Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier: rzVvj1a7gdlxxFhlIqcMzaYiiPjbRiby+Fg0kns+4so=
Subject key identifier: 65:C1:95:38:D1:C7:21:27:60:0F:FE:F4:6D:EE:C6:66:7E:4F:3B:6C
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 0197B6A206535DDBADE2D2FDBECE466B2276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:41 +0000
Manifest this update: Sat 28 Jun 2025 13:02:41 +0000
Manifest next update: Sun 29 Jun 2025 13:02:41 +0000
Files and hashes: 1: FE1p8xqk22ZLL8TtVpBgIJ5HCYk.roa (hash: EEjSbBj9sFsFeIYvGJ66Mb2B5f9wjNh8P6NHIHv03o4=)
2: Nj_g5XagzgChnaGJmyAjIxliPxQ.roa (hash: 2T2yAo36kvnreO/zfmG7HDMPjTZHcC33NYqG6yteeqQ=)
3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: Rl/sUiCzZ5OzkpeHrnqEybSOKreAoH+5dIuQylMXlw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:06:53:5d:db:ad:e2:d2:fd:be:ce:46:6b:22:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Jun 28 13:02:41 2025 GMT
Not After : Jun 29 13:02:41 2025 GMT
Subject: CN=65c19538d1c72127600ffef46deec6667e4f3b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:33:31:f4:c9:9d:a8:eb:8e:d5:0f:09:20:
5d:0f:e7:c6:37:ec:e0:66:b2:1a:cc:76:b4:9a:88:
67:b5:81:39:84:11:8f:5e:21:8b:8a:78:63:d4:27:
ab:7d:05:62:3e:4f:bc:ae:0d:cf:68:11:56:bd:72:
10:5f:0f:9f:19:ce:3c:67:2b:60:1d:f9:e3:c9:ee:
1e:28:c7:fb:29:42:fb:05:1f:4f:29:d7:d4:63:d8:
e0:ac:38:63:48:76:55:5d:62:99:62:a7:63:b6:7c:
b4:d7:a3:49:6c:81:d2:86:c2:67:e2:21:84:7a:44:
a3:a9:4e:c4:c9:5b:3e:4f:21:dd:c2:a9:e1:fe:d1:
07:1a:93:a5:74:e0:69:da:de:73:42:95:5c:f0:80:
60:4f:4c:82:9f:fb:e1:ff:f8:ec:16:d7:da:59:d2:
42:ea:7f:11:d5:c1:3c:39:8f:09:27:56:0b:85:17:
51:b3:73:14:35:2f:bf:4a:94:69:b4:4d:9f:7d:13:
6f:f3:28:a8:45:7c:ba:5a:1c:e8:54:c3:f4:00:5e:
c7:35:4b:0d:66:6a:44:c7:ca:9c:5c:15:4d:12:f9:
7d:3c:65:0e:11:e1:68:f8:dc:83:39:78:c4:b4:6b:
84:ce:46:98:c9:ae:63:68:fa:8e:c8:eb:7e:08:e7:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C1:95:38:D1:C7:21:27:60:0F:FE:F4:6D:EE:C6:66:7E:4F:3B:6C
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:64:1d:95:3c:43:52:af:cb:25:93:9e:6b:7a:85:88:bb:6a:
5e:18:30:b0:88:23:7c:92:77:0d:ff:36:dd:13:87:85:49:55:
99:27:ec:3d:8a:27:cb:5e:6a:ed:25:c4:8f:a5:79:cc:dd:2d:
8f:77:d0:5d:28:1f:bb:d1:83:b0:0d:43:73:96:fd:59:45:c9:
8e:1c:24:04:49:f7:c2:9a:fb:57:3c:c1:aa:c7:cf:c4:02:85:
ba:3d:7f:ae:a2:7f:d4:f7:8a:16:54:23:2c:10:67:e8:f9:42:
66:ad:38:35:d8:18:25:09:92:d1:2d:9d:df:44:c2:66:74:60:
01:9d:d8:9d:54:01:af:66:8e:ac:bb:cc:5e:e3:50:3c:f6:17:
53:6c:01:29:23:de:8d:71:2c:4d:8e:57:41:d6:e3:5c:f1:c5:
15:4f:0e:54:e2:57:86:38:b7:92:37:37:ac:0d:6f:d1:45:11:
f1:50:ef:4e:46:e4:6e:34:e1:01:dd:c4:de:bf:bd:25:3f:f2:
da:7b:15:ec:84:a9:fe:d7:40:f6:b4:d7:9e:eb:06:4e:73:27:
d5:58:58:31:07:d1:79:51:1e:25:93:26:df:09:3b:71:59:71:
0a:5d:07:58:35:f1:97:02:b6:fd:1a:85:02:07:7b:e0:b6:cf:
b4:a3:4f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:57 2025 by rpki-client