Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
File: igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json)
Hash identifier: 4R7YfouZRg0T7dwswJ0dU6uaAeHed1yOaP63krAKypY=
Subject key identifier: 0A:C4:97:91:EF:3F:7A:49:25:58:F0:37:1E:57:76:C4:02:F3:BB:B7
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial: 0197696087512E23E883354BF083C398D93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
Manifest number: 1520
Signing time: Fri 13 Jun 2025 13:00:23 +0000
Manifest this update: Fri 13 Jun 2025 13:00:23 +0000
Manifest next update: Sat 14 Jun 2025 13:00:23 +0000
Files and hashes: 1: K1ZIbWVMCfOW-sru8Cq6hfagUF8.roa (hash: rL+dt6lYtJBORwZR6VP2yFNbGPaQQW0srIcKRe9EHMc=)
2: W5c6_2upbADmq1K-psylJktpo-8.roa (hash: D7dJaOoXdffWdL/3wJFJkqGRbSD4Xs0mdOEO0fMkEro=)
3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: 6KPA5+r0caHR4g0lJsVO2Rwsd0c2+2DHFGGft1RC3+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:87:51:2e:23:e8:83:35:4b:f0:83:c3:98:d9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Validity
Not Before: Jun 13 13:00:23 2025 GMT
Not After : Jun 14 13:00:23 2025 GMT
Subject: CN=0ac49791ef3f7a492558f0371e5776c402f3bbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:35:51:cc:9b:e0:00:1c:42:9b:cb:e8:34:
0b:43:ca:04:d1:e9:6a:66:cd:93:8a:ef:35:ba:85:
a9:12:07:4a:8e:dd:3a:bc:c8:a6:70:ab:7a:43:3f:
dd:6e:da:f3:59:60:88:ef:ce:b6:36:5d:80:a3:93:
a0:f9:85:b5:e8:94:a7:30:57:96:3b:95:1d:1c:20:
b2:fe:bd:b4:8a:a0:9b:63:63:a0:f7:16:38:0f:91:
90:ee:9e:42:4f:86:bd:34:78:5d:3b:b2:73:66:34:
0b:45:74:16:fc:c1:57:2d:87:e4:e8:63:be:01:66:
85:d3:af:86:cd:a5:f4:b3:2d:2b:9b:d5:31:fd:0b:
eb:99:e5:c5:d3:fc:0a:50:8f:a4:68:cd:48:c4:8d:
ce:38:60:21:c2:22:2f:83:31:d6:50:7a:61:fb:3c:
bd:22:84:27:23:04:26:e3:55:aa:86:e0:92:f5:ae:
ea:c1:ff:3a:5d:0a:ef:e1:56:34:d6:39:15:59:b9:
80:ff:0b:28:65:55:45:67:fa:17:3b:e4:d4:d7:f4:
7c:ad:6d:78:bc:d5:b5:87:64:6d:c4:0a:67:44:dd:
74:32:e5:ca:c8:29:96:d3:d9:63:70:7a:95:bc:21:
d2:85:fd:94:97:f7:bf:14:21:e5:1a:2c:02:ea:98:
29:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:97:91:EF:3F:7A:49:25:58:F0:37:1E:57:76:C4:02:F3:BB:B7
X509v3 Authority Key Identifier:
keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:25:5c:16:36:1d:f0:15:8c:6f:d0:3c:5b:c2:ed:1f:ba:f9:
be:77:95:1b:4c:d5:a6:99:a4:a4:55:9d:5e:54:c1:02:af:dd:
40:88:69:49:2a:1a:23:be:b9:92:3f:d0:c9:4e:d6:62:f3:f7:
f4:8d:16:2b:31:48:06:d4:d6:a6:e2:d6:6b:35:ce:bf:cf:7b:
31:54:13:3f:2a:6d:8d:85:d2:bd:fd:97:df:52:0b:98:82:56:
b1:78:7a:d2:55:3b:32:bb:5b:39:12:97:b9:65:b5:2a:dc:46:
d0:5f:c4:72:6d:cf:1f:0e:94:1e:cf:ec:77:1c:a2:e8:ac:33:
99:e0:53:83:d2:b1:43:b9:2a:88:b7:55:b1:d9:96:a0:71:b5:
2e:1f:50:36:16:cd:58:0d:e1:a5:7a:f3:b2:1b:16:7f:85:31:
7d:d7:68:b6:c3:e9:f3:e7:1b:f6:66:bc:7a:48:e7:23:f3:d2:
73:71:9a:fc:83:6f:06:89:06:68:94:52:20:b8:46:00:79:cd:
33:82:89:59:18:e5:d5:48:12:c4:2a:15:d3:6d:0b:9c:76:32:
7a:4a:29:f9:c7:8c:a4:8f:e4:a2:15:dc:fa:c3:36:6d:54:f4:
02:58:22:79:e6:23:3a:44:3d:93:4f:d9:46:87:15:c6:1b:c2:
29:79:5d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:36:37 2025 by rpki-client