Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
File: igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json)
Hash identifier: iU3ZTfkyx/P8POEoOxNw7+CL5vflrl3ltmq/Q+DjnQ8=
Subject key identifier: 20:0E:01:D0:29:8C:51:66:94:73:E7:78:A8:2E:7E:AB:7E:CC:CC:55
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial: 0196B9A3D272E787DA614D4CAF9E9045196F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
Manifest number: 14C5
Signing time: Sat 10 May 2025 10:00:43 +0000
Manifest this update: Sat 10 May 2025 10:00:43 +0000
Manifest next update: Sun 11 May 2025 10:00:43 +0000
Files and hashes: 1: K1ZIbWVMCfOW-sru8Cq6hfagUF8.roa (hash: rL+dt6lYtJBORwZR6VP2yFNbGPaQQW0srIcKRe9EHMc=)
2: W5c6_2upbADmq1K-psylJktpo-8.roa (hash: D7dJaOoXdffWdL/3wJFJkqGRbSD4Xs0mdOEO0fMkEro=)
3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: pRPudDCDSGfwYXmZ+pBlOJDOsy18F0M/ELuC+IqK6bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:d2:72:e7:87:da:61:4d:4c:af:9e:90:45:19:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Validity
Not Before: May 10 10:00:43 2025 GMT
Not After : May 11 10:00:43 2025 GMT
Subject: CN=200e01d0298c51669473e778a82e7eab7ecccc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:f0:de:7a:f1:ef:59:b3:5f:21:bb:69:39:
93:59:bd:f2:b2:ee:54:2b:5c:38:59:4b:c3:a2:4a:
cb:01:82:87:a3:db:f5:94:4a:21:45:a8:31:30:99:
a1:0a:d3:61:8b:da:41:c0:11:90:be:e7:d5:7d:af:
b5:0a:27:f4:22:86:32:98:2a:24:01:66:18:3d:a2:
75:2a:8a:57:84:95:85:39:4c:8d:e2:de:f8:09:50:
18:c1:88:94:5e:c5:f9:f9:dc:41:fd:97:0a:6f:df:
3c:6d:f4:88:50:93:f9:86:ce:46:d0:4e:d8:e2:dd:
07:93:5b:f7:2a:ab:59:b9:a7:8f:be:82:f5:64:18:
40:54:1f:b5:c0:eb:33:b1:dd:20:96:15:fe:84:b6:
19:5c:7a:08:fb:78:b6:5b:be:ce:33:bd:4b:d0:df:
2d:99:2b:93:3c:cc:53:34:ae:8c:2a:86:61:6a:8d:
3e:e5:41:2f:57:6b:85:f1:80:fe:9f:4f:30:bf:d7:
59:50:ce:c5:00:25:3f:73:9c:94:a7:d6:4f:cd:73:
78:b0:1b:92:ff:b7:14:ec:83:3c:41:e0:d9:12:1e:
8b:fa:6d:d2:97:ef:b3:1c:bb:c6:a4:be:42:57:5c:
b9:87:57:ac:09:26:59:46:21:c7:49:81:5f:41:56:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0E:01:D0:29:8C:51:66:94:73:E7:78:A8:2E:7E:AB:7E:CC:CC:55
X509v3 Authority Key Identifier:
keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ba:71:30:2a:63:dc:45:6c:21:d1:99:1c:cc:82:08:67:90:
10:61:72:3a:51:a8:f9:7d:1f:2a:7c:e8:fd:2a:76:75:91:0f:
4e:03:6b:2a:70:2f:67:d2:a7:55:d1:4a:7e:e3:d8:8e:74:e0:
1b:c7:34:e1:96:3a:13:87:e0:27:e1:fc:eb:1b:f7:30:13:65:
a0:dd:28:fd:74:d4:6d:3b:43:83:a2:14:27:2a:1f:be:ee:65:
09:61:6b:01:94:b9:a2:5d:f9:b9:81:92:08:ec:4e:c2:1a:f2:
9e:90:1c:c1:88:9e:15:f8:c7:69:e0:68:1e:34:ea:f5:07:b9:
fd:56:e5:d3:67:6f:8d:34:6f:bf:90:e5:24:0f:ae:7f:1a:03:
a3:4a:13:7e:a6:1b:aa:90:65:a3:40:37:d3:b1:de:92:0e:8c:
4d:9d:4b:fd:8c:9d:be:a3:3d:19:97:56:e8:8f:2e:60:08:1e:
01:c1:ff:4b:c6:da:fd:79:7e:66:9c:82:5f:fe:e7:e4:e5:fb:
a2:86:b8:46:11:46:1d:94:29:71:29:cd:65:af:36:fd:ee:e5:
82:22:d3:e1:a2:45:46:c9:41:71:f8:6a:0e:4d:c2:b4:1f:d4:
a8:5a:61:03:b9:d9:3e:38:52:38:68:d0:16:78:d1:da:2a:a6:
07:67:77:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:09:07 2025 by rpki-client