Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
File: IxG6LbhgGYJqsQLhnyyoogkxaFI.mft (raw, json)
Hash identifier: 2alPRgDSwhhaOqgDnWGC8UVoIMBi0JZ/aBVZkOnKlaY=
Subject key identifier: D3:06:86:0C:A0:23:E3:0F:07:B5:EE:C7:DC:5D:12:8F:2D:D6:2A:A0
Authority key identifier: 23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
Certificate issuer: /CN=2311ba2db86019826ab102e19f2ca8a209316852
Certificate serial: 01969DF5A62AAB6DD2AB22079CB988AE76BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
Manifest number: 21
Signing time: Mon 05 May 2025 01:00:43 +0000
Manifest this update: Mon 05 May 2025 01:00:43 +0000
Manifest next update: Tue 06 May 2025 01:00:43 +0000
Files and hashes: 1: IxG6LbhgGYJqsQLhnyyoogkxaFI.crl (hash: y4PdfY2xZ+bWAQW698O8xvivKBKWt1Q7fYRkp4O9F8o=)
2: VEacVgiUB2mSTjU4m54DaN-4dWE.roa (hash: 4yBoFANUnzxzanObGvRjvvX/EIqsjlCUPMYRv3xQRSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:a6:2a:ab:6d:d2:ab:22:07:9c:b9:88:ae:76:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2311ba2db86019826ab102e19f2ca8a209316852
Validity
Not Before: May 5 01:00:43 2025 GMT
Not After : May 6 01:00:43 2025 GMT
Subject: CN=d306860ca023e30f07b5eec7dc5d128f2dd62aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:f6:9e:35:b3:9f:ae:f7:61:87:12:61:21:
1e:58:e1:e5:4b:9d:db:67:65:65:c1:1b:d8:39:34:
8b:fd:00:c0:a5:f1:5a:a3:99:1a:18:31:d1:23:e0:
c6:f5:57:7a:84:4d:a4:5a:1d:d5:e6:10:d6:6f:50:
ef:dd:01:9f:e3:78:38:c3:a8:af:a5:d2:ec:72:e7:
d8:28:96:0c:27:9e:5a:46:81:21:e0:79:65:c2:c2:
42:5e:00:e2:b7:e3:4e:07:d3:2f:82:d5:d1:fd:e4:
6e:cc:04:f9:1c:00:73:e8:dc:60:f3:c5:20:78:f1:
a1:40:21:6e:59:6f:94:89:73:b6:5f:69:2e:4f:85:
a4:7c:a1:df:f8:dc:22:ae:ee:d1:71:6f:80:89:6b:
1b:78:a8:06:a6:ad:2c:e2:b8:a8:c2:b5:e0:30:7d:
34:d2:8a:02:d2:6f:6b:de:ce:ed:ea:2b:3c:12:f6:
7b:15:0a:82:8e:f9:ec:ba:26:16:4a:a8:ab:d5:f9:
cf:9f:de:aa:e5:52:c1:ec:0f:b0:b3:d3:4d:3c:99:
96:78:91:b7:1b:a3:3b:47:02:84:3e:d8:30:67:5e:
9d:bd:70:a8:23:d3:15:74:76:0a:dd:5b:87:ae:cb:
30:4a:eb:78:6e:c5:99:ae:ed:75:82:7b:65:9e:cd:
76:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:06:86:0C:A0:23:E3:0F:07:B5:EE:C7:DC:5D:12:8F:2D:D6:2A:A0
X509v3 Authority Key Identifier:
keyid:23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cb:1a:5d:b7:2c:f9:b3:e8:31:8c:48:bc:d4:de:7f:0a:25:
