Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: qXiFvYStez4u4ImlTnthsa1xFHgt8af5kwDwMMUMeHY=
Subject key identifier: 65:08:BB:9F:02:44:3F:82:F4:E2:92:16:69:BC:23:19:E7:D4:FE:10
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 0197B8C618E605D4BC6CC2A550D5EF4B3315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 23:01:19 +0000
Manifest this update: Sat 28 Jun 2025 23:01:19 +0000
Manifest next update: Sun 29 Jun 2025 23:01:19 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: Pv8bQ6SV4oMt+P+NtU58tZE+DfnELkeIV0z9hpL6FoU=)
2: UsxT3pcVojJYP9Cu4db5XHBOA_A.roa (hash: IuC4o8xqUNTxh+TkbcEBFveFUP/SyyaXqWJ5U0z84Vw=)
3: uCJs3VfOd9XlMzz8RlxYwm6JR8g.roa (hash: aQ8GGeLzceXoLXJ/X0KURkE7J4DP5Ck+ioxtdgiJTwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:18:e6:05:d4:bc:6c:c2:a5:50:d5:ef:4b:33:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Jun 28 23:01:19 2025 GMT
Not After : Jun 29 23:01:19 2025 GMT
Subject: CN=6508bb9f02443f82f4e2921669bc2319e7d4fe10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:b5:f7:35:6d:20:36:4a:21:a2:b7:16:53:
87:82:4c:8c:f5:11:d9:d6:44:a7:31:cb:46:c9:4a:
2a:82:80:cb:b1:a4:ff:f5:b3:06:bf:f8:03:58:db:
8a:99:ed:58:a2:da:ca:65:0f:66:67:83:a2:62:82:
58:67:78:28:9c:46:22:97:83:a3:ca:00:2f:ed:c4:
07:67:19:a3:19:40:3e:34:76:b3:b3:e2:ed:a1:e5:
72:1d:fc:6c:f0:73:de:1c:53:7b:72:49:3e:a4:ec:
65:93:5c:d1:86:cc:6e:7c:ec:2d:83:ab:a0:7c:8d:
59:f4:33:47:e0:13:93:4f:42:8b:d9:1e:8a:55:90:
39:1f:5d:d1:ec:43:9f:c7:8c:03:95:88:eb:49:90:
66:96:9b:34:c6:89:c2:03:50:f8:98:9f:02:10:72:
23:2f:ff:cf:41:ee:b1:7e:58:73:81:8e:9d:61:7b:
bf:49:4c:00:b0:0c:e7:29:93:97:5e:c9:0f:5d:eb:
cd:56:f6:72:6c:4f:d5:58:46:b8:15:0f:a3:c1:a5:
48:4c:ca:82:34:1c:17:7b:49:6b:3d:4b:7b:d7:52:
ea:b0:7f:5c:f5:1e:f5:e9:87:af:54:b9:b1:9a:3f:
ce:55:8b:3a:1f:12:fa:60:f8:8b:f6:27:b2:ec:97:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:08:BB:9F:02:44:3F:82:F4:E2:92:16:69:BC:23:19:E7:D4:FE:10
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:58:86:29:1c:97:1c:24:6d:27:4a:15:bb:c9:f5:b9:93:f0:
e9:40:85:f8:40:25:15:ca:e1:83:75:6c:f4:5d:61:d8:10:b1:
d4:ef:12:51:79:f9:ac:74:85:1d:58:fd:58:c3:fd:a2:df:0c:
21:88:6b:6a:ad:3c:60:92:27:01:75:5f:6d:ba:ba:62:0e:3a:
67:5b:c0:3c:a4:ab:bb:3c:3f:cd:74:29:5f:7d:d8:18:81:0d:
58:ed:df:be:26:34:95:85:fe:ba:86:47:b4:5d:ba:f7:bb:1d:
2e:f4:3e:31:13:b2:cf:3e:7a:f4:c1:5c:5a:0e:c0:b6:11:ae:
e3:bd:80:bf:70:be:63:32:98:a6:2b:23:b5:89:59:18:4e:f5:
c9:a5:8d:f4:46:b8:db:ae:55:3b:91:95:b9:0a:d4:fb:c2:1e:
fd:82:b3:a3:6d:5c:70:66:6d:3f:bb:26:da:f6:6b:24:cc:6a:
43:dc:53:76:d1:0f:a8:d7:da:cc:be:b8:3c:22:43:89:3a:46:
0c:3f:2e:3a:aa:3f:4b:0b:be:ec:92:cb:89:a9:66:c5:7f:4f:
a3:a1:0f:e4:2f:95:87:4e:11:aa:16:45:e4:a8:0e:53:8d:1f:
c3:a1:0c:dd:e9:0f:1a:1e:4d:51:62:7b:8d:3e:48:54:0e:c9:
f9:3a:2b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:24:19 2025 by rpki-client