Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
File: IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json)
Hash identifier: RkBZW7OMadGtBYMIuh2Gt/ZORnFkWcLdCFh2A6Yv2YM=
Subject key identifier: 7A:BB:5B:79:CB:45:86:22:58:16:AB:57:D5:65:8B:05:33:77:95:CC
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial: 0197B7EA17690D0099BF67705F32B7BAB7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:01 +0000
Manifest this update: Sat 28 Jun 2025 19:01:01 +0000
Manifest next update: Sun 29 Jun 2025 19:01:01 +0000
Files and hashes: 1: GNNeHZyvG9VKvKXPSj2VAqX1Q4o.roa (hash: l5teIcaNt4zv8uIriCA79rj79r37yRmFeLrH41aNJJA=)
2: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: KzaC0Vu3Algvpta5sZ/R2OFtCM00knQh6fjaZnvYBAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:17:69:0d:00:99:bf:67:70:5f:32:b7:ba:b7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
Validity
Not Before: Jun 28 19:01:01 2025 GMT
Not After : Jun 29 19:01:01 2025 GMT
Subject: CN=7abb5b79cb4586225816ab57d5658b05337795cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:56:c0:5e:6a:25:f8:63:e4:c1:92:ec:5a:
8b:93:7e:e2:3f:b0:10:38:bf:1a:a7:06:e7:07:2e:
a7:46:76:70:a9:06:68:ff:a5:4e:6a:44:4d:95:5a:
e6:0b:f1:d7:14:27:a0:1c:81:ed:48:2f:5f:af:25:
b8:c8:c4:29:c2:64:86:0f:75:c8:dc:72:19:09:a2:
72:c8:21:a3:b0:50:3e:b8:4e:0a:08:e6:ef:3d:09:
46:91:34:4d:0c:0d:9c:d0:75:3b:e2:d7:09:31:b0:
69:d8:05:3f:35:7a:a8:95:79:1f:cf:77:14:46:13:
dd:8f:e0:32:3f:e0:e8:78:73:43:82:f9:33:55:33:
9d:1e:5c:71:46:05:22:d0:2e:58:3f:9e:68:a4:19:
8b:52:0f:e3:33:f4:54:b1:db:79:2d:9b:87:92:74:
7e:bb:81:83:66:e3:49:cd:75:31:f7:f2:05:4d:57:
c0:4a:e7:3a:25:16:f1:bd:d3:78:4a:25:d5:f2:ff:
2f:7f:72:16:49:c3:4b:ba:8b:86:15:36:94:f0:8d:
bf:68:b9:ed:8b:e9:7e:fa:d2:2e:e7:d9:1f:d5:2f:
5a:25:a9:0e:5b:cb:d5:ff:f5:7d:28:6b:b0:d9:b3:
6e:46:5b:89:d1:90:48:17:b9:9e:64:e2:57:f0:bc:
2d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BB:5B:79:CB:45:86:22:58:16:AB:57:D5:65:8B:05:33:77:95:CC
X509v3 Authority Key Identifier:
keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:71:e1:70:a3:e8:bd:82:46:ba:29:d1:3f:db:e4:68:20:70:
8e:71:5d:ca:da:33:ae:2b:43:b2:6e:44:ae:af:07:92:e6:45:
29:4c:50:a2:80:a9:9b:9f:36:a9:2f:2c:44:2a:9c:c2:88:d3:
33:03:4b:51:aa:98:ac:d8:3d:3d:4a:34:a5:20:35:2c:21:53:
27:ad:a4:2a:4f:65:a6:87:69:50:1f:2f:c6:3c:be:8d:e1:1c:
0d:41:1a:9f:e9:00:b0:15:52:32:75:ce:9c:6b:59:ca:00:7a:
07:de:f4:6e:8e:2e:f3:4f:59:99:9a:d1:fc:bb:ff:cc:c1:9b:
9b:41:25:a5:cd:3c:bf:c8:67:bf:8d:63:4a:3b:c2:ee:1b:10:
89:c1:d0:99:bd:8f:e2:11:42:76:f0:66:b1:df:0e:61:45:ba:
58:7b:34:76:e0:98:cd:68:c4:ee:42:56:41:17:c0:e3:5e:8e:
31:c3:ac:f8:5d:80:2b:85:2f:60:10:61:bd:4a:98:1f:ab:3d:
c3:4c:93:55:33:24:58:78:4e:ae:78:aa:80:1c:a3:eb:6d:e1:
35:6b:88:28:8c:b6:78:02:88:c6:22:06:68:4b:d5:59:66:60:
26:3e:3d:d2:6a:89:df:f5:c3:c8:1c:fc:36:cb:9d:f0:e6:ab:
dd:dd:15:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:30:25 2025 by rpki-client