Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json)
Hash identifier: 6efZ3XGDA3L5fCOsEdjOJEG1j69sE+A9tT836R4D5/Q=
Subject key identifier: E4:71:CB:9A:7C:EB:EC:11:EB:4D:EB:D8:70:D5:61:E1:78:D1:44:EA
Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0
Certificate serial: 0197B88FF440748698BD653DDEEC1408D864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
Manifest number: 02CF
Signing time: Sat 28 Jun 2025 22:02:11 +0000
Manifest this update: Sat 28 Jun 2025 22:02:11 +0000
Manifest next update: Sun 29 Jun 2025 22:02:11 +0000
Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: 1yHrbY5cVouqLn7nDxrLAzmc9Q7hGa6JYJA8o0+vWoE=)
2: UhAz9MFvMvHhcsanrMhKMnsnk8g.roa (hash: r9jUBDvsXmF/Cp2cTaPW5/auM8Oojq92LndCKcjtAzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:f4:40:74:86:98:bd:65:3d:de:ec:14:08:d8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0
Validity
Not Before: Jun 28 22:02:11 2025 GMT
Not After : Jun 29 22:02:11 2025 GMT
Subject: CN=e471cb9a7cebec11eb4debd870d561e178d144ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2f:24:3e:da:85:aa:2c:65:8b:ab:d6:c2:0b:
0e:6a:75:af:55:6e:ce:85:e7:90:09:4f:19:f3:02:
8e:e5:9b:9f:05:ed:3e:27:49:3c:33:e3:2a:31:10:
65:b4:cb:ac:a3:56:a1:7c:37:67:2f:13:33:b5:ee:
74:0a:0f:fe:35:de:c3:c6:31:2a:e1:61:b6:f2:49:
83:b6:45:4c:4e:8a:1d:7c:ca:36:61:96:fd:b3:cf:
48:72:18:43:6c:be:93:4c:0a:5f:40:41:98:82:2e:
ac:ef:7e:25:52:59:1c:34:5b:69:f5:18:25:80:08:
7b:58:3a:b3:4b:e8:7e:e7:fc:dc:90:19:68:89:a4:
f9:64:16:e5:e2:97:5a:3c:48:bd:15:91:33:fb:ba:
80:cc:a1:78:35:3d:f2:c1:d5:37:2f:45:33:cd:95:
19:df:eb:75:23:6d:7f:29:cf:54:42:0b:4c:2e:ca:
46:5d:6b:34:b0:43:a3:65:a9:b7:44:cb:f8:93:8a:
4f:88:bb:69:37:11:f3:e4:33:09:e6:2e:10:3e:fa:
c6:71:20:8d:d9:35:78:65:e6:0d:fd:67:85:3a:df:
87:af:9d:cd:95:35:2c:db:32:25:6e:52:4e:32:5c:
4d:18:af:fb:40:bc:8c:76:5d:dc:3d:f0:5e:38:6a:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:71:CB:9A:7C:EB:EC:11:EB:4D:EB:D8:70:D5:61:E1:78:D1:44:EA
X509v3 Authority Key Identifier:
keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:cf:79:fa:98:54:1e:25:e5:3d:11:d8:01:ab:c9:18:bf:3f:
c3:ff:4f:8d:87:84:8c:31:06:7d:18:11:68:62:21:de:3f:9a:
42:85:0d:c2:a6:84:f5:92:38:c6:d7:64:09:11:9e:52:85:c1:
02:c0:6e:03:68:da:03:8f:78:8c:d7:01:05:d1:01:47:69:b9:
c7:a5:39:e1:8c:86:76:83:cb:65:52:60:80:d7:e7:f9:2f:56:
77:f4:2e:1c:a9:6e:8a:f8:3f:ca:1e:00:09:ed:99:d5:ae:07:
cc:22:f3:d5:0d:a6:b0:4a:b8:ef:74:ba:a6:fa:34:ed:4d:48:
75:c7:01:97:4c:60:37:98:f9:bb:20:b6:1d:6a:b3:a0:d9:7d:
70:61:77:dc:c0:e3:4c:35:f7:7c:d4:51:8c:83:76:15:dd:cd:
08:f8:ab:e6:3d:5b:80:00:43:ff:74:30:94:b8:39:3d:76:98:
e7:9e:46:cf:36:74:37:8d:e0:6d:4e:0c:25:32:75:f9:77:ec:
71:a7:52:f5:60:e6:a4:e0:ef:c7:ba:97:fa:ee:67:4b:ac:87:
ef:13:2e:74:cd:9a:68:a6:05:c3:c6:8a:c0:9a:27:2e:73:51:
d4:32:0c:3b:fe:ab:50:22:5a:32:3e:31:51:8e:15:70:55:a5:
a5:1e:c2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:37 2025 by rpki-client