Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: XY5p/vNlEDCzOGhTGqeNgFVdAdIAMOqPpyAxuaeP3II=
Subject key identifier: C3:C0:EE:82:CA:82:A2:53:AB:1A:25:C4:B5:3A:9F:7A:45:2E:6F:52
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 0197B7457B2F0CF15F02B3F5E36183A3E214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 028A
Signing time: Sat 28 Jun 2025 16:01:13 +0000
Manifest this update: Sat 28 Jun 2025 16:01:13 +0000
Manifest next update: Sun 29 Jun 2025 16:01:13 +0000
Files and hashes: 1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: iz6lfVI8xlbBqE3sGSNkZMD+fMj81J2uicHuEGjjF0A=)
2: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=)
3: c_sMTj7v_tcLPK4ph9KiN4hyel8.roa (hash: WlGUEszKDgI/p0yTM/WRVaqPEPGJ8QjHZwVMfO6NE9k=)
4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7b:2f:0c:f1:5f:02:b3:f5:e3:61:83:a3:e2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Jun 28 16:01:13 2025 GMT
Not After : Jun 29 16:01:13 2025 GMT
Subject: CN=c3c0ee82ca82a253ab1a25c4b53a9f7a452e6f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b0:4c:46:6a:73:56:be:00:ab:90:14:fd:4f:
b9:a2:1d:09:fb:aa:45:07:8f:10:7e:5c:9b:ba:bb:
c1:1f:15:66:47:0f:23:fc:5d:f2:ff:61:8c:9a:36:
d8:3d:88:f2:33:57:54:46:df:13:8a:53:d3:f7:c2:
4c:d1:91:76:1e:98:04:a7:88:c8:79:67:fe:c0:ee:
44:91:52:4b:1f:29:60:80:3c:ef:c6:b1:43:c9:ad:
57:bb:a6:2e:57:bf:06:c6:f1:58:24:2d:f6:87:28:
d8:a3:a9:00:8d:e0:e3:05:c8:3e:b6:87:8d:49:ff:
54:4e:41:77:41:33:b5:49:c8:f8:3f:a9:40:6a:11:
19:d2:f5:bb:39:4c:04:a9:eb:ad:25:62:2a:53:cb:
e4:f9:93:22:9d:c2:0d:f1:5c:88:ab:2c:32:fe:65:
b3:c2:e7:a4:b5:df:cf:74:68:00:83:3d:a7:2e:c0:
e2:84:8e:85:8f:1e:1e:ac:43:86:dd:5a:21:be:75:
82:6a:84:14:80:f1:d5:38:93:4a:e3:de:11:69:a4:
3e:2f:3a:51:71:58:04:72:a0:78:73:ac:a3:a9:e9:
0f:e1:43:db:39:62:71:bc:d6:bf:23:3c:64:6c:30:
c7:24:6a:59:0c:b6:1c:48:5a:13:1b:4d:4d:69:a4:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C0:EE:82:CA:82:A2:53:AB:1A:25:C4:B5:3A:9F:7A:45:2E:6F:52
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b3:af:3c:a7:7e:51:85:b4:51:e8:5f:07:83:7e:66:ee:4d:
bf:ac:ee:65:1b:d1:c6:f6:f8:7b:91:e0:ee:c6:dc:5d:b7:53:
6a:ef:0c:47:84:22:a9:5d:c7:f8:47:ca:cf:86:4f:80:b0:f3:
50:96:e8:c1:e4:fa:6f:f1:ed:b6:bc:84:81:42:8a:d5:78:f9:
8d:a9:f2:64:17:c2:52:c3:a3:34:1b:2d:46:49:3d:e0:f9:f5:
c1:70:6b:a0:61:93:f9:c7:40:99:cf:ba:f7:68:4b:ec:6d:31:
d3:1d:36:07:b5:75:40:89:49:82:5d:ef:b7:f2:a3:6b:94:63:
63:4f:f9:ac:1d:00:87:2c:3e:8b:ad:4a:bb:33:2b:47:ea:7c:
b3:8d:88:91:9a:39:43:cb:ed:25:a1:cb:e6:89:94:50:3f:e9:
25:7b:f4:09:a2:4d:9d:8f:37:fd:10:6b:f6:69:2f:49:4c:14:
80:0b:53:bb:e7:41:fa:b9:77:78:8d:12:28:1c:04:a7:1d:55:
65:e6:5e:e9:a6:92:be:d4:42:62:2b:1b:4e:a5:b0:d5:9a:53:
0e:fe:91:c3:fe:1a:1d:53:64:6b:85:cf:09:dc:81:f2:2c:12:
54:89:d6:ca:d1:50:8c:d5:70:4f:f1:62:99:b2:70:14:58:9a:
01:b2:47:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:37 2025 by rpki-client