:FB:A5:81:FD:88:37:95:E7:5E:4A:6C:0E:A8:1B:AA:94:44:58:DB
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 019683910F5F9172240619ECFFE4E244B1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
Manifest number: 1521
Signing time: Tue 29 Apr 2025 22:00:43 +0000
Manifest this update: Tue 29 Apr 2025 22:00:43 +0000
Manifest next update: Wed 30 Apr 2025 22:00:43 +0000
Files and hashes: 1: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: 3xulpdsZZIFF0hO8l8be4BswPdvqKbeJTT48kpmdWlI=)
2: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=)
3: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=)
4: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=)
5: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=)
6: TUZ6y7pTC-5h8yiVjQcSGGkQXIQ.roa (hash: RP8h/kz7Pd7+pel4dUfykVi8a9ETWLO7hEEL7qoA3AU=)
7: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=)
8: eOgvquigvzDPj-8dhQt95xkui_E.roa (hash: zEpy4lJB9tJ5de8zvRSwkcXfAVk3pin2iihLqa8DHd8=)
9: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:0f:5f:91:72:24:06:19:ec:ff:e4:e2:44:b1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: Apr 29 22:00:43 2025 GMT
Not After : Apr 30 22:00:43 2025 GMT
Subject: CN=86fba581fd883795e75e4a6c0ea81baa944458db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:e2:fc:1b:01:0c:e6:31:8c:47:ec:6c:92:
d4:e5:d8:06:1f:41:65:c8:32:30:0a:27:df:96:16:
c6:95:8b:4c:91:ad:67:b6:13:e5:27:73:5a:d6:b9:
fb:17:49:14:d4:df:d8:9d:6f:8c:63:e7:03:e7:c2:
b1:da:ea:3d:0b:bf:1b:db:ef:0d:53:c8:b1:80:07:
a1:6d:65:ac:d1:cb:c0:60:79:d7:cf:35:c9:e8:19:
bc:fe:25:65:42:c6:c0:8c:c1:e2:0c:be:6c:db:50:
94:a0:05:ea:ec:c9:25:fb:32:4c:4b:d7:61:f7:09:
66:93:f7:c4:2a:a6:41:7a:65:b1:56:27:22:56:03:
5d:9b:93:bd:5a:87:37:3d:55:01:d7:fe:89:f0:6e:
fd:75:54:f5:20:85:88:89:b3:7b:c3:d0:88:a2:db:
ab:4e:e9:5c:1d:0d:73:5a:c8:a3:ec:8c:20:e9:86:
7b:28:d0:31:59:fb:8e:e8:9e:6b:71:fc:e8:23:c8:
86:a6:c2:d9:46:12:57:92:bb:e7:9a:64:f2:56:ee:
30:44:32:4d:0f:71:7d:6f:87:77:ed:86:47:83:39:
92:05:fb:5a:44:45:10:b9:58:17:db:e1:bc:c4:99:
cf:05:7d:55:7b:15:f4:ca:3b:09:65:63:41:e9:7f:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FB:A5:81:FD:88:37:95:E7:5E:4A:6C:0E:A8:1B:AA:94:44:58:DB
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6b:1d:97:50:ee:c8:54:24:10:15:4c:c7:eb:e4:1a:cb:1f:
a3:7c:c6:9e:e6:2b:31:c7:23:9b:4c:e6:99:0c:0a:d5:9b:17:
e7:3e:d2:ba:f5:4d:62:78:79:5e:d2:a2:7d:a3:be:34:96:ec:
35:1e:91:01:46:86:fa:7c:14:22:8e:73:4d:29:39:73:fa:36:
64:67:e8:5b:42:b6:15:17:d4:0a:03:aa:77:6c:2d:1f:dd:5c:
d1:b7:ec:9a:3a:f7:6e:ff:8d:b0:05:51:d9:6e:1a:54:ed:01:
c8:cf:27:de:df:ca:33:41:e7:b2:0f:36:19:5c:45:92:e0:11:
d1:b8:ac:71:30:c8:a0:65:13:59:cd:b7:ef:f7:7e:8b:3e:b0:
14:0b:d9:3c:22:4d:2e:b0:ab:e0:8e:5f:c7:7c:f0:21:b7:1f:
d1:7a:fc:7e:8c:43:d0:0d:5e:0b:7a:05:b3:f3:c8:08:a3:cf:
86:c8:d9:ba:0f:01:9e:76:b9:c9:42:b8:9e:b1:7f:69:a6:e1:
15:67:8c:f5:d1:14:12:08:3d:ac:f3:9e:6a:46:df:77:5b:24:
b6:97:74:96:e7:24:f8:38:43:76:c1:49:5c:aa:f0:79:91:73:
33:22:ff:80:72:fe:b7:a0:b3:5d:47:f0:2c:71:1f:8f:a8:bb:
00:d8:e7:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkQ9fkXIkBhns/+TiRLHMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5
MjFlYzMwHhcNMjUwNDI5MjIwMDQzWhcNMjUwNDMwMjIwMDQzWjAzMTEwLwYDVQQD
Eyg4NmZiYTU4MWZkODgzNzk1ZTc1ZTRhNmMwZWE4MWJhYTk0NDQ1OGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gji/BsBDOYxjEfsbJLU5dgGH0Fl
yDIwCifflhbGlYtMka1nthPlJ3Na1rn7F0kU1N/YnW+MY+cD58Kx2uo9C78b2+8N
U8ixgAehbWWs0cvAYHnXzzXJ6Bm8/iVlQsbAjMHiDL5s21CUoAXq7Mkl+zJMS9dh
9wlmk/fEKqZBemWxViciVgNdm5O9Woc3PVUB1/6J8G79dVT1IIWIibN7w9CIotur
TulcHQ1zWsij7Iwg6YZ7KNAxWfuO6J5rcfzoI8iGpsLZRhJXkrvnmmTyVu4wRDJN
D3F9b4d37YZHgzmSBftaREUQuVgX2+G8xJnPBX1VexX0yjsJZWNB6X/DfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIb7pYH9iDeV515KbA6oG6qURFjbMB8GA1UdIwQY
MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt
YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy
LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2sdl1Du
yFQkEBVMx+vkGssfo3zGnuYrMccjm0zmmQwK1ZsX5z7SuvVNYnh5XtKifaO+NJbs
NR6RAUaG+nwUIo5zTSk5c/o2ZGfoW0K2FRfUCgOqd2wtH91c0bfsmjr3bv+NsAVR
2W4aVO0ByM8n3t/KM0Hnsg82GVxFkuAR0biscTDIoGUTWc237/d+iz6wFAvZPCJN
LrCr4I5fx3zwIbcf0Xr8foxD0A1eC3oFs/PICKPPhsjZug8Bnna5yUK4nrF/aabh
FWeM9dEUEgg9rPOeakbfd1sktpd0luck+DhDdsFJXKrweZFzMyL/gHL+t6CzXUfw
LHEfj6i7ANjn0g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:57:31 2025 by rpki-client