1f:b2:53:cd:18:40:10:ad:41:f0:07:ee:95:93:a5:22:19:b1:
1d:55:1d:c5:6a:a6:87:14:37:a9:dc:5f:13:48:7f:ec:3d:4c:
bf:87:6c:79:6f:ed:49:03:16:a5:52:41:71:19:fa:b0:6b:43:
ac:90:57:b2:38:c9:8a:21:6e:64:ac:fd:ea:1e:f1:a9:0a:76:
3a:03:f5:44:0a:99:c1:52:e0:32:74:4a:bb:73:c4:ae:97:6e:
99:08:e1:b5:64:10:64:3d:8f:65:21:e0:c3:4d:2b:c6:46:c5:
80:4a:02:55:fc:14:8d:48:eb:35:a3:5d:ea:71:ca:7f:74:ae:
0e:c5:f3:fe:f5:60:f4:97:6a:2f:af:7d:93:96:25:a6:1a:06:
22:94:77:ca:ef:4b:c7:49:dc:31:63:14:0a:ea:3d:08:3e:c7:
84:60:e3:9c:12:5c:fa:fd:9b:2c:11:0d:08:b3:91:97:90:71:
2b:2f:96:64:33:b3:e4:08:e4:df:69:a9:49:1c:2a:da:21:1a:
a1:c2:01:d1:c5:c8:0d:6d:8f:0d:7e:48:40:50:3d:f9:72:2f:
25:92:36:00:bf:91:8a:38:4a:e1:0d:6e:a2:08:7b:52:ce:30:
b0:0e:82:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZad9aYqq23SqyIHnLmIrna/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMTFiYTJkYjg2MDE5ODI2YWIxMDJlMTlmMmNhOGEyMDkz
MTY4NTIwHhcNMjUwNTA1MDEwMDQzWhcNMjUwNTA2MDEwMDQzWjAzMTEwLwYDVQQD
EyhkMzA2ODYwY2EwMjNlMzBmMDdiNWVlYzdkYzVkMTI4ZjJkZDYyYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmj2njWzn673YYcSYSEeWOHlS53b
Z2VlwRvYOTSL/QDApfFao5kaGDHRI+DG9Vd6hE2kWh3V5hDWb1Dv3QGf43g4w6iv
pdLscufYKJYMJ55aRoEh4HllwsJCXgDit+NOB9MvgtXR/eRuzAT5HABz6Nxg88Ug
ePGhQCFuWW+UiXO2X2kuT4WkfKHf+Nwiru7RcW+AiWsbeKgGpq0s4riowrXgMH00
0ooC0m9r3s7t6is8EvZ7FQqCjvnsuiYWSqir1fnPn96q5VLB7A+ws9NNPJmWeJG3
G6M7RwKEPtgwZ16dvXCoI9MVdHYK3VuHrsswSut4bsWZru11gntlns122QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMGhgygI+MPB7Xux9xdEo8t1iqgMB8GA1UdIwQY
MBaAFCMRui24YBmCarEC4Z8sqKIJMWhSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82ZGFlZWUtZWQzYi00YmYwLTk0Njgt
MmYxNzg3YmJmMTE2LzEvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82ZGFlZWUtZWQzYi00YmYwLTk0NjgtMmYxNzg3YmJmMTE2
LzEvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocsaXbcs
+bPoMYxIvNTefwolH7JTzRhAEK1B8AfulZOlIhmxHVUdxWqmhxQ3qdxfE0h/7D1M
v4dseW/tSQMWpVJBcRn6sGtDrJBXsjjJiiFuZKz96h7xqQp2OgP1RAqZwVLgMnRK
u3PErpdumQjhtWQQZD2PZSHgw00rxkbFgEoCVfwUjUjrNaNd6nHKf3SuDsXz/vVg
9JdqL699k5YlphoGIpR3yu9Lx0ncMWMUCuo9CD7HhGDjnBJc+v2bLBENCLORl5Bx
Ky+WZDOz5Ajk32mpSRwq2iEaocIB0cXIDW2PDX5IQFA9+XIvJZI2AL+RijhK4Q1u
ogh7Us4wsA6CXQ==
-----END CERTIFICATE-----
Generated at Mon May 5 08:17:15 2025 by rpki-client