Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
File: IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft (raw, json)
Hash identifier: BFbc+kg2+ds1xXW1FQ7v/oAZSstD7HbuMHILviT8CXM=
Subject key identifier: 7B:AC:31:01:7C:94:39:AA:B9:27:39:F5:2E:C7:6E:C4:64:DA:A5:C4
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Certificate issuer: /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial: 0197BAB406D91E1E82593C76A41A62DF4E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
Manifest number: 023E
Signing time: Sun 29 Jun 2025 08:00:49 +0000
Manifest this update: Sun 29 Jun 2025 08:00:49 +0000
Manifest next update: Mon 30 Jun 2025 08:00:49 +0000
Files and hashes: 1: 796f0rlncfK0yTtaD6CkZkwRT4s.roa (hash: AKdoTIc+C1lS10KwNLkNmoqljPTVyyEtoThk5e5KIYw=)
2: IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl (hash: tCSm3rmCklN6i6w8g+b/TbK7v2lcDA+WtZR+T8r/oxo=)
3: a2o1g4APvxlN0jKtdCAcLm-d9r4.roa (hash: 6oo0KVFeY/9ZKOW6xWsGvfnXs8r9cGNTgACNAHR8fOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:06:d9:1e:1e:82:59:3c:76:a4:1a:62:df:4e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Validity
Not Before: Jun 29 08:00:49 2025 GMT
Not After : Jun 30 08:00:49 2025 GMT
Subject: CN=7bac31017c9439aab92739f52ec76ec464daa5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:e8:fd:fe:55:d4:f4:34:7c:a5:29:13:4e:
26:4d:b9:13:5c:fd:53:40:0d:92:95:c4:56:1c:17:
32:e6:66:b2:17:8d:2e:a6:4c:c3:33:3c:59:fd:ca:
f3:7b:66:e0:99:44:5e:d8:cc:61:8f:12:c8:5f:c6:
6e:32:ba:d4:17:84:8d:a6:a8:5e:60:3b:2b:79:60:
e2:35:5d:d0:09:65:51:6d:1b:3f:06:68:f6:5c:fc:
83:cc:f7:c3:e0:17:d7:d8:32:c4:86:a1:9b:04:9d:
35:dd:41:78:10:bc:ee:12:39:1b:4c:97:8a:a0:af:
12:7f:25:be:03:7b:1e:87:8e:6e:85:ad:3e:49:3b:
31:ec:da:dc:ff:70:96:6e:ae:67:fd:02:e4:95:ea:
22:d8:74:e8:a8:d4:e3:d6:5c:7f:47:89:9d:fa:8f:
c9:94:cf:02:26:38:ce:dd:c0:14:55:92:32:49:b6:
65:e1:8b:a7:5e:20:26:3e:79:36:79:1e:80:f1:4d:
59:1b:60:a0:a4:72:a5:a2:03:ee:f9:5c:bf:30:6b:
12:a0:03:00:b0:70:ad:08:89:23:d3:c3:78:b3:a2:
3e:81:4d:a6:d5:f0:35:d6:bd:66:0c:94:0e:a3:a4:
61:68:65:1c:f7:8d:6f:20:bf:09:16:26:1e:cf:e6:
20:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AC:31:01:7C:94:39:AA:B9:27:39:F5:2E:C7:6E:C4:64:DA:A5:C4
X509v3 Authority Key Identifier:
keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c7:67:22:4a:15:29:8f:4e:68:33:79:a3:40:8c:15:4d:7e:
37:ff:5d:29:d4:ef:4e:2b:72:36:1b:11:29:b3:03:d6:66:cb:
87:c2:bd:d7:cc:93:b9:16:32:71:c6:76:b7:f9:a8:c9:db:1a:
42:81:20:24:06:2f:65:dc:f5:4e:53:19:cf:f1:f6:a9:29:4a:
3e:b8:8d:90:11:85:64:16:1b:4b:5f:27:8c:3d:92:2e:d9:92:
ae:57:0a:dd:41:6e:fe:73:2d:cf:9e:d4:01:23:61:6b:c6:12:
51:e2:49:68:cd:bb:3c:12:d1:69:20:58:6f:61:3d:55:e4:c1:
60:64:db:06:86:63:a3:55:d4:e5:f3:72:00:0d:ba:1b:fb:d9:
7a:ca:f0:b9:f0:fb:dd:64:bb:57:50:8c:d2:2d:33:d1:eb:7b:
7c:0b:21:b3:52:9e:2e:e7:6f:ed:c9:59:d0:89:db:17:04:c9:
72:54:87:b8:f1:33:c7:e3:be:ca:f0:33:0a:a6:7a:ef:65:b1:
58:ac:d4:34:47:78:8f:7a:0e:83:b9:6c:5f:f5:6e:00:79:15:
7b:1c:4b:50:dc:47:4c:50:a5:ec:f1:3a:9b:7b:e3:bd:ba:7f:
af:8a:87:50:da:d4:3f:4d:51:4d:00:cd:a0:9b:79:96:c7:4a:
77:06:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:29:46 2025 by rpki-client