Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
File: IxG6LbhgGYJqsQLhnyyoogkxaFI.mft (raw, json)
Hash identifier: rELYEuyyn+leC2oQttBhPgVR9sggfyqHcVHlx9gEJjY=
Subject key identifier: 40:15:2C:F2:28:F9:12:7A:FE:55:69:C4:CE:4C:9F:81:0F:26:E5:C9
Authority key identifier: 23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
Certificate issuer: /CN=2311ba2db86019826ab102e19f2ca8a209316852
Certificate serial: 0197B7EA7154E18594DBB8B50D5D2B563315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
Manifest number: B3
Signing time: Sat 28 Jun 2025 19:01:24 +0000
Manifest this update: Sat 28 Jun 2025 19:01:24 +0000
Manifest next update: Sun 29 Jun 2025 19:01:24 +0000
Files and hashes: 1: IxG6LbhgGYJqsQLhnyyoogkxaFI.crl (hash: CYmsxZYrMJUbn07Zyrf3BU3l70bVGZUdKUUFhjbJAEM=)
2: VEacVgiUB2mSTjU4m54DaN-4dWE.roa (hash: 4yBoFANUnzxzanObGvRjvvX/EIqsjlCUPMYRv3xQRSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:71:54:e1:85:94:db:b8:b5:0d:5d:2b:56:33:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2311ba2db86019826ab102e19f2ca8a209316852
Validity
Not Before: Jun 28 19:01:24 2025 GMT
Not After : Jun 29 19:01:24 2025 GMT
Subject: CN=40152cf228f9127afe5569c4ce4c9f810f26e5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:2d:c2:29:23:7e:a8:84:62:e1:6b:54:9b:
8a:e2:15:cd:bc:f1:2f:4b:57:88:8f:b7:b3:6c:56:
ce:c2:37:5c:60:3c:90:eb:b9:85:50:a1:a1:30:c8:
f6:6e:2b:8c:25:02:bb:db:78:7b:ec:07:e2:e9:de:
c4:cf:04:7c:5f:f2:65:04:df:2a:1d:ea:43:b7:ef:
4d:54:d3:6f:29:91:23:53:d0:08:09:c2:06:8e:14:
21:7b:e9:e6:3f:b5:f5:da:4d:7a:02:c8:69:06:7b:
f4:c8:3f:50:81:1f:54:52:a6:74:90:23:23:4c:3b:
1b:3a:7d:86:cf:ec:f0:e0:20:80:04:8b:d7:7e:a3:
14:a3:93:4e:d9:66:d0:d4:16:22:56:ce:7d:c5:5d:
ea:94:77:a9:3e:42:2e:d3:c1:01:8b:0b:00:ea:cb:
cb:89:45:f8:4a:c4:64:33:68:9e:89:19:34:31:f6:
a8:b5:c7:b0:73:3d:bb:f0:df:a8:de:c6:bc:01:2c:
bd:02:80:c1:b7:b6:21:ca:ea:43:45:bf:b7:1e:fb:
12:e7:bb:7f:ce:9c:75:f0:83:d3:75:c7:3c:63:7c:
93:8f:5b:18:d5:13:93:28:72:6c:87:1f:57:e8:60:
b8:4f:b6:99:e1:5a:f4:f0:78:82:f2:25:04:47:1c:
dd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:15:2C:F2:28:F9:12:7A:FE:55:69:C4:CE:4C:9F:81:0F:26:E5:C9
X509v3 Authority Key Identifier:
keyid:23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:24:0c:59:b7:ec:82:74:02:d7:8a:72:af:c6:59:7a:e9:b2:
b8:a1:ba:80:25:3f:d1:6f:4d:d3:51:f4:bb:62:65:f5:15:85:
28:25:d6:03:aa:9c:e3:8b:9d:ff:c0:46:cc:28:27:0a:4c:6b:
24:78:f3:01:48:1e:6b:fe:4a:63:36:b6:d3:f1:c6:03:00:5c:
5e:ea:60:77:c9:4e:fd:8f:3a:be:f2:2e:20:e3:7f:a4:9c:11:
5f:26:ab:34:aa:97:b6:9b:4a:fc:d7:ef:a9:af:dd:b4:cb:df:
f7:83:61:3d:56:9f:ca:1a:01:a4:e6:b4:47:13:e6:d0:c3:7b:
61:bc:86:be:cb:a3:f8:15:5b:e8:1a:43:18:b8:94:b5:d0:d5:
10:cc:25:92:56:12:c9:5a:c7:ac:8e:07:c9:4d:66:e3:41:59:
1d:1b:61:5a:85:c8:20:4d:e9:f2:ea:ab:22:62:a4:28:c4:13:
31:15:79:e1:92:71:04:b7:f1:06:cd:4a:72:57:d4:d6:2a:0d:
3d:33:44:b1:6d:c3:74:5c:b3:58:a2:5f:ba:99:b4:db:24:dc:
0f:9f:ac:f4:5a:76:4a:23:9a:09:ab:9c:9a:d5:dd:f0:9c:52:
5f:07:77:0e:ed:ab:bf:74:c7:e7:8d:c8:3f:3a:c5:06:b2:83:
87:45:09:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:16 2025 by rpki-client