Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: c8iyOajkFuXlx3vGTcct4MxeeMDj31EqYM798SGPVAQ=
Subject key identifier: CC:37:35:7D:9F:86:8B:11:AA:D5:71:7D:2F:97:22:BB:E5:A8:A3:D4
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 0197B820D73967AC13B66EAE0E68EE3E665A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 20:00:49 +0000
Manifest this update: Sat 28 Jun 2025 20:00:49 +0000
Manifest next update: Sun 29 Jun 2025 20:00:49 +0000
Files and hashes: 1: 4lN9UMCt9-jT04o2voesNzfPwGs.roa (hash: t3RT/PpcRecUqHyCeVTaRV/4YmAPhY6KAKsv8Og5F9U=)
2: ACmM5xMJG5d1YVOZ4RZKGVZYg9k.roa (hash: Fvp/3zg9VXW0brdKzJ0fdm3mkA4lR5zaksqsabjZcF4=)
3: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: PqBz4DVJOX4mJ7IAswLKMAR/av9LP3VVpo2c3Xq67jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d7:39:67:ac:13:b6:6e:ae:0e:68:ee:3e:66:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Jun 28 20:00:49 2025 GMT
Not After : Jun 29 20:00:49 2025 GMT
Subject: CN=cc37357d9f868b11aad5717d2f9722bbe5a8a3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:b0:cd:5f:12:ac:90:40:e0:29:7c:bc:6b:
72:3c:13:1b:4a:e6:00:3e:e5:5b:ee:f3:de:8a:68:
65:e6:15:df:9b:76:62:7e:e9:97:20:26:51:4d:b2:
e1:b0:0b:08:e3:2b:d1:3a:d6:f5:a1:1f:f1:fd:c6:
98:d6:f9:0f:3a:c0:db:7b:5c:6c:5a:ad:bd:31:38:
b9:d5:6f:c1:5a:0d:8e:7b:b1:31:c5:9a:c4:97:a0:
dd:99:80:bf:af:6b:52:28:49:19:fb:b2:5e:84:18:
32:b2:75:a2:52:c2:df:3e:db:0f:83:ab:a9:57:c9:
8c:40:89:e5:c2:6f:53:86:e0:08:0d:68:e0:2f:4d:
a2:ba:63:41:89:cd:30:a8:ce:d5:3b:c6:52:75:de:
f5:60:8d:15:5a:3d:e2:cc:f0:9a:f7:af:ae:76:3c:
f0:b6:9b:80:d9:27:58:e1:47:ad:6e:6d:59:65:c5:
ab:fb:31:cf:b7:03:29:01:ea:3c:ad:b9:ae:18:5a:
32:e5:34:24:09:34:2e:62:e4:60:1e:b4:e8:34:cb:
2b:9f:4d:9b:e8:60:d1:e9:15:47:e7:b5:87:fd:6c:
18:18:40:d0:5a:32:64:2b:3d:f6:d2:77:b3:e4:df:
b6:05:7d:b3:e1:8c:9c:4b:a1:1f:31:ed:a1:45:5e:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:37:35:7D:9F:86:8B:11:AA:D5:71:7D:2F:97:22:BB:E5:A8:A3:D4
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1a:46:a7:44:50:9e:f1:9a:bc:8e:d1:ae:bd:64:da:78:94:
8a:13:11:34:f4:19:6f:43:34:04:73:34:56:73:52:49:a7:f3:
ab:2a:50:d1:c1:91:30:be:b8:0b:61:53:b9:21:4a:a0:5e:29:
e0:b2:89:a8:f2:96:37:a1:ba:28:bd:15:91:96:1a:34:78:f0:
61:2e:9f:0c:5d:54:3f:2a:ba:4d:bc:82:05:e9:8c:2f:26:63:
e8:81:76:ea:e7:cd:2a:77:34:23:f2:12:0c:00:b8:ce:f0:64:
24:41:53:e0:73:8c:ea:06:49:4e:6c:0c:44:9f:0a:1c:eb:6e:
fa:6a:61:0a:36:d0:fc:8e:ea:f8:99:cc:64:e9:f2:d8:af:9a:
8b:f4:bf:0d:d9:54:b8:c6:a5:a9:a6:ad:58:bb:95:83:aa:df:
63:7a:ec:25:58:09:f8:da:df:f6:aa:cf:4a:33:90:03:ad:43:
3f:a5:7d:02:32:da:ad:4d:30:4b:ce:68:81:4a:f8:41:86:61:
82:ef:c2:a9:43:03:54:4a:d9:ff:76:eb:10:78:7f:a6:54:56:
bd:99:76:88:a4:8f:0d:a3:61:7c:c8:3d:b2:d0:05:09:95:00:
d8:38:f4:3e:8d:78:d3:66:52:cc:5a:de:29:c6:a8:d2:5b:5d:
28:ca:74:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:37 2025 by rpki-client