Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
File: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft (raw, json)
Hash identifier: gIw5YFIOKOBnUH5PA4bJJU+SMrYXGfkaJHIrg+WzjvY=
Subject key identifier: 7E:2E:ED:B0:C7:A6:B1:B6:D6:4C:4E:56:B8:94:81:98:6D:B2:77:76
Authority key identifier: 22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
Certificate issuer: /CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Certificate serial: 0197B70E64E34FEEB4A05635D39B6DACB777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
Manifest number: 0C9F
Signing time: Sat 28 Jun 2025 15:01:03 +0000
Manifest this update: Sat 28 Jun 2025 15:01:03 +0000
Manifest next update: Sun 29 Jun 2025 15:01:03 +0000
Files and hashes: 1: 5h9N95WR6G3ZttKnfAaRL_2XfKs.roa (hash: Wu3zPxSXCsayNSHW7YvNoHAYtN3gQjTl9ho9qfJB69k=)
2: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl (hash: Id9VV+6P+ae6cWppHzBK2aqd17JNuSCCoMdId3CFAyY=)
3: mWDbGVVpCQ84rC7Zv5fGnlAS0IM.roa (hash: p+WC5acLc9Vp8ZBrdZrqWpaCEJthWpQv4NHUQY+p8+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:64:e3:4f:ee:b4:a0:56:35:d3:9b:6d:ac:b7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Validity
Not Before: Jun 28 15:01:03 2025 GMT
Not After : Jun 29 15:01:03 2025 GMT
Subject: CN=7e2eedb0c7a6b1b6d64c4e56b89481986db27776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:f2:ed:de:88:37:21:be:16:24:0d:bd:75:
5f:6b:a6:fd:f8:a9:f3:68:3f:6c:ae:64:7b:4e:f3:
b6:5f:ee:55:d3:63:53:af:ae:60:70:d9:e7:10:7d:
de:98:97:ce:89:86:6b:3e:ac:6c:49:40:f4:dd:f5:
0c:d5:5d:44:33:15:1b:eb:b2:4f:91:64:21:af:67:
ee:14:76:65:78:f2:fb:0b:7e:26:59:5d:6b:e1:1f:
41:0f:dc:f3:58:9e:15:52:37:5b:d7:0a:63:c3:e0:
bd:81:d4:bf:aa:8c:85:00:43:7b:a0:2a:29:3d:9f:
94:85:78:21:1b:7f:d0:11:cb:03:88:0a:7c:e4:9f:
a6:2c:67:96:61:2b:c0:03:41:c6:38:3f:d6:b4:42:
67:bc:c9:15:28:fd:98:94:17:51:e2:db:20:d1:c5:
e8:5f:e8:2f:25:87:84:e3:bc:29:ec:f9:2e:7e:ab:
7d:6d:83:fa:ed:c1:76:c4:c5:e6:ff:37:e6:5a:f7:
fb:ae:47:81:ce:cc:2c:c8:a5:d5:42:cb:39:3e:39:
8f:43:7d:2a:a2:84:3e:c2:5f:06:f4:24:14:7e:32:
d2:4b:0d:3b:2a:96:7f:ce:49:08:9e:c4:59:d7:90:
ac:28:6d:cd:f3:c9:33:01:e5:8f:07:48:14:10:35:
5d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2E:ED:B0:C7:A6:B1:B6:D6:4C:4E:56:B8:94:81:98:6D:B2:77:76
X509v3 Authority Key Identifier:
keyid:22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d2:b4:dc:35:f1:59:b0:6e:cf:ef:fe:7d:53:42:1f:42:34:
66:72:a1:89:0e:0c:07:20:69:43:35:96:60:dc:55:d1:82:ed:
40:77:e0:0b:1b:ae:1c:28:40:0f:1b:7a:00:a2:b6:0b:8b:9f:
1d:5f:72:7a:cd:9e:be:35:54:54:16:c1:9d:55:90:ba:97:35:
1f:d9:54:08:22:4b:4c:39:1a:15:a4:74:4d:b0:92:4c:04:46:
a5:6f:f8:6a:3e:36:22:53:dc:78:8c:a9:4b:e6:82:a7:22:85:
52:54:bd:1a:b3:5c:02:01:27:ae:1c:83:eb:27:87:7c:cf:d9:
5e:be:ca:6c:04:28:51:b1:52:22:9a:25:e4:b8:8c:63:e6:36:
e0:9a:93:88:86:69:5f:a2:7d:f5:3b:08:9f:3b:5f:dd:42:44:
b6:f9:f5:20:31:1b:9e:5e:61:bf:ae:6a:0d:e9:7d:3f:70:0a:
cd:71:0c:5f:1b:c5:2a:4b:6a:65:c3:05:d3:fa:39:f1:8c:6b:
31:43:2f:99:e7:55:41:26:6a:92:0d:6c:30:39:b2:68:8a:79:
ed:de:16:bd:d4:55:10:ea:f4:29:12:c4:02:9a:58:ac:16:f3:
05:89:a0:30:05:a9:c7:38:b2:eb:eb:f5:7f:08:7c:85:a5:4f:
30:7c:36:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:27:07 2025 by rpki-client