Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json)
Hash identifier: YAG0Gw/wQltmG8TB6L8qkpXoWv7pqO5+z/5cZ2b4nNY=
Subject key identifier: 7C:8C:D7:21:FB:2E:79:1F:BF:BB:E2:A6:1F:34:5D:95:74:BB:7C:8C
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial: 0198D705AA14028AF3E23BAA3D4A195B4C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
Manifest number: 15AC
Signing time: Sat 23 Aug 2025 13:02:09 +0000
Manifest this update: Sat 23 Aug 2025 13:02:09 +0000
Manifest next update: Sun 24 Aug 2025 13:02:09 +0000
Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: i483bMasaJWljNRJZsYL5lLwTkQAi1Ex8dBJeEsinpE=)
2: oL5s4daZ2-CvSDbZedMFWpoaJg4.roa (hash: rBJTh0rRi4HBxgXoejT0Pcmh+tBjyPVq1RYIy0Ljiec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:aa:14:02:8a:f3:e2:3b:aa:3d:4a:19:5b:4c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Validity
Not Before: Aug 23 13:02:09 2025 GMT
Not After : Aug 24 13:02:09 2025 GMT
Subject: CN=7c8cd721fb2e791fbfbbe2a61f345d9574bb7c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:d1:7c:90:83:45:63:30:c4:4a:7b:db:bd:
89:e7:1a:1e:0e:0b:ac:f4:61:7e:8d:c5:a3:3c:b4:
68:ca:69:dc:87:ae:14:c6:1d:ba:2b:ac:f4:0f:9a:
ca:c8:f2:30:43:e8:b6:16:89:99:d8:8e:88:7e:5d:
ce:f1:04:fd:99:5d:98:f9:f4:29:63:3a:74:19:e1:
30:7f:95:02:57:21:1f:e8:d9:d3:1b:3a:91:1c:0d:
53:dc:69:e1:c9:6f:65:fd:08:de:ad:50:7b:2b:5b:
dc:61:7c:9f:fa:bb:d8:85:24:56:df:eb:0e:9a:f3:
e3:48:85:00:04:ec:33:11:d9:02:0a:c6:dc:aa:ed:
99:39:ec:e2:48:e7:a3:de:73:2c:26:4a:1a:11:2f:
be:e6:c8:ac:f2:14:d5:ab:70:10:f9:fb:af:cb:3e:
a6:a5:0f:51:81:e2:25:98:36:c7:38:44:bb:25:87:
24:ac:b7:0c:df:3b:fc:2c:a5:b0:e1:71:68:48:98:
a2:1a:6c:5c:4f:9a:a6:8b:4d:ff:37:e8:f8:d2:32:
a9:e8:e8:a9:cd:1b:43:2f:d9:55:67:1e:7e:cd:2e:
ed:c2:c2:35:ff:5d:c3:da:e7:99:ec:41:5f:91:fe:
b0:20:43:f0:e0:34:26:50:1f:29:a3:f7:60:c4:50:
72:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8C:D7:21:FB:2E:79:1F:BF:BB:E2:A6:1F:34:5D:95:74:BB:7C:8C
X509v3 Authority Key Identifier:
keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2e:a8:da:12:30:79:a7:ad:f8:93:e2:d6:0e:39:a3:33:e6:
84:4f:13:b8:5e:9c:fa:2a:ab:72:dd:8d:f5:76:a4:57:0f:2c:
52:fe:3a:d2:d8:fb:38:d0:c4:7a:31:91:67:bf:d7:af:af:76:
ae:bd:49:22:99:ae:a4:b3:a8:8c:2c:8d:74:d8:43:3d:5f:55:
c6:80:f5:2a:b5:49:35:ba:e6:e6:dc:27:b3:38:8a:14:5e:46:
1d:e2:7d:06:81:50:30:ce:f6:af:3c:c7:27:d1:6f:5f:f9:a7:
5d:a9:12:04:c7:53:0a:d9:62:d6:92:ec:35:84:c9:93:ce:80:
3f:39:52:ec:13:dd:07:e7:ab:09:bc:38:08:47:e3:50:61:a8:
00:67:21:42:64:83:d2:9f:57:ad:83:76:61:40:cf:b4:a1:01:
fa:94:5b:2a:46:40:ce:87:63:cf:88:aa:1f:9d:92:1d:0b:3f:
ab:bf:e5:a2:10:58:7a:b2:b8:29:da:38:05:10:d7:7b:b8:e2:
92:c3:1d:52:15:fd:2c:fc:9f:63:41:b4:5c:1a:ba:07:8d:ee:
d1:06:6b:17:82:f5:a3:c1:1a:37:91:e7:a5:60:e4:0b:9e:87:
42:e7:3e:01:e3:22:bf:ba:9a:bf:bb:4f:c2:62:3a:50:70:bf:
5d:e7:c1:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBaoUAorz4juqPUoZW0w0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmQxODJhM2I0NGE3YmUwNWQzZWU3MGRjOTBhODVkNTdh
YmZiOGQwHhcNMjUwODIzMTMwMjA5WhcNMjUwODI0MTMwMjA5WjAzMTEwLwYDVQQD
Eyg3YzhjZDcyMWZiMmU3OTFmYmZiYmUyYTYxZjM0NWQ5NTc0YmI3YzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxDRfJCDRWMwxEp7272J5xoeDgus
9GF+jcWjPLRoymnch64Uxh26K6z0D5rKyPIwQ+i2FomZ2I6Ifl3O8QT9mV2Y+fQp
Yzp0GeEwf5UCVyEf6NnTGzqRHA1T3GnhyW9l/QjerVB7K1vcYXyf+rvYhSRW3+sO
mvPjSIUABOwzEdkCCsbcqu2ZOeziSOej3nMsJkoaES++5sis8hTVq3AQ+fuvyz6m
pQ9RgeIlmDbHOES7JYckrLcM3zv8LKWw4XFoSJiiGmxcT5qmi03/N+j40jKp6Oip
zRtDL9lVZx5+zS7twsI1/13D2ueZ7EFfkf6wIEPw4DQmUB8po/dgxFByzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyM1yH7Lnkfv7viph80XZV0u3yMMB8GA1UdIwQY
MBaAFCBtGCo7RKe+BdPucNyQqF1Xq/uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNmYyZWUtMDQ3Ni00MGI0LWJiNmEt
NjYwNzc4MDk5YjNkLzEvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lNmYyZWUtMDQ3Ni00MGI0LWJiNmEtNjYwNzc4MDk5YjNk
LzEvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACC6o2hIw
eaet+JPi1g45ozPmhE8TuF6c+iqrct2N9XakVw8sUv460tj7ONDEejGRZ7/Xr692
rr1JIpmupLOojCyNdNhDPV9VxoD1KrVJNbrm5twnsziKFF5GHeJ9BoFQMM72rzzH
J9FvX/mnXakSBMdTCtli1pLsNYTJk86APzlS7BPdB+erCbw4CEfjUGGoAGchQmSD
0p9XrYN2YUDPtKEB+pRbKkZAzodjz4iqH52SHQs/q7/lohBYerK4Kdo4BRDXe7ji
ksMdUhX9LPyfY0G0XBq6B43u0QZrF4L1o8EaN5HnpWDkC56HQuc+AeMiv7qav7tP
wmI6UHC/XefBfQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:43 2025 by rpki-client