Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
File: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft (raw, json)
Hash identifier: NBu5NP2s6hpf80Dd8GHtbaGCVjsk+ta3H7kytq0oy40=
Subject key identifier: 01:FC:45:70:C9:80:67:A0:78:7E:9E:58:9C:3A:EA:9F:D7:DC:F8:04
Authority key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
Certificate issuer: /CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Certificate serial: 0197C45BE85A3B2D5A57422392AE902EF0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
Manifest number: 05B8
Signing time: Tue 01 Jul 2025 05:00:46 +0000
Manifest this update: Tue 01 Jul 2025 05:00:46 +0000
Manifest next update: Wed 02 Jul 2025 05:00:46 +0000
Files and hashes: 1: 8A-P_ORhWgCvGzrDZbvgnuXv8-Q.roa (hash: oBZBRDrJFN8P0rq4HbYuCOhWt6Wuv4vtGNK+w0AylXw=)
2: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl (hash: wXHr4SAQraV+0em/IT8T6OeOz1SjPCyfS4fOhiO3bNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:5b:e8:5a:3b:2d:5a:57:42:23:92:ae:90:2e:f0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Validity
Not Before: Jul 1 05:00:46 2025 GMT
Not After : Jul 2 05:00:46 2025 GMT
Subject: CN=01fc4570c98067a0787e9e589c3aea9fd7dcf804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:61:c3:01:17:3f:c8:fd:ed:de:d8:2f:68:
44:81:cc:d0:d2:5c:48:8b:3b:97:34:de:6a:d6:77:
2e:0e:66:ff:8c:10:c3:c8:b2:c6:a9:94:46:a7:5b:
d3:44:c4:58:4e:20:62:94:4d:9b:c0:0f:16:61:d5:
59:28:73:72:2f:3d:ce:e7:04:19:4a:27:d7:81:e8:
2d:fd:6c:13:46:5b:ad:07:f8:2f:d2:b4:60:a2:b1:
6a:2c:f5:34:26:5c:36:67:b4:63:06:4b:97:af:e8:
cc:5f:75:bd:01:7d:80:ec:9f:fe:e8:5a:d0:ab:30:
bd:04:e0:20:d5:f7:83:8f:0e:e0:cd:9b:63:fa:9b:
20:e9:f3:d9:29:72:51:ce:b2:c6:6f:2a:33:21:86:
e0:bc:9c:17:1b:ac:c5:05:70:3e:75:9e:51:e1:bd:
c8:4b:40:a5:c2:6c:ee:25:d8:89:72:b3:a9:3e:22:
75:dd:ed:04:81:6e:02:3b:ce:7c:8f:94:d5:2b:31:
63:4d:59:49:ca:19:b8:fd:1f:ea:82:e8:71:d5:ac:
3f:c4:2c:a6:d5:4e:ff:81:97:1e:88:ee:a0:e1:83:
10:e7:ca:a7:c0:7d:fd:67:ca:7f:7c:dd:3c:91:82:
f0:4d:fe:c3:56:f0:ee:6b:9c:4d:08:13:98:71:c6:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FC:45:70:C9:80:67:A0:78:7E:9E:58:9C:3A:EA:9F:D7:DC:F8:04
X509v3 Authority Key Identifier:
keyid:88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4d:50:ad:fe:69:a3:99:2a:cc:d2:ca:17:2c:08:28:65:b8:
15:9a:a9:89:b9:fd:ac:b0:89:f5:b1:0b:cc:f4:b1:86:d8:a4:
dc:9d:55:96:a1:5b:bd:e5:1d:06:1b:73:f9:44:07:bf:a1:90:
57:a5:34:33:aa:ad:3a:bf:95:dc:aa:49:f6:ef:4d:d0:e7:bb:
0a:92:38:fc:a5:72:41:f6:d7:1e:68:66:65:7c:e3:a7:fc:64:
37:a4:bb:a6:c6:4d:a6:a9:e9:81:53:90:87:bd:59:d6:f0:dd:
6f:3c:8c:49:1b:80:84:80:c0:ee:9b:d6:15:c0:a1:c7:88:39:
a0:21:a3:57:17:0e:b4:fe:49:49:a3:42:28:e0:32:62:9f:56:
f7:fa:9d:18:2c:90:c3:09:ca:fc:4d:77:e0:d0:21:57:92:f1:
ab:e1:71:45:2d:49:fb:f8:1e:74:6a:c3:66:82:fa:0e:8d:bb:
bf:b7:1c:e5:ea:6f:af:53:8c:24:74:99:0b:58:de:71:68:00:
68:ef:df:86:3b:df:f9:aa:c1:56:dd:86:13:71:f1:6b:cb:81:
0d:29:f5:3c:3d:33:b9:9d:a7:d9:8c:e3:e9:65:7f:bb:c8:37:
17:f9:2e:b8:2a:14:d9:f4:eb:6c:d8:3d:60:d3:1f:c3:9d:54:
1a:d2:b2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:24:32 2025 by rpki-client