Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier: zEJo+bgLanig3nUlS7kyOCnKeR/q1CO/9XFEeCl0O+E=
Subject key identifier: 34:7A:B0:07:13:31:65:D5:C0:EF:9D:07:C3:30:BB:78:5C:AC:06:25
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 0197B7EA7039459CD7F1E29E9E2D5AAE7E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 19:01:23 +0000
Manifest this update: Sat 28 Jun 2025 19:01:23 +0000
Manifest next update: Sun 29 Jun 2025 19:01:23 +0000
Files and hashes: 1: DE9IUhyQDVKAZFd3LetU9Q2xs6k.roa (hash: 4yKIJoSmqEpGXf1pIollJ7FnnZ1pkmaGTlVLtjz3pSc=)
2: H8-4BKw4Tio0v7fBDDkOvu0xYf0.roa (hash: KAd/cINuj3Zmkb8yZBl9rfV147mzpewaBmWKPtSwHrI=)
3: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: Ba/DhLzlUJK4lc7HrviXz/DPdQNzLhLdiIhtFiK0hXc=)
4: j_UhRom1_CjoZ8ktPpSsCzemlX0.roa (hash: p3RE9tXJ28D2EkcXNDeylKcBqqXVLJJQRP9qM16ttXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:70:39:45:9c:d7:f1:e2:9e:9e:2d:5a:ae:7e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Jun 28 19:01:23 2025 GMT
Not After : Jun 29 19:01:23 2025 GMT
Subject: CN=347ab007133165d5c0ef9d07c330bb785cac0625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:ca:6d:0d:43:89:61:1a:0a:c9:74:2d:26:
9d:4d:4c:5a:38:5f:2a:74:de:9e:86:17:d4:d3:2e:
d1:4e:c4:c5:1b:45:11:42:03:0d:ed:62:85:b1:ab:
99:6f:44:85:f5:29:c0:d2:8f:38:9b:67:9b:1b:20:
35:60:aa:55:0c:04:c5:c0:bc:8a:08:76:e9:a6:d6:
4c:28:34:8a:eb:b0:d2:ea:94:d0:fd:83:3a:a0:26:
61:98:5e:17:5b:06:86:3e:ad:bd:68:bc:9e:fc:94:
ff:1c:dd:0f:f3:54:93:8a:44:8b:be:2e:b7:37:c0:
6a:13:94:e9:f3:69:52:b1:55:f9:f3:26:4d:de:77:
82:09:cb:f8:03:99:d6:8a:20:aa:80:d8:ef:bb:ce:
c0:2c:86:56:04:33:d9:c2:5a:8d:9a:d2:f3:d3:ab:
0a:ab:91:27:2c:b1:76:ec:27:a1:89:5b:e7:a9:18:
e3:16:4f:81:58:bb:35:6d:99:ec:40:55:11:62:b1:
b6:6f:11:f9:44:61:86:c5:13:e3:8c:90:f6:e8:f7:
47:4c:98:bc:e4:1c:da:d8:89:97:9f:49:28:80:6a:
36:55:30:65:14:a4:c5:26:e0:78:06:f9:46:c0:2a:
4d:40:32:91:08:73:c7:c6:a3:21:fe:a3:cb:18:4d:
56:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7A:B0:07:13:31:65:D5:C0:EF:9D:07:C3:30:BB:78:5C:AC:06:25
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d6:97:d7:2b:2f:a6:0b:34:58:34:f3:e5:4d:a6:a8:bc:11:
98:f9:b8:20:6c:91:ea:cb:17:06:e1:98:fc:95:9e:a6:8a:f0:
98:4a:d0:2e:6a:dd:c3:09:09:3a:d5:9e:84:b4:3f:0b:21:5e:
61:12:b3:a9:b2:92:89:53:62:15:9b:b9:9a:14:20:cc:c8:dc:
be:57:5c:0a:a7:a2:3e:b7:b9:0b:12:43:7e:d2:4d:52:17:69:
23:5e:4c:26:64:2c:8e:b7:d8:47:16:fb:83:49:7c:8f:0a:04:
36:b4:06:ec:a4:fb:f8:5a:27:00:1e:72:dd:b4:66:c8:16:af:
35:00:35:22:5e:01:4d:db:2c:b4:f6:36:eb:28:88:b2:6d:bb:
20:cb:67:30:9f:b4:2c:c6:ff:f9:2b:3d:8c:cc:ef:e0:e6:1c:
0a:d8:8c:2f:34:cf:52:45:33:d5:0a:07:04:43:bd:bb:84:9c:
17:f2:50:82:21:72:37:fd:a9:25:6c:87:9e:54:d5:b9:6e:e8:
93:15:5f:fd:49:01:ec:3a:f3:47:2e:f6:95:2f:80:b6:06:6d:
78:31:2e:31:7f:06:bc:f1:8b:64:99:e5:67:6b:ab:a8:c6:49:
36:e7:34:7f:6f:36:d4:ed:bc:73:71:b9:08:f4:17:45:c1:1a:
cf:58:90:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:36 2025 by rpki-client