Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
File: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft (raw, json)
Hash identifier: Yf3IzVN7qXK3fnDY4Xrl1RcPve25uA7ef4kY5R1X2L0=
Subject key identifier: DF:44:AC:CD:CC:A7:41:82:9F:3B:91:33:09:DB:48:43:43:20:56:41
Authority key identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
Certificate issuer: /CN=886faf1820074b79b6025ddffab25cb3f774424e
Certificate serial: 0197B745474625C79667CD0557EDF0A3C82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
Manifest number: 0137
Signing time: Sat 28 Jun 2025 16:01:00 +0000
Manifest this update: Sat 28 Jun 2025 16:01:00 +0000
Manifest next update: Sun 29 Jun 2025 16:01:00 +0000
Files and hashes: 1: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl (hash: vFQIFTeqxEci/uJ/UQ3u9MR4Exzn3dTSpXZ1jPhYpTE=)
2: pBOV7_scguiJteXj3vNSqNhNc5U.roa (hash: vCrIj0wpM69dzNSkAC34US2sC7UYedyyZzr33rt/1E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:47:46:25:c7:96:67:cd:05:57:ed:f0:a3:c8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886faf1820074b79b6025ddffab25cb3f774424e
Validity
Not Before: Jun 28 16:01:00 2025 GMT
Not After : Jun 29 16:01:00 2025 GMT
Subject: CN=df44accdcca741829f3b913309db484343205641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:ea:ed:d8:dd:d8:25:9a:28:05:55:46:c2:
d0:27:9c:83:9f:07:1c:5d:7c:72:b3:32:45:37:fd:
45:29:94:35:5a:50:b6:ff:10:3f:80:fa:eb:24:ac:
e7:f3:f9:5b:9e:e5:e4:7b:bd:b8:10:3f:b1:7a:20:
c4:50:69:5f:13:b7:c8:86:e0:f1:63:a4:b5:d8:3d:
c0:1d:05:6a:48:55:4a:2a:d5:72:47:24:a5:d8:85:
1f:f2:45:28:17:a2:2b:f2:66:cf:72:e7:33:30:bc:
66:c6:71:18:1e:a5:d9:32:31:1e:aa:40:cb:d8:26:
32:d4:c1:4f:ad:b3:d6:54:a0:99:21:cb:d1:be:6e:
a3:7b:d6:1f:dc:99:40:ab:b7:e8:50:01:03:4b:f3:
00:23:15:59:9e:30:23:d8:36:74:25:58:17:93:6a:
36:d4:7c:ac:06:32:34:64:fb:f1:32:10:6a:12:3d:
43:eb:26:0e:58:9a:98:59:01:a7:d1:7f:b0:20:a6:
11:e2:23:61:59:3e:77:09:f0:6f:82:b4:b7:8a:66:
0b:8a:6b:18:5f:03:49:33:e2:e2:82:fa:89:42:a0:
48:16:eb:61:68:5a:11:7b:e6:45:7d:f0:17:0c:b9:
0f:11:4c:09:94:84:2b:60:03:99:e9:8e:30:3d:bf:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:44:AC:CD:CC:A7:41:82:9F:3B:91:33:09:DB:48:43:43:20:56:41
X509v3 Authority Key Identifier:
keyid:88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a8:47:4d:5a:5f:2e:e3:9d:37:44:62:53:4c:ff:45:b6:4c:
5a:8d:10:f2:c7:3b:2b:ad:36:88:c5:9d:ec:e0:16:e8:71:5b:
f0:50:d4:a2:0b:29:0d:f2:72:85:16:16:7c:6e:c7:d5:6a:f3:
95:68:71:d5:27:25:8e:9b:98:9d:71:d1:fc:03:3e:27:5d:c6:
1f:9c:65:96:be:60:b8:af:7e:d9:23:07:dd:a6:27:9e:f4:d0:
ed:b6:37:a0:ec:fb:2a:19:e4:16:0d:d2:6b:34:1f:40:76:c3:
02:93:e5:db:15:fd:e8:a0:73:21:d0:e6:4c:ee:74:e0:8f:af:
a9:a8:a1:6e:df:fd:35:7f:4d:b4:e2:70:d5:00:0d:a6:1e:8e:
3a:2d:f0:84:41:4d:8a:89:7c:f0:e0:2c:04:cd:76:09:23:ab:
ca:51:8b:8b:7e:ea:93:41:70:8d:2f:72:0d:42:9d:d5:c6:d7:
46:6e:0d:2b:98:d9:27:7a:60:cf:27:c9:23:27:da:4d:80:ff:
6b:62:b0:53:2b:c9:48:a4:40:a8:77:40:f5:c2:a7:95:fd:45:
a2:ed:12:97:06:06:d0:91:86:43:c2:10:39:d4:63:59:41:4d:
bb:7a:74:6c:bb:1e:c4:9c:3a:2e:5e:e9:c1:b4:82:c6:7a:b0:
af:36:7e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:43 2025 by rpki-client