Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
File: igKbHrUc1PS8TdmFoOxlOnXspAw.mft (raw, json)
Hash identifier: 3LyE2yGRiqFsC3kXgbiaVYC3OKB+gCSFcGz9/Mu/H7M=
Subject key identifier: B5:E1:28:72:22:69:E6:E8:C1:C0:E0:D9:B1:E9:FB:DB:44:17:73:9A
Authority key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Certificate issuer: /CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Certificate serial: 0197B74566E649BD7791B903499E8A30258A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:01:08 +0000
Manifest this update: Sat 28 Jun 2025 16:01:08 +0000
Manifest next update: Sun 29 Jun 2025 16:01:08 +0000
Files and hashes: 1: 4qVVqmmqA7OspRA_VRFwRBkyv9o.roa (hash: v13MYpWF4w6556nbUyMzn5zdKadLhTn87Mtg6y+99Gg=)
2: igKbHrUc1PS8TdmFoOxlOnXspAw.crl (hash: s4lO/8qR6WKbxT/K5QDcknYxHPG9mgtyb5y5FbI/SpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:66:e6:49:bd:77:91:b9:03:49:9e:8a:30:25:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Validity
Not Before: Jun 28 16:01:08 2025 GMT
Not After : Jun 29 16:01:08 2025 GMT
Subject: CN=b5e128722269e6e8c1c0e0d9b1e9fbdb4417739a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:3f:10:23:f6:18:62:0f:f9:62:25:d3:79:
c3:70:3e:00:30:f3:29:74:e6:20:b0:99:9c:98:41:
16:55:2e:41:7a:47:fc:0b:e0:1f:ef:9e:d4:1c:53:
02:2d:bb:d2:5e:c1:13:7a:ef:ff:97:db:56:b5:1a:
8b:b6:16:aa:cf:e7:93:cd:ab:1f:7f:14:c9:b9:dc:
41:90:29:9d:88:78:e4:0b:02:3d:9a:6d:b9:5f:ef:
d9:f2:60:af:51:37:77:5a:34:09:0a:e9:96:5e:c8:
ff:ba:5a:23:e1:5e:12:b7:fd:b1:7d:d9:6d:2e:c2:
ed:b6:01:9a:8b:8e:55:dc:24:f5:b6:ce:3c:7f:8a:
99:a0:26:01:77:bd:7e:5f:8b:ee:31:32:7f:8a:4c:
8f:89:24:99:a2:87:71:1f:94:f4:e7:38:36:ba:73:
f7:f7:da:45:2b:d8:47:f0:08:4f:4b:03:14:7b:f2:
73:f1:b7:7e:bf:37:a0:55:aa:e3:fe:26:6b:06:b9:
0a:a9:5d:f0:01:51:45:6d:34:b2:ed:20:13:cd:cc:
2c:c0:61:bc:9c:63:e8:7e:70:3b:8d:2b:46:bc:1a:
9a:b8:9c:95:05:9c:ee:d4:52:23:24:af:c7:9b:e1:
51:9a:34:25:5e:51:62:56:2a:21:2e:c2:e2:ff:fc:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E1:28:72:22:69:E6:E8:C1:C0:E0:D9:B1:E9:FB:DB:44:17:73:9A
X509v3 Authority Key Identifier:
keyid:8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7e:d8:12:6f:b6:39:da:2d:09:2a:f1:44:65:1e:d4:0d:2d:
1a:71:8a:cc:46:70:1a:09:c2:69:48:90:23:fe:64:4a:10:46:
e6:7d:cf:21:ff:dc:e4:b0:a2:33:86:11:1e:96:ec:72:36:ea:
