Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
File: igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json)
Hash identifier: Xv6YdzF/Rao4lsoXzt4WUFwQurEaziGcKAYe2jxtegU=
Subject key identifier: DC:02:EF:8D:7D:F7:75:FD:4C:29:F6:2A:CB:89:47:7A:15:CC:F0:75
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial: 0197C424EFABEEFDE84269119B097C06E9C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
Manifest number: 154F
Signing time: Tue 01 Jul 2025 04:00:44 +0000
Manifest this update: Tue 01 Jul 2025 04:00:44 +0000
Manifest next update: Wed 02 Jul 2025 04:00:44 +0000
Files and hashes: 1: K1ZIbWVMCfOW-sru8Cq6hfagUF8.roa (hash: rL+dt6lYtJBORwZR6VP2yFNbGPaQQW0srIcKRe9EHMc=)
2: W5c6_2upbADmq1K-psylJktpo-8.roa (hash: D7dJaOoXdffWdL/3wJFJkqGRbSD4Xs0mdOEO0fMkEro=)
3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: Zb9J6dqnxqiSfH3dJedbWjy5e1LSsnp/A3iCsfxHOP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:24:ef:ab:ee:fd:e8:42:69:11:9b:09:7c:06:e9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Validity
Not Before: Jul 1 04:00:44 2025 GMT
Not After : Jul 2 04:00:44 2025 GMT
Subject: CN=dc02ef8d7df775fd4c29f62acb89477a15ccf075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:29:aa:85:6b:ff:0d:11:ad:bc:99:bc:e3:
d0:8e:65:5d:99:76:ec:f7:e5:dc:93:0b:15:f3:48:
1f:8e:b4:a0:d6:41:88:7e:b8:3c:95:81:fe:6b:87:
68:3e:df:69:2d:26:98:4b:c7:07:cd:9f:3f:69:37:
5c:48:17:d7:42:a8:d4:d7:5d:c7:19:99:9d:82:4b:
e5:84:f1:80:63:ae:c0:a7:b7:d4:c8:99:c5:5a:d7:
d4:b7:12:3c:1a:d2:b4:9e:a5:97:a4:32:95:2b:91:
df:11:c8:39:98:9e:d0:38:de:2a:0f:d3:c8:ee:f2:
db:10:52:87:8a:f0:c7:68:fa:e3:84:72:de:07:40:
7b:af:37:20:4e:bf:14:1c:de:50:06:ba:2f:68:58:
3f:cb:0b:e4:f0:c7:4b:8d:37:3d:ce:a0:99:9d:f3:
18:ea:2f:1a:d1:c3:fc:12:0a:af:83:15:2f:8f:1b:
23:0f:5a:82:29:56:5b:73:a7:e0:e7:2b:67:90:0f:
84:e8:d4:f0:a9:c3:fe:89:f0:8a:53:d9:81:a2:1c:
09:93:ed:6c:03:b7:c6:2c:92:6f:b2:9b:1e:44:4f:
0f:e6:72:3d:ef:2c:82:41:c9:d9:a1:5d:e5:1b:7b:
f3:38:cb:78:0a:31:cf:ae:66:72:39:47:0b:9e:51:
ec:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:02:EF:8D:7D:F7:75:FD:4C:29:F6:2A:CB:89:47:7A:15:CC:F0:75
X509v3 Authority Key Identifier:
keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d0:35:da:60:5f:a9:f5:1b:51:da:31:d7:4a:31:3f:3e:0b:
86:b2:f1:37:24:eb:85:ee:57:4a:70:c7:a5:6b:f6:bd:a3:09:
67:ac:82:e3:07:02:54:60:95:72:68:0c:54:75:f1:e3:46:fa:
b0:fb:91:72:91:0c:d8:36:c3:16:24:85:cf:f4:03:42:9e:9e:
e0:3d:d2:f6:5a:de:e8:6a:51:0c:ce:35:c6:63:72:31:d4:f8:
e3:aa:11:58:94:a3:29:5f:e6:5f:78:f4:f0:b2:4b:6a:8b:fb:
bc:48:b7:13:bb:86:57:b1:6a:cd:6a:b3:88:2f:76:60:7e:2a:
ee:3a:b0:ee:1a:58:75:ac:52:77:2d:91:87:ea:2c:e4:00:52:
17:b3:96:c3:1b:b8:ca:3c:0b:f7:ed:31:24:23:4b:b7:ab:3a:
ba:ae:a1:06:a5:b3:b4:3b:63:dc:31:95:b0:6e:3f:69:2b:6e:
cd:0a:56:70:00:6a:1c:da:cb:80:25:d5:cb:d1:6b:e1:3b:3b:
53:cd:04:6d:8b:b3:c5:8f:a1:e0:38:6a:68:d8:2d:cd:92:95:
42:62:a6:63:2b:2d:b8:2b:33:ed:8a:ee:90:75:10:89:af:6d:
e8:e4:11:ed:ff:e6:88:4b:9e:54:19:28:55:ed:0d:12:90:b8:
20:57:46:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEJO+r7v3oQmkRmwl8BunAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDhjMjhiZTE1NTE2MjkwYjlkYTUxMzVlNThmNTVmYmI4
MGZmYjQwHhcNMjUwNzAxMDQwMDQ0WhcNMjUwNzAyMDQwMDQ0WjAzMTEwLwYDVQQD
EyhkYzAyZWY4ZDdkZjc3NWZkNGMyOWY2MmFjYjg5NDc3YTE1Y2NmMDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS0pqoVr/w0RrbyZvOPQjmVdmXbs
9+XckwsV80gfjrSg1kGIfrg8lYH+a4doPt9pLSaYS8cHzZ8/aTdcSBfXQqjU113H
GZmdgkvlhPGAY67Ap7fUyJnFWtfUtxI8GtK0nqWXpDKVK5HfEcg5mJ7QON4qD9PI
7vLbEFKHivDHaPrjhHLeB0B7rzcgTr8UHN5QBrovaFg/ywvk8MdLjTc9zqCZnfMY
6i8a0cP8EgqvgxUvjxsjD1qCKVZbc6fg5ytnkA+E6NTwqcP+ifCKU9mBohwJk+1s
A7fGLJJvspseRE8P5nI97yyCQcnZoV3lG3vzOMt4CjHPrmZyOUcLnlHsGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwC741993X9TCn2KsuJR3oVzPB1MB8GA1UdIwQY
MBaAFIoIwovhVRYpC52lE15Y9V+7gP+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82NzJhZjgtMzM0OC00MjEzLWI0N2Mt
MDYxOGM5YThjYWM0LzEvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS82NzJhZjgtMzM0OC00MjEzLWI0N2MtMDYxOGM5YThjYWM0
LzEvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9A12mBf
qfUbUdox10oxPz4LhrLxNyTrhe5XSnDHpWv2vaMJZ6yC4wcCVGCVcmgMVHXx40b6
sPuRcpEM2DbDFiSFz/QDQp6e4D3S9lre6GpRDM41xmNyMdT446oRWJSjKV/mX3j0
8LJLaov7vEi3E7uGV7FqzWqziC92YH4q7jqw7hpYdaxSdy2Rh+os5ABSF7OWwxu4
yjwL9+0xJCNLt6s6uq6hBqWztDtj3DGVsG4/aStuzQpWcABqHNrLgCXVy9Fr4Ts7
U80EbYuzxY+h4DhqaNgtzZKVQmKmYystuCsz7YrukHUQia9t6OQR7f/miEueVBko
Ve0NEpC4IFdGaQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 06:03:38 2025 by rpki-client