Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: enH1XI4ltdoFejoLmGFrevq+EDp0vRFH/g5Cg7JQOjc=
Subject key identifier: 18:0D:FD:4C:34:9B:FA:64:08:37:86:B2:1B:E3:A9:93:F4:33:B3:CF
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 0197BAB44461F4947C97B0B4E01431F5A26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 08:01:05 +0000
Manifest this update: Sun 29 Jun 2025 08:01:05 +0000
Manifest next update: Mon 30 Jun 2025 08:01:05 +0000
Files and hashes: 1: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: l8vnxw4Js+BLQP1bk84MxlVNANH2HJiixwi0TU1tWbw=)
2: LkiVXeukns_JdhONh74qaRMFBIM.roa (hash: sMLMXJ4GQAf8vdiNw4uFl/nK1+dFlOKAlp+mNZ+YliU=)
3: cd1yHX5UcqryiXUb-rkYleNrwXs.roa (hash: 6h3q+Ehg11sL4jSJjG152eGWFDBSFWsjBJ9eqGT5BtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:44:61:f4:94:7c:97:b0:b4:e0:14:31:f5:a2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Jun 29 08:01:05 2025 GMT
Not After : Jun 30 08:01:05 2025 GMT
Subject: CN=180dfd4c349bfa64083786b21be3a993f433b3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:2d:4e:1b:37:2a:bd:80:05:38:6f:72:97:
bd:d7:fa:51:b0:0d:47:1e:f5:9a:57:aa:86:9c:0e:
f2:cb:ee:00:4c:6e:ed:ed:bb:2f:e9:f4:29:ee:03:
3b:cc:f6:b4:6a:c0:e9:ee:ee:25:f6:fd:3e:cf:3f:
de:ff:fa:d2:a4:86:c7:b5:97:7e:2b:de:a8:4e:fe:
4c:ba:ae:08:09:f2:77:a4:6a:5e:10:9a:67:cb:d9:
a9:e8:3d:c6:82:48:19:17:e5:c4:62:fb:3b:18:4e:
be:a3:63:fe:c3:bf:49:fb:38:36:b5:4b:63:db:37:
d7:7d:ad:e2:84:de:56:6e:a4:83:82:42:d4:db:b6:
ab:5e:1a:08:28:07:e5:f5:33:c5:ff:62:d5:91:45:
63:18:bb:a8:52:a0:9a:f1:5e:83:40:fe:11:75:60:
ae:09:e7:8d:c7:36:e4:2c:16:1c:bd:2f:a6:1a:c2:
73:99:b7:51:50:36:ce:3f:6e:cd:0c:3e:6a:ec:1f:
a3:d7:7f:07:d0:06:5d:d4:f6:f3:d9:8a:cf:80:7a:
00:a9:b5:f5:b3:b9:2f:91:ad:2b:93:33:7d:20:6a:
b4:39:a4:0c:0f:b0:6c:c2:f0:3a:d3:ff:98:fc:6a:
36:f0:58:37:03:f0:2a:1c:bc:5c:e9:12:5d:c8:8a:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0D:FD:4C:34:9B:FA:64:08:37:86:B2:1B:E3:A9:93:F4:33:B3:CF
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f1:87:54:43:0d:b5:a9:39:79:c3:ce:ef:63:38:82:b6:e8:
a7:21:59:95:16:4c:f4:fb:c2:92:e3:b9:25:5b:8b:dd:16:d6:
c9:a3:6a:5a:5c:4c:bd:bb:80:20:72:f2:a2:f0:f1:43:e2:64:
c7:0a:47:63:90:c9:d5:f7:dd:58:18:14:6c:f4:89:78:2c:c2:
40:50:8d:46:f8:fe:f2:38:1e:eb:60:62:ad:82:80:2d:31:01:
6e:67:25:38:94:c0:60:59:59:05:1f:34:72:a5:fe:b6:6b:93:
b3:f1:94:22:fe:82:32:8b:1b:f6:b3:88:0e:31:1b:76:d9:bd:
9f:7b:c9:8d:de:c3:0f:1e:cf:c8:45:e3:38:a5:ea:66:79:30:
f1:2c:0c:6b:0e:b6:92:9d:a6:78:66:b8:81:25:44:61:83:13:
c2:56:79:b8:dd:bb:71:4f:c9:91:b4:3f:5b:61:35:13:02:b9:
7a:b5:0e:4b:17:a3:1d:f7:37:6b:98:93:7e:69:cc:26:b7:f0:
88:3d:55:ef:76:ae:fc:f0:f3:01:a0:8a:c4:a7:ad:e2:04:64:
04:a6:78:88:e4:ea:67:cf:1f:e8:22:f7:fe:25:81:6a:62:84:
a7:2e:38:57:32:d0:22:b5:dc:2a:c8:e2:d2:2e:af:14:af:58:
17:ec:2d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:46:32 2025 by rpki-client