b5:29:cd:38:47:fd:56:58:95:27:9c:12:f0:03:50:80:ac:d4:
20:95:38:9f:4e:4c:c0:68:6a:8b:12:d7:c8:2a:0b:1c:ae:9e:
71:07:53:c0:f9:50:c8:da:bf:fd:2f:73:a8:0c:82:1b:55:37:
8f:e4:2b:74:43:54:8b:45:21:d3:5b:5a:31:86:9c:b8:51:b2:
64:42:3d:23:6e:78:c5:3a:3a:3e:93:af:05:a5:44:31:98:b1:
06:df:08:f2:1f:4b:38:13:da:4a:e2:72:ab:61:b6:0a:a9:56:
bb:af:5f:7b:82:73:98:8d:8b:4f:e0:13:e1:98:8e:7b:ce:e8:
78:29:23:5e:3b:b2:d0:82:08:a7:05:b7:97:ac:85:c0:37:fe:
03:31:b5:d9:04:fa:96:52:25:7d:d6:2b:a7:54:24:06:47:d9:
29:e4:d4:63:4a:a6:16:e2:73:45:64:a8:8e:a2:ea:07:e5:ac:
b7:cb:bd:de:ff:0e:90:3d:a0:06:3c:bd:d5:ef:a8:19:46:1f:
27:d2:40:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RWbmSb13kbkDSZ6KMCWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDI5YjFlYjUxY2Q0ZjRiYzRkZDk4NWEwZWM2NTNhNzVl
Y2E0MGMwHhcNMjUwNjI4MTYwMTA4WhcNMjUwNjI5MTYwMTA4WjAzMTEwLwYDVQQD
EyhiNWUxMjg3MjIyNjllNmU4YzFjMGUwZDliMWU5ZmJkYjQ0MTc3MzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu50/ECP2GGIP+WIl03nDcD4AMPMp
dOYgsJmcmEEWVS5Bekf8C+Af757UHFMCLbvSXsETeu//l9tWtRqLthaqz+eTzasf
fxTJudxBkCmdiHjkCwI9mm25X+/Z8mCvUTd3WjQJCumWXsj/uloj4V4St/2xfdlt
LsLttgGai45V3CT1ts48f4qZoCYBd71+X4vuMTJ/ikyPiSSZoodxH5T05zg2unP3
99pFK9hH8AhPSwMUe/Jz8bd+vzegVarj/iZrBrkKqV3wAVFFbTSy7SATzcwswGG8
nGPofnA7jStGvBqauJyVBZzu1FIjJK/Hm+FRmjQlXlFiViohLsLi//z9HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXhKHIiaebowcDg2bHp+9tEF3OaMB8GA1UdIwQY
MBaAFIoCmx61HNT0vE3ZhaDsZTp17KQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdLYkhyVWMxUFM4VGRtRm9PeGxPblhzcEF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84ZDIwYmItZDcyZC00N2FhLWJlNDgt
MzgyNjljZWY1ZTAxLzEvaWdLYkhyVWMxUFM4VGRtRm9PeGxPblhzcEF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My84ZDIwYmItZDcyZC00N2FhLWJlNDgtMzgyNjljZWY1ZTAx
LzEvaWdLYkhyVWMxUFM4VGRtRm9PeGxPblhzcEF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe37YEm+2
OdotCSrxRGUe1A0tGnGKzEZwGgnCaUiQI/5kShBG5n3PIf/c5LCiM4YRHpbscjbq
tSnNOEf9VliVJ5wS8ANQgKzUIJU4n05MwGhqixLXyCoLHK6ecQdTwPlQyNq//S9z
qAyCG1U3j+QrdENUi0Uh01taMYacuFGyZEI9I254xTo6PpOvBaVEMZixBt8I8h9L
OBPaSuJyq2G2CqlWu69fe4JzmI2LT+AT4ZiOe87oeCkjXjuy0IIIpwW3l6yFwDf+
AzG12QT6llIlfdYrp1QkBkfZKeTUY0qmFuJzRWSojqLqB+Wst8u93v8OkD2gBjy9
1e+oGUYfJ9JAuQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:20 2025 by rpki-client