Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
File: Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json)
Hash identifier: ab9ohzzbFnUnuVe4HNYXftgNe3/Azhk1CFlWFeZ8myI=
Subject key identifier: 13:46:CC:54:FB:22:C7:77:85:60:CC:F5:1F:03:D5:7B:09:87:D2:DC
Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Certificate serial: 0197B6A1E7A40EFF8EF7C293FD54676C1DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
Manifest number: 1025
Signing time: Sat 28 Jun 2025 13:02:33 +0000
Manifest this update: Sat 28 Jun 2025 13:02:33 +0000
Manifest next update: Sun 29 Jun 2025 13:02:33 +0000
Files and hashes: 1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: LzbcJ0xgZhLWgD/bGS8N6n1BYZBF8803om3vyMY8kBM=)
2: uDx7Z1tuokndeydIySa8WuoqYoI.roa (hash: V+Jlh82Z7YVpAlrJMiPWI0QRjW3a+dx4x4YSGHlfjZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e7:a4:0e:ff:8e:f7:c2:93:fd:54:67:6c:1d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Validity
Not Before: Jun 28 13:02:33 2025 GMT
Not After : Jun 29 13:02:33 2025 GMT
Subject: CN=1346cc54fb22c7778560ccf51f03d57b0987d2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:09:16:31:29:50:b4:9c:e6:12:cb:50:e4:
d1:2c:a7:20:0e:61:8e:1e:10:18:92:25:af:d5:9d:
71:21:ac:de:0f:6b:2c:7e:37:51:06:cb:a4:3f:8e:
0c:9a:ab:a5:7f:95:fb:44:58:5e:8f:ad:bc:f2:68:
97:c3:0c:ee:55:64:df:9a:5b:5c:5b:62:cf:06:2d:
7c:eb:47:fa:05:19:d0:38:47:67:13:fb:6a:6e:ca:
90:4c:7a:58:57:e4:7d:76:f8:b6:ff:6c:82:97:10:
bb:ae:89:2d:0b:2e:a5:b1:4b:fe:ba:1d:f9:5d:b7:
b1:63:52:37:7f:d0:79:a5:b3:e2:05:7b:c4:5d:ff:
7b:82:7e:54:f0:c2:36:d0:81:74:5b:19:dc:57:64:
b6:78:1f:d0:52:c8:94:b7:4a:0d:73:26:1f:2e:67:
86:8b:08:04:7c:7e:9a:af:85:68:41:4b:7c:fb:75:
7b:c0:0b:22:07:1b:fd:fa:d4:36:d3:9e:ee:04:6f:
3c:a8:ed:89:fe:72:91:1b:f3:a9:b1:18:70:00:e4:
4e:f5:f8:d1:e6:61:14:67:ee:32:87:42:8b:13:75:
7e:e8:63:96:76:35:0b:71:ae:d8:28:25:21:fd:c0:
aa:bf:b5:f1:6f:56:0b:85:1c:38:b3:44:dc:d2:e6:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:46:CC:54:FB:22:C7:77:85:60:CC:F5:1F:03:D5:7B:09:87:D2:DC
X509v3 Authority Key Identifier:
keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:2d:c3:d3:a8:5b:e6:43:34:73:2f:08:b3:c9:0e:d2:c2:90:
97:3c:fb:08:e7:d4:ee:63:43:7a:cc:3e:c4:36:7d:a5:e2:65:
28:9f:de:0c:ca:92:cf:f0:4b:cd:4c:d8:f1:df:e4:b2:8b:cd:
6a:1e:62:55:b6:32:cb:8b:2e:ed:65:8a:cd:45:82:e6:76:49:
5d:ba:c9:32:68:78:7e:a9:12:0f:e7:13:c6:e3:eb:c9:ee:18:
02:f3:0d:66:d4:4a:2a:d2:d3:a6:ef:36:ab:da:31:50:d1:b8:
4d:50:d6:5d:39:67:f1:4e:cc:9a:df:cb:63:5c:e6:bc:85:ab:
9b:11:4a:59:5f:d9:27:2f:62:72:55:42:2b:98:de:5a:0c:60:
e5:4e:e1:86:04:6e:ce:47:58:f7:21:2a:12:87:75:bd:ee:b9:
79:57:e8:7e:29:7f:2a:2d:04:e5:63:ae:bd:65:