Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: kSABGckgoHYw1MRIZEXxXlALwk1WhNFjlHoFsDOUA6Q=
Subject key identifier: F3:B3:E2:DB:18:D5:91:F1:2A:6C:D7:61:72:86:14:97:94:C5:BD:B6
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 0196B9DABE9F4F7BE11A65DBB45413EB918D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 11:00:42 +0000
Manifest this update: Sat 10 May 2025 11:00:42 +0000
Manifest next update: Sun 11 May 2025 11:00:42 +0000
Files and hashes: 1: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: TR+LGJIuubNVK4AW+x2qTrLzzChR0iqMD4A5C/QEoEs=)
2: LkiVXeukns_JdhONh74qaRMFBIM.roa (hash: sMLMXJ4GQAf8vdiNw4uFl/nK1+dFlOKAlp+mNZ+YliU=)
3: cd1yHX5UcqryiXUb-rkYleNrwXs.roa (hash: 6h3q+Ehg11sL4jSJjG152eGWFDBSFWsjBJ9eqGT5BtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:be:9f:4f:7b:e1:1a:65:db:b4:54:13:eb:91:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: May 10 11:00:42 2025 GMT
Not After : May 11 11:00:42 2025 GMT
Subject: CN=f3b3e2db18d591f12a6cd7617286149794c5bdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:8e:86:e0:3f:c3:2c:be:84:b6:83:91:8d:
26:75:8b:c5:14:4f:c5:25:99:63:6a:61:ef:e8:d0:
be:45:d6:a6:0f:c5:03:c9:29:44:ed:f4:0c:d4:32:
8a:6a:cb:f8:49:10:a5:72:d8:77:ae:e2:3e:21:b5:
1e:6c:6d:d4:c5:a5:3c:40:a1:f7:15:e0:f2:51:90:
0c:01:89:1e:3f:07:63:42:2f:14:72:a6:48:ee:cb:
0a:82:9d:06:5b:a8:6d:2b:c3:24:be:01:6b:c4:e3:
fe:b2:b8:20:84:6c:a1:96:0f:af:d0:2b:36:e8:8a:
bd:7d:2e:80:1e:00:2a:88:f9:48:7b:68:2e:33:3d:
23:c6:e4:b5:81:cf:e8:1e:cd:0f:19:4f:9e:a3:01:
af:7a:8c:ae:f0:cd:49:ac:10:28:6f:46:df:c7:93:
35:91:94:69:ef:df:49:a9:d6:6d:df:db:0e:64:86:
05:c7:02:38:20:e5:d4:7b:08:a9:fc:b4:41:db:14:
20:79:d4:bf:70:8e:1b:7c:ef:ad:15:a6:61:08:85:
3f:c6:02:2e:57:6d:3b:4c:9e:0e:60:85:fa:ab:c2:
87:01:57:7d:48:54:b5:f5:49:1e:30:80:70:05:10:
d4:45:29:87:a3:66:2f:23:db:81:20:45:83:da:94:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B3:E2:DB:18:D5:91:F1:2A:6C:D7:61:72:86:14:97:94:C5:BD:B6
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:77:b5:94:15:49:ed:ab:69:91:4c:cb:1b:51:ed:5b:4c:d0:
00:09:0a:fa:00:82:82:48:76:1b:66:43:17:93:98:37:33:06:
70:c0:c3:da:55:67:86:51:a3:03:ec:37:72:7f:3c:d9:58:26:
fd:be:dc:f0:2e:d8:cd:4f:d6:45:9d:09:dc:f2:dc:eb:d3:5c:
ed:a8:3c:8e:fb:83:64:32:b1:b0:77:b7:cf:87:67:28:d9:60:
0f:4d:80:7c:4b:c4:26:d6:c9:0e:f4:b0:65:3d:ac:1f:6c:53:
b9:3f:fb:84:c6:b1:a4:97:76:24:4e:15:8d:9a:e1:7b:0a:b5:
20:8f:00:88:00:67:17:9f:53:dd:26:0e:49:a1:55:35:2e:ea:
72:7c:f4:6c:6f:e9:2f:7b:ac:eb:00:22:73:b3:c2:86:31:d8:
41:80:98:48:49:99:9d:92:a1:a6:0b:5f:80:e2:74:fd:0b:81:
49:fb:2a:c7:53:47:5e:bb:9e:7b:ea:74:f9:73:e3:18:cc:74:
43:77:2d:7f:da:02:7c:10:8d:24:77:11:0d:2c:4e:9d:63:5f:
e4:42:68:a0:50:e5:ad:64:b5:d1:f0:a6:99:d1:a0:b5:b7:96:
78:4a:78:f7:91:63:dc:02:cf:bb:cd:58:5b:9a:c4:d5:9f:98:
ba:3b:17:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa52r6fT3vhGmXbtFQT65GNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmY2ODA4ZTA2MDQ2OTcyNzBmYWEzYzNkYjE1OWY3ZmU5
OGVjZGQwHhcNMjUwNTEwMTEwMDQyWhcNMjUwNTExMTEwMDQyWjAzMTEwLwYDVQQD
EyhmM2IzZTJkYjE4ZDU5MWYxMmE2Y2Q3NjE3Mjg2MTQ5Nzk0YzViZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCeOhuA/wyy+hLaDkY0mdYvFFE/F
JZljamHv6NC+RdamD8UDySlE7fQM1DKKasv4SRClcth3ruI+IbUebG3UxaU8QKH3
FeDyUZAMAYkePwdjQi8UcqZI7ssKgp0GW6htK8MkvgFrxOP+srgghGyhlg+v0Cs2
6Iq9fS6AHgAqiPlIe2guMz0jxuS1gc/oHs0PGU+eowGveoyu8M1JrBAob0bfx5M1
kZRp799JqdZt39sOZIYFxwI4IOXUewip/LRB2xQgedS/cI4bfO+tFaZhCIU/xgIu
V207TJ4OYIX6q8KHAVd9SFS19UkeMIBwBRDURSmHo2YvI9uBIEWD2pSrBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOz4tsY1ZHxKmzXYXKGFJeUxb22MB8GA1UdIwQY
MBaAFCBvaAjgYEaXJw+qPD2xWff+mOzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUt
ZWI2MmU4YzRkZmE5LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUtZWI2MmU4YzRkZmE5
LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3Xe1lBVJ
7atpkUzLG1HtW0zQAAkK+gCCgkh2G2ZDF5OYNzMGcMDD2lVnhlGjA+w3cn882Vgm
/b7c8C7YzU/WRZ0J3PLc69Nc7ag8jvuDZDKxsHe3z4dnKNlgD02AfEvEJtbJDvSw
ZT2sH2xTuT/7hMaxpJd2JE4VjZrhewq1II8AiABnF59T3SYOSaFVNS7qcnz0bG/p
L3us6wAic7PChjHYQYCYSEmZnZKhpgtfgOJ0/QuBSfsqx1NHXruee+p0+XPjGMx0
Q3ctf9oCfBCNJHcRDSxOnWNf5EJooFDlrWS10fCmmdGgtbeWeEp495Fj3ALPu81Y
W5rE1Z+YujsXpQ==
-----END CERTIFICATE-----
Generated at Sat May 10 14:40:10 2025 by rpki-client