Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
File: IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft (raw, json)
Hash identifier: ne6QpArtHdjVS+Q7fhzfPA3YBnHM1ZAZfwHF3S3Uc1I=
Subject key identifier: CF:DD:C2:2A:A4:50:28:A3:F0:90:C9:19:52:3F:A2:68:C1:BC:6F:FE
Authority key identifier: 22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
Certificate issuer: /CN=220c904d430e4f999d147e214515e9cba7ac7e84
Certificate serial: 0197B7B347BE0CD3D9EC285B536E3607C781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 18:01:08 +0000
Manifest this update: Sat 28 Jun 2025 18:01:08 +0000
Manifest next update: Sun 29 Jun 2025 18:01:08 +0000
Files and hashes: 1: IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl (hash: aw+MbshIqG9boxOm9ftbopIL/mnyycMz6uk9jqxrFoI=)
2: odQGUN-Kmc4e9-CaRDN5nSDsv3c.roa (hash: 5YkjQrGLAuUCDKfkmJYVY1GAYOevmrtsFzJdDn6fqmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:47:be:0c:d3:d9:ec:28:5b:53:6e:36:07:c7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220c904d430e4f999d147e214515e9cba7ac7e84
Validity
Not Before: Jun 28 18:01:08 2025 GMT
Not After : Jun 29 18:01:08 2025 GMT
Subject: CN=cfddc22aa45028a3f090c919523fa268c1bc6ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:31:a1:47:ac:d4:b6:97:ef:6b:f8:3d:6f:
8a:f7:91:2a:a4:40:c9:bd:0d:9b:b4:2b:20:12:d2:
30:c2:8a:6e:4d:66:e5:5e:8d:b6:63:12:19:89:ee:
a4:de:42:6a:3b:83:2e:de:5b:5c:fb:b6:58:b2:97:
b7:75:fa:54:b2:26:2c:de:00:e2:af:8a:37:dc:54:
67:e6:20:f6:2e:fb:29:b7:15:61:bd:6d:aa:83:6b:
28:05:20:5f:f6:ba:79:4a:56:aa:ac:06:d6:f9:86:
cb:f3:1c:a2:4d:09:35:21:8f:07:29:6d:c7:25:de:
d2:6b:15:fe:c3:8a:93:81:08:a6:dc:67:4a:6a:fb:
c2:81:5d:6f:ac:8e:aa:f8:37:50:77:d2:f4:74:3d:
1f:8c:d4:d5:1c:0b:1b:fb:ee:4a:0d:cd:d0:af:3b:
e4:88:f4:52:a9:24:af:1e:9c:7c:a3:57:90:d0:81:
16:b5:0b:f4:82:32:18:93:82:3f:42:10:92:09:21:
7d:7b:91:b8:47:a9:d2:f1:bc:08:e2:c1:af:ce:4c:
f7:9c:c9:c3:b7:39:e2:2f:de:3d:41:39:14:ae:9f:
02:fc:95:44:43:81:d2:e6:e6:8e:cf:b8:58:ad:bd:
b7:e7:70:df:5c:c6:0c:2a:92:10:d8:ed:ba:9e:cf:
2b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DD:C2:2A:A4:50:28:A3:F0:90:C9:19:52:3F:A2:68:C1:BC:6F:FE
X509v3 Authority Key Identifier:
keyid:22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4b:ae:e5:6e:60:ba:bb:9b:a4:61:a0:89:de:ed:4d:43:15:
72:a1:33:12:06:38:e6:4c:84:47:7b:a2:3f:f1:13:ac:23:a2:
3e:44:7c:09:6f:22:cf:df:dc:34:d0:a5:13:df:4d:28:1d:d0:
98:d2:aa:73:88:01:48:cf:93:10:f9:11:75:53:84:61:7c:f4:
1c:c4:57:4e:69:0c:75:44:c6:b6:04:53:2d:5f:0f:4b:ec:22:
28:b2:25:44:ea:52:8c:65:13:d3:0d:5c:6c:ee:42:4e:4a:b2:
d8:bb:27:ba:26:37:bd:ee:1b:18:11:19:49:b1:b4:93:d8:2d:
94:43:bc:9f:4b:71:e3:4b:e1:60:b8:f3:27:c3:ed:b8:69:a7:
57:12:29:9e:38:83:e5:32:28:bd:34:82:54:10:9c:83:e9:3e:
7b:a9:ea:51:34:cf:44:01:fa:27:50:d4:34:f7:cc:98:93:db:
8f:a3:6e:11:b0:74:6b:bc:da:ea:14:57:91:ef:22:b8:3c:5b:
2e:e3:89:41:96:c1:d0:61:c4:3c:a9:6c:73:2a:f3:83:8e:a9:
36:94:3a:99:4c:75:b7:96:b0:9b:3d:d9:1f:f0:fe:2a:c4:af:
53:00:af:1c:93:f7:d5:58:fb:3f:c1:36:59:07:64:3e:96:7c:
fe:59:f2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:13 2025 by rpki-client