Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
File: IkCgcYD88zY191fMFEng1dvU_bg.mft (raw, json)
Hash identifier: EdJFNxIzkP+oSBp5gQzPg7mXYIAh5mNXg5B6p/cWA5k=
Subject key identifier: C6:B9:0E:C1:42:EA:2A:9E:33:2F:F1:B4:7D:67:FD:99:0F:6B:DE:D4
Authority key identifier: 22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
Certificate issuer: /CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Certificate serial: 0197B5C4FF0033EACDFB40C14686401D2C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
Manifest number: 019C
Signing time: Sat 28 Jun 2025 09:01:15 +0000
Manifest this update: Sat 28 Jun 2025 09:01:15 +0000
Manifest next update: Sun 29 Jun 2025 09:01:15 +0000
Files and hashes: 1: IkCgcYD88zY191fMFEng1dvU_bg.crl (hash: 0MZCdHi8NuMCM+G6J3nnx0lFK5mvd7yY5nf3rUu0EcM=)
2: nvx0QRZQO1QzuvMN00Bva6hTGZw.roa (hash: Gw59i4bicuVuHEY8V6dHsuW9MPHvsYhnw1rq0LLdv8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:ff:00:33:ea:cd:fb:40:c1:46:86:40:1d:2c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Validity
Not Before: Jun 28 09:01:15 2025 GMT
Not After : Jun 29 09:01:15 2025 GMT
Subject: CN=c6b90ec142ea2a9e332ff1b47d67fd990f6bded4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0a:74:08:e1:38:f7:73:70:b1:aa:c6:0c:5e:
a9:48:86:17:bb:74:17:38:9e:94:c1:7e:dd:2d:dd:
79:50:df:b7:58:87:9c:72:ab:07:69:78:e2:8f:66:
c8:c1:77:68:83:b7:85:93:73:1a:27:fa:8f:1f:fc:
94:58:ef:e6:4a:55:4c:f0:c4:77:ee:bb:6e:82:50:
8c:ce:c3:46:a9:ff:80:fd:38:96:34:6b:b0:50:34:
ed:d4:e3:5b:0f:cc:c5:60:70:a2:eb:44:40:b3:12:
d1:fa:76:a1:a3:27:a7:4b:0b:a4:46:21:f7:93:49:
83:47:93:0b:bb:0a:60:42:44:47:77:94:70:cc:fb:
7a:17:00:d9:e6:eb:62:d2:f2:9f:22:53:50:ab:fd:
3e:19:95:de:8a:3b:d6:1c:79:77:45:7f:5d:db:5c:
c9:e2:cf:66:a2:96:e7:8c:1a:fb:ee:b0:a7:15:63:
30:86:7f:8e:c4:60:d6:ab:cc:30:33:fe:07:db:23:
5b:77:a0:a9:50:ab:a8:98:03:dc:08:19:62:c5:cd:
4d:3f:43:b2:f8:09:de:cc:e0:d9:5e:8a:27:f9:1b:
64:a3:c5:58:cb:ec:79:d9:7b:15:f2:79:ce:2a:c5:
1c:07:1f:43:9c:cb:ec:37:9b:33:d2:c8:e8:fb:1f:
fa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B9:0E:C1:42:EA:2A:9E:33:2F:F1:B4:7D:67:FD:99:0F:6B:DE:D4
X509v3 Authority Key Identifier:
keyid:22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fa:cb:0f:61:9b:49:c9:08:3b:38:4d:35:57:e1:dd:01:5d:
02:83:e9:d5:e6:c3:76:a5:82:e5:f6:ba:c0:3d:f1:11:3a:06:
9f:2f:c8:93:d5:94:cc:3b:b6:ff:6a:c5:e0:ec:ba:f8:2e:88:
19:12:62:35:30:88:99:56:60:ba:cd:d4:c0:0e:08:d7:ca:1c:
84:ce:19:ee:11:d8:1f:4c:b7:43:c9:8b:01:8e:36:ee:1e:6b:
60:86:50:e4:8c:0b:47:ec:16:ed:85:d0:88:e8:12:a8:9e:78:
2c:17:a7:eb:67:b1:24:bd:ff:5c:4f:44:09:35:4a:c3:b9:3a:
60:c0:c0:a4:91:33:b7:e0:7f:91:93:f2:23:c5:d2:3e:d9:7d:
02:06:7b:50:ab:30:dc:47:03:8e:b7:79:95:6e:d4:fd:ba:f6:
f2:53:92:6d:bf:c8:eb:fb:52:24:f5:62:3d:45:09:92:c4:cd:
35:4b:cc:65:d7:e6:8c:6b:02:52:64:4c:5b:b5:6e:57:eb:76:
87:56:6d:43:fd:86:02:f9:f0:7b:36:54:a1:a1:64:84:c0:13:
20:48:09:33:5c:33:eb:0e:f0:1f:25:64:b9:9a:7a:6e:01:a1:
e2:2f:7a:2e:0a:bd:de:e3:58:20:60:57:4b:89:61:23:b4:84:
4c:21:fc:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xP8AM+rN+0DBRoZAHSxNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNDBhMDcxODBmY2YzMzYzNWY3NTdjYzE0NDllMGQ1ZGJk
NGZkYjgwHhcNMjUwNjI4MDkwMTE1WhcNMjUwNjI5MDkwMTE1WjAzMTEwLwYDVQQD
EyhjNmI5MGVjMTQyZWEyYTllMzMyZmYxYjQ3ZDY3ZmQ5OTBmNmJkZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gp0COE493NwsarGDF6pSIYXu3QX
OJ6UwX7dLd15UN+3WIeccqsHaXjij2bIwXdog7eFk3MaJ/qPH/yUWO/mSlVM8MR3
7rtuglCMzsNGqf+A/TiWNGuwUDTt1ONbD8zFYHCi60RAsxLR+nahoyenSwukRiH3
k0mDR5MLuwpgQkRHd5RwzPt6FwDZ5uti0vKfIlNQq/0+GZXeijvWHHl3RX9d21zJ
4s9mopbnjBr77rCnFWMwhn+OxGDWq8wwM/4H2yNbd6CpUKuomAPcCBlixc1NP0Oy
+AnezODZXoon+Rtko8VYy+x52XsV8nnOKsUcBx9DnMvsN5sz0sjo+x/6lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMa5DsFC6iqeMy/xtH1n/ZkPa97UMB8GA1UdIwQY
MBaAFCJAoHGA/PM2NfdXzBRJ4NXb1P24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hMzE0Y2MtMDY2ZS00YzA5LWEzNmEt
ZDBiZDBlODAzZmQxLzEvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hMzE0Y2MtMDY2ZS00YzA5LWEzNmEtZDBiZDBlODAzZmQx
LzEvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvrLD2Gb
SckIOzhNNVfh3QFdAoPp1ebDdqWC5fa6wD3xEToGny/Ik9WUzDu2/2rF4Oy6+C6I
GRJiNTCImVZgus3UwA4I18ochM4Z7hHYH0y3Q8mLAY427h5rYIZQ5IwLR+wW7YXQ
iOgSqJ54LBen62exJL3/XE9ECTVKw7k6YMDApJEzt+B/kZPyI8XSPtl9AgZ7UKsw
3EcDjrd5lW7U/br28lOSbb/I6/tSJPViPUUJksTNNUvMZdfmjGsCUmRMW7VuV+t2
h1ZtQ/2GAvnwezZUoaFkhMATIEgJM1wz6w7wHyVkuZp6bgGh4i96Lgq93uNYIGBX
S4lhI7SETCH8MA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:31 2025 by rpki-client