Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: MEHwWGnJRpnp999Ut105KbwMJMic3g3eF/gmHkCJ/kM=
Subject key identifier: AF:73:FB:F0:1F:A8:B2:FB:EA:A5:72:D1:B9:F3:3A:2A:F6:F6:C6:08
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 0197B70EEFADD245FC5E80E7F3CB87D4664A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:38 +0000
Manifest this update: Sat 28 Jun 2025 15:01:38 +0000
Manifest next update: Sun 29 Jun 2025 15:01:38 +0000
Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=)
2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: t4kwPm07dzQu5+e0sGH5AWZSrnCh+elKpnIzaLh6t6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ef:ad:d2:45:fc:5e:80:e7:f3:cb:87:d4:66:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Jun 28 15:01:38 2025 GMT
Not After : Jun 29 15:01:38 2025 GMT
Subject: CN=af73fbf01fa8b2fbeaa572d1b9f33a2af6f6c608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:06:1d:bd:8d:3c:38:0b:94:2d:d9:43:c9:
5c:95:1d:6d:5c:4d:f9:3a:96:a5:ae:dc:8b:cd:02:
96:55:6f:6d:48:e4:f5:61:9e:1c:b0:04:73:39:22:
dd:4c:69:18:75:77:75:e0:87:c5:c3:0a:4e:4e:84:
0e:4d:b9:d8:ea:31:56:45:e4:73:b6:6e:9e:b0:1a:
5e:1a:60:90:60:44:7c:4f:22:da:fa:eb:10:a8:71:
6f:5d:6b:cf:6b:5c:28:e1:84:2a:7f:7c:fd:0f:fa:
9b:12:ab:a2:b3:92:23:d7:3e:a6:ce:52:d4:49:00:
9a:59:fe:8c:b6:ad:07:43:f5:4b:e9:10:ad:e9:16:
d0:cc:43:30:a9:5d:53:2d:b5:7e:3f:55:d3:67:f6:
03:c5:48:08:45:38:ee:77:9b:41:38:fd:5b:0c:81:
68:80:5a:df:4c:bf:30:fa:e7:74:34:20:b5:cc:f6:
d8:84:5d:fd:13:80:dd:96:95:57:80:57:93:83:5a:
3c:07:fc:8d:f7:36:a0:83:a2:52:c7:9d:3a:c1:61:
06:d8:25:25:10:df:70:56:93:b3:60:31:f1:50:69:
32:3d:31:95:86:0d:21:e5:3e:a8:cf:05:e1:96:f6:
4d:0f:91:33:cb:b7:de:55:fb:1e:63:67:21:37:e8:
99:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:73:FB:F0:1F:A8:B2:FB:EA:A5:72:D1:B9:F3:3A:2A:F6:F6:C6:08
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b8:cb:97:b3:03:f5:ae:a8:8b:96:7d:70:a3:f1:b5:47:36:
bd:4c:90:2e:3a:8b:94:aa:c2:bf:d5:61:71:fc:79:4b:1a:9c:
2b:39:78:d8:5b:ce:52:8c:2f:0c:38:5d:ed:17:d5:b1:4e:2c:
dd:5d:55:82:90:54:77:40:01:ca:76:7e:ff:02:6f:fd:da:31:
2d:f8:a9:31:da:11:f2:3d:19:9b:3b:99:2f:18:f6:83:f8:7e:
f9:39:02:15:7e:b9:46:d0:57:91:6d:cf:66:77:28:05:06:63:
7d:2b:ab:63:aa:bf:b1:af:a0:9d:71:11:91:9e:a3:c5:e6:fd:
87:b3:b0:1a:cd:1e:99:b1:8a:19:ad:e0:a1:b1:dd:e1:f9:c7:
75:cf:52:1c:6c:c2:da:9c:dc:fe:4b:5c:69:fc:6e:17:b5:28:
c9:1f:2f:0b:cd:41:ec:ae:56:fb:b8:ac:80:d7:a8:6b:2e:6e:
da:36:93:09:99:59:75:86:f1:ad:ed:29:5f:5a:81:85:42:3d:
50:4b:b8:3c:7d:2c:f0:de:ad:39:68:9b:3a:bb:97:d1:8b:05:
22:d8:a3:ba:29:d1:aa:eb:cf:04:e7:9a:6b:5c:b9:9f:af:35:
3c:4c:f2:04:82:25:af:aa:a0:a1:58:2e:73:51:b7:44:0d:64:
e7:1b:16:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:28 2025 by rpki-client