Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
File: I0tEmJRYnRb2dr_ygqvtqlbMe40.mft (raw, json)
Hash identifier: 6bBNwoJbYAwmW35M88cxVbCpv6Z0kUh4ORQREhae3dg=
Subject key identifier: 2B:F4:F2:9D:60:5E:13:84:8A:82:14:97:C3:B8:A4:3F:75:F1:5E:0A
Authority key identifier: 23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
Certificate issuer: /CN=234b449894589d16f676bff282abedaa56cc7b8d
Certificate serial: 0197B70E532A43B7FFD0867D798AF0816072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
Manifest number: 05F1
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: EBtcNhOJ92IGPVl-KdrFygnNVn4.roa (hash: Ykla49kgLw0fjmlAc5cpzOXx1fYgIVxrEDqc3yCSjAA=)
2: I0tEmJRYnRb2dr_ygqvtqlbMe40.crl (hash: iVXqHxW26qMYgUrfF7UQxrTfz6HBdw63pzBmWSF/Z0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:53:2a:43:b7:ff:d0:86:7d:79:8a:f0:81:60:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b449894589d16f676bff282abedaa56cc7b8d
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=2bf4f29d605e13848a821497c3b8a43f75f15e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:11:e6:b5:89:b3:21:2d:39:b1:8f:a8:71:
b3:24:06:92:37:ec:60:b9:f1:68:69:a0:25:b3:c6:
c4:92:4f:2b:31:a3:8b:4c:96:db:12:50:4b:bb:e2:
37:62:ff:00:99:7c:dd:ca:cc:f5:86:ab:b4:21:ce:
ac:0c:36:1d:22:5e:96:c2:a9:31:1d:c0:65:a2:2f:
78:b5:ee:df:a0:bc:ff:5b:40:1e:fa:65:4f:6b:3c:
ea:14:05:99:ac:f3:a1:92:6e:25:ec:3f:59:b5:15:
35:fa:12:d9:2f:b9:ee:38:73:59:40:69:c6:9b:c8:
3b:19:f8:e4:d7:c1:1c:ce:5d:0b:3d:32:1d:62:41:
34:bf:7b:5b:76:25:d5:12:0e:dd:91:c3:b3:57:23:
52:5a:ee:33:f5:ad:2d:a7:6e:6e:1c:6e:97:35:3e:
30:24:f4:6b:81:0f:4c:9e:f3:1b:b0:ef:58:d3:1f:
cd:2d:23:90:9f:90:c1:e9:4b:57:ed:e7:55:66:1d:
dc:d6:22:b1:5b:de:27:ca:0a:9d:dd:52:de:6a:42:
43:ce:1d:4b:2d:84:49:e6:de:36:9b:bf:39:67:f6:
45:47:98:f2:c3:d3:72:5e:46:77:c1:c3:75:4d:ea:
aa:60:2b:d2:77:9a:ba:07:48:e3:0d:2f:5c:f7:cb:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F4:F2:9D:60:5E:13:84:8A:82:14:97:C3:B8:A4:3F:75:F1:5E:0A
X509v3 Authority Key Identifier:
keyid:23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:dd:85:3e:64:28:23:d1:24:94:03:8f:78:57:1d:dc:16:9e:
53:80:74:b7:9a:ca:1b:3c:20:87:4f:7b:5f:f4:1f:53:81:7d:
24:15:67:7f:4b:4f:60:fc:8f:95:85:9d:dd:7b:74:d5:ee:d1:
a6:de:3e:f5:bb:9c:6e:0d:7b:7f:1d:7e:d8:8d:4c:46:7b:fb:
0f:9a:ff:a9:f3:d6:c3:41:a4:6c:0f:8c:b4:5f:80:b0:c5:d1:
af:f1:82:d0:c6:7d:26:f8:e8:20:9f:b0:45:91:ba:33:30:79:
7e:b3:25:b7:6f:c1:00:fc:f9:0b:2d:f7:88:b1:84:78:53:2c:
e0:92:7b:1e:28:bc:4d:59:c9:3c:1a:23:86:b0:d9:51:f7:8b:
d0:96:eb:b3:f0:cc:20:27:03:3d:bc:33:b3:3a:1a:b8:c9:4e:
a3:0f:9e:3f:b4:49:b3:fc:e3:c2:a9:1d:2e:60:df:a3:2e:ed:
e1:2a:af:cf:51:a2:99:ff:9d:c7:63:b7:cc:da:d1:c5:58:ff:
0d:7d:71:aa:57:b8:83:bb:ea:10:31:16:01:4b:6c:3c:56:1c:
42:5d:4f:0f:bc:af:89:f5:71:38:a8:ef:ad:37:3e:41:38:a1:
01:01:f4:1e:37:b8:9c:8a:54:62:bf:90:c8:35:50:13:79:89:
e7:e9:94:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:07 2025 by rpki-client