Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier: 7T37/UXsuItSa7l1ir23Ld/3+HKxc9RGZtQRSqGaq68=
Subject key identifier: 2A:91:83:2E:63:EA:51:2C:AB:89:20:DE:A2:93:C7:03:78:FB:57:51
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 01976D7440385C589557C35326556DF19504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number: 109B
Signing time: Sat 14 Jun 2025 08:00:24 +0000
Manifest this update: Sat 14 Jun 2025 08:00:24 +0000
Manifest next update: Sun 15 Jun 2025 08:00:24 +0000
Files and hashes: 1: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: 34hGczDrIfEa8A4lreF2kIqP+lOqZRjdDQpTPxNhEdI=)
2: p1lTEKoE5j8hz4v8NDCkph3vHZg.roa (hash: MpUjtf+IJwp4Op1WMMfO/E6/RTTXrzH8PWzDLygUE3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:40:38:5c:58:95:57:c3:53:26:55:6d:f1:95:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Jun 14 08:00:24 2025 GMT
Not After : Jun 15 08:00:24 2025 GMT
Subject: CN=2a91832e63ea512cab8920dea293c70378fb5751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:be:27:b0:70:36:9f:ca:34:55:e5:fa:01:
a0:17:40:7d:8b:d3:95:94:15:db:6a:94:ad:80:0b:
28:1b:3a:f3:a1:cc:83:a4:74:57:7e:6b:cd:20:c6:
ae:af:a3:27:fb:6c:37:36:3d:f9:0b:f1:c2:21:4c:
b5:9d:3e:8b:6a:da:26:06:3d:5c:23:9e:43:74:e5:
39:e9:3e:f7:8b:77:ca:35:f4:f4:8c:f8:1f:d1:44:
20:a3:b5:d0:80:72:11:7a:aa:dd:01:e0:d6:05:c6:
b3:fe:87:1d:69:af:52:f1:0d:f6:1c:ad:3c:56:68:
81:1d:41:91:68:07:20:4e:ad:ac:16:aa:a8:32:b2:
fa:59:93:73:25:b7:5a:ac:b5:5f:2f:1d:97:fd:38:
8a:23:a6:e4:a8:5d:39:0d:38:24:93:0f:8c:47:22:
06:9e:88:e8:0a:b1:bf:99:de:c9:ae:ce:df:b4:e4:
56:1b:fc:c1:4f:99:c9:99:9c:34:f9:58:f7:50:d6:
ea:53:85:67:5b:d7:62:0d:a3:a2:dc:8e:d2:45:07:
e0:b7:ad:86:c4:4a:02:a3:13:f0:0c:09:c5:6e:d4:
d8:0d:51:90:f1:16:af:a2:4a:eb:2e:f1:21:27:16:
10:48:fa:d7:0d:c3:dc:5e:fc:8a:3d:a1:65:08:d9:
77:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:91:83:2E:63:EA:51:2C:AB:89:20:DE:A2:93:C7:03:78:FB:57:51
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:60:7c:e0:6d:9f:96:7b:37:54:54:49:8a:69:07:e4:25:0b:
f9:f2:97:91:ab:69:61:42:11:51:60:a6:bd:e6:14:35:2a:0e:
96:cd:7b:5c:23:1b:14:d6:09:94:81:39:ac:84:52:49:ce:f5:
bd:86:18:c2:21:53:9c:42:22:d8:af:b3:65:83:63:7e:03:1d:
1c:24:62:76:74:c4:55:70:9b:90:78:61:f0:c5:13:50:df:39:
f9:1c:3e:29:33:8e:d0:94:b7:e4:83:3c:c7:92:5f:e9:10:30:
bf:d0:9f:10:f9:09:f0:08:3c:f6:df:85:04:27:0f:7b:ea:d6:
28:7c:d2:a7:4e:af:22:f6:02:bf:96:0f:46:dd:58:56:f3:e0:
be:10:2f:19:e7:39:91:07:a5:60:99:e4:d3:aa:04:73:e3:e2:
99:4a:87:96:41:ff:99:89:9a:fe:ae:e5:a9:de:9e:3b:98:cf:
00:92:c3:03:ee:06:24:b3:9b:fc:74:49:60:70:52:d4:ba:87:
f0:81:a4:6c:9e:7a:d0:dc:0d:79:76:25:ea:ed:30:9b:46:c2:
e6:1a:f3:0e:2b:e4:9c:e7:e0:92:0b:ca:79:7d:08:e4:fc:62:
46:df:60:32:72:6c:fb:44:39:f0:99:cb:ed:5a:f3:94:dd:e5:
b3:dd:55:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:14:30 2025 by rpki-client