Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
File: I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json)
Hash identifier: /PmEzYb3NVm3acp50kreeyJV6zi3slG0a3I9mLd9aKk=
Subject key identifier: 3B:9F:B0:5F:FE:B0:B4:7C:A1:98:72:82:BA:22:89:33:74:A7:AD:B6
Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Certificate serial: 0197B70EB80368EABD968C20B23730EAF002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
Manifest number: 02AE
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: TG7gz8Ffm61kiTuW4E6JTiMfgEPnl/SvMd/l/yxjKe8=)
2: j4EIa7tKAt7zUJqXstTzU7rzvAM.roa (hash: KBhYqMx9SY3f4s8BMjZo/0KJeCGNnKyC4D8ert+K2y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b8:03:68:ea:bd:96:8c:20:b2:37:30:ea:f0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=3b9fb05ffeb0b47ca1987282ba22893374a7adb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:10:70:e5:59:a8:15:71:ce:ca:dc:47:59:
87:06:ce:8d:54:6a:b6:11:1c:85:53:d5:e7:02:cd:
14:bc:02:ea:44:f1:50:c1:8b:e0:20:d9:66:9b:2b:
a8:f0:15:7b:52:c2:d5:e0:8e:90:52:b0:89:6f:87:
b0:33:42:88:6b:e3:ba:66:31:4f:bf:ad:88:b1:3a:
3b:fa:23:0a:d0:7c:75:42:5d:cd:11:17:b1:4b:ff:
de:36:d3:41:b7:1a:bb:4c:bd:85:22:4f:19:92:e5:
83:86:3a:fd:3e:4d:ba:d2:20:11:de:bb:42:4f:39:
9f:bf:84:c7:8e:b6:70:91:e8:0a:1f:7e:af:d9:5e:
cd:e1:b5:e6:08:53:d3:94:08:eb:65:fc:44:49:f3:
da:92:44:c4:58:e4:8d:9b:78:7a:dd:fc:7c:b3:40:
e8:a4:7b:5a:41:02:8f:29:90:4c:96:85:62:26:88:
5f:3b:02:7d:58:8d:56:97:42:72:7b:53:bc:68:2c:
84:84:eb:cb:9b:e0:03:c6:5a:a7:af:64:6e:e8:4c:
d3:7d:d5:d3:31:f0:b9:de:1b:c5:3d:52:83:93:4d:
f8:26:24:39:4c:33:97:1b:8e:d3:29:b8:56:d5:b0:
1d:9a:ab:20:18:bd:ff:8a:b0:eb:3c:89:35:3b:c1:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9F:B0:5F:FE:B0:B4:7C:A1:98:72:82:BA:22:89:33:74:A7:AD:B6
X509v3 Authority Key Identifier:
keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:78:0d:0f:67:dd:02:d6:f9:1a:5f:10:9a:a1:4e:b7:e1:45:
ed:87:c2:5b:69:d5:95:b0:94:03:a4:72:57:d5:65:9e:98:16:
c5:af:43:73:5f:88:c6:84:b8:e8:15:fa:b0:69:f1:e1:63:dd:
93:f9:de:7a:66:b0:b3:51:dd:07:c0:b9:9f:f7:0e:f9:dd:ea:
84:3d:74:76:a7:e7:e0:d2:7f:c6:00:a2:9f:3b:5c:41:ea:0d:
1f:3e:ab:67:2c:b1:be:d7:3e:5b:2e:08:9d:6c:b4:6b:33:ab:
e3:5a:7c:d9:c7:61:44:ac:40:03:4c:84:67:2b:4a:ca:a1:50:
b2:a8:63:6c:f6:a0:03:12:26:3e:ab:61:69:7a:78:4a:2a:e1:
a7:e5:0c:85:9e:53:f7:ef:5f:74:19:36:be:a7:06:f0:67:7f:
48:81:a4:76:47:f3:69:5b:a8:e8:cc:26:33:98:f2:ef:2a:08:
44:e5:ec:cd:04:a8:27:b9:f9:45:14:ae:2c:cf:b8:15:ec:5d:
93:8f:91:19:89:9f:35:1c:b7:ba:bf:f4:7d:79:eb:c8:53:8f:
d4:7b:b6:a6:cb:f7:db:b1:84:aa:7e:bb:b9:24:db:d6:e7:42:
4f:9c:0a:49:8a:87:2e:9c:66:7e:57:d6:c2:03:f7:27:59:38:
dc:69:f9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:06 2025 by rpki-client