Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json)
Hash identifier: 2beFY3rkFk/9OWLDVMNUaqmBM9UhM371cy+Fr0KBwRw=
Subject key identifier: 00:A0:D9:A2:66:3F:26:80:42:75:44:C4:0E:09:B8:14:83:AC:7D:4C
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial: 0197B745386753E40403FBF9B8F79AE4C1B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
Manifest number: 1517
Signing time: Sat 28 Jun 2025 16:00:56 +0000
Manifest this update: Sat 28 Jun 2025 16:00:56 +0000
Manifest next update: Sun 29 Jun 2025 16:00:56 +0000
Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: WyemCsupz8KRcbuk5GbyCyYTr3PwiDviAlIsLci4oyM=)
2: oL5s4daZ2-CvSDbZedMFWpoaJg4.roa (hash: rBJTh0rRi4HBxgXoejT0Pcmh+tBjyPVq1RYIy0Ljiec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:38:67:53:e4:04:03:fb:f9:b8:f7:9a:e4:c1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Validity
Not Before: Jun 28 16:00:56 2025 GMT
Not After : Jun 29 16:00:56 2025 GMT
Subject: CN=00a0d9a2663f2680427544c40e09b81483ac7d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:27:82:9a:ae:aa:6c:b2:0d:2a:ef:c7:7f:
80:1d:43:51:8b:c0:15:8b:0c:42:c0:81:87:b9:d8:
2e:de:6a:a5:91:87:7f:9a:1c:59:70:e3:85:3a:90:
9f:b4:72:28:7d:b0:d2:d0:4a:0b:15:e8:e6:ec:3e:
1c:e5:4a:e2:a5:00:96:5c:ee:d6:fe:4a:71:46:b3:
cb:a6:6f:ad:d5:a4:37:e7:f0:5c:e1:8d:b2:46:e3:
8e:81:a6:de:25:12:c1:2d:b7:61:d3:66:a3:9a:7c:
3d:4c:59:a6:a0:f4:8c:9d:91:3f:6c:49:2a:58:1d:
43:55:64:74:db:e9:49:e9:0b:d6:c8:33:f2:70:61:
15:80:5e:e8:70:f9:37:0e:1f:47:03:d8:c5:f7:02:
ec:f7:53:81:a6:86:98:c4:4e:ac:d8:d1:ed:8e:ee:
f1:6a:fd:d7:0d:ad:31:30:c3:40:20:e0:4f:02:4c:
69:91:c9:8f:f4:e0:84:ab:5d:d3:4f:6c:e6:1e:ce:
e0:57:da:86:c5:78:80:a6:89:b3:8d:0b:ba:ed:88:
53:f2:4e:5e:84:86:54:28:21:20:22:36:c3:d8:41:
7c:79:a6:63:dc:14:fe:a2:d0:d4:b8:5b:02:9c:0a:
41:29:15:8a:f0:b5:e9:de:ef:07:4d:b1:21:57:e5:
13:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A0:D9:A2:66:3F:26:80:42:75:44:C4:0E:09:B8:14:83:AC:7D:4C
X509v3 Authority Key Identifier:
keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ee:ee:5d:e1:2b:d7:33:de:39:cb:22:d1:be:17:1b:8e:40:
70:29:e3:b5:d8:4c:87:fa:c3:0d:90:80:0f:21:16:fb:99:4c:
5d:1c:b3:e9:e9:2d:9b:8a:3e:3f:b8:b3:4b:28:af:6e:cb:a8:
76:8e:3f:1e:b3:e4:38:8d:d6:f0:9f:d7:8b:7d:c0:79:c0:ae:
0a:f5:b3:77:f7:db:7e:07:92:d9:f6:cd:b6:8d:2a:30:1a:f8:
0a:24:bf:19:bf:44:63:55:73:f3:74:87:e2:a6:b0:d3:93:a5:
64:2c:d7:e3:9e:72:fa:25:1e:6c:ea:23:33:38:97:64:cd:24:
70:b8:49:56:d6:8d:03:51:dc:ff:58:73:0c:ed:9c:fb:c0:51:
f2:83:7b:1a:a7:01:5a:ff:3a:87:37:f3:4e:80:eb:8c:19:da:
40:4e:c1:c3:7f:45:a7:6f:29:c4:ae:58:40:31:b8:e7:f8:1e:
61:c2:cd:94:20:d3:3d:8a:b9:00:7e:a3:cb:a6:ba:63:6a:d9:
5a:be:24:ab:f7:79:78:54:5b:34:ea:59:2a:a5:31:85:6c:8e:
67:d0:b6:6c:a0:90:89:5b:58:5c:d1:b5:21:a6:48:2d:9c:38:
76:09:f3:ae:20:61:5b:42:3c:b8:4c:99:51:0c:75:a5:2e:d1:
c1:5b:a8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:41 2025 by rpki-client