Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
File: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft (raw, json)
Hash identifier: aHnJtxsePkDf4XZ5oU2kWVlcnIp1hJm8SlZkn5dmPMI=
Subject key identifier: CD:EE:2B:1E:99:0C:4A:DA:80:96:31:5D:3B:CE:DA:5E:EE:5F:9F:BE
Authority key identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
Certificate issuer: /CN=886faf1820074b79b6025ddffab25cb3f774424e
Certificate serial: 01987298CA1327E4A421D85F28174D10C06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
Manifest number: 0198
Signing time: Mon 04 Aug 2025 01:01:12 +0000
Manifest this update: Mon 04 Aug 2025 01:01:12 +0000
Manifest next update: Tue 05 Aug 2025 01:01:12 +0000
Files and hashes: 1: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl (hash: C2L15w7wXn+FJVqKQOQM9w5QedGD7FtYbS0Rg6MkMMU=)
2: pBOV7_scguiJteXj3vNSqNhNc5U.roa (hash: vCrIj0wpM69dzNSkAC34US2sC7UYedyyZzr33rt/1E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:ca:13:27:e4:a4:21:d8:5f:28:17:4d:10:c0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886faf1820074b79b6025ddffab25cb3f774424e
Validity
Not Before: Aug 4 01:01:12 2025 GMT
Not After : Aug 5 01:01:12 2025 GMT
Subject: CN=cdee2b1e990c4ada8096315d3bceda5eee5f9fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:7a:53:4d:a4:f5:64:d6:b4:27:12:35:fa:
71:ef:27:33:f5:c6:fa:c2:cd:f1:18:a0:fa:2a:95:
59:8a:bb:c1:9f:cc:20:3e:63:57:1f:f8:96:a4:47:
f2:c4:a5:3a:f7:a6:8f:79:72:bd:78:52:89:30:23:
f8:af:49:b3:0a:d5:bf:ec:c6:b1:8e:54:9a:21:39:
38:2a:02:4e:62:42:28:7c:38:5e:79:91:2c:6b:ec:
67:2d:fe:3c:20:72:8b:50:7e:bd:f5:bb:85:23:0e:
ae:f9:d5:06:29:11:be:ac:53:57:12:98:58:d5:cb:
99:b4:18:77:c0:c8:be:ae:07:c9:d6:8d:86:e9:03:
e9:c8:d5:be:5b:3a:90:11:0d:bb:01:c9:b2:71:5b:
0c:3c:1d:92:94:e8:56:d4:68:83:fd:57:e4:4b:ba:
37:89:7b:92:7f:0f:2a:a0:e3:65:bc:59:36:f2:b9:
51:a1:59:f4:43:ec:b4:53:d5:f4:33:ed:47:ba:7c:
69:66:87:44:ef:1d:59:a9:3c:1d:6c:5d:4f:f7:8d:
ad:ab:bc:00:c2:d0:8b:7a:ae:28:29:c9:96:ba:6d:
24:d9:4f:70:cd:31:d2:1b:48:57:94:ac:6e:a5:0f:
01:ea:59:5d:db:90:96:4c:0e:01:8c:e2:25:8d:00:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EE:2B:1E:99:0C:4A:DA:80:96:31:5D:3B:CE:DA:5E:EE:5F:9F:BE
X509v3 Authority Key Identifier:
keyid:88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:eb:fd:47:82:20:56:d3:df:c2:f3:fb:a5:47:5f:50:8c:72:
59:44:ef:23:ac:9b:7f:77:d8:57:54:e9:2c:a6:ae:ac:37:2c:
56:a6:5c:e4:90:52:4e:1f:a8:a3:34:ca:7e:97:d4:ce:1c:c3:
e2:f4:ba:a4:0c:1a:cc:1c:4b:54:54:40:95:33:8d:c4:da:ad:
58:bb:50:6c:98:70:04:30:5c:22:5c:32:32:53:7a:1d:4b:8d:
95:27:ae:91:73:59:3d:64:ff:5a:b2:38:be:ea:fd:8e:65:82:
78:ed:8f:80:b6:02:7f:4e:54:ac:59:6d:dd:e7:5a:5f:30:c3:
dd:29:26:e0:92:59:5a:e5:d7:b4:f1:b7:40:87:5a:2b:06:e2:
58:9a:a6:3b:2d:bd:62:6b:0a:37:99:ed:9b:39:9f:86:e3:20:
73:57:1e:48:b8:c6:f5:0a:4a:bf:7a:50:e1:1e:d5:66:c8:aa:
e4:a8:94:42:6f:ba:3f:5b:a2:c5:e3:b5:8f:a0:07:9a:7f:86:
67:b6:b9:98:86:ed:3e:af:ef:18:6a:ea:26:89:31:8d:12:12:
df:9d:ff:30:ac:0a:c3:1f:e5:49:98:21:57:e3:f0:e2:29:cc:
e3:b8:c5:3b:41:aa:85:ee:57:66:29:b1:f0:d5:22:ff:10:ae:
0b:1c:c9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:22 2025 by rpki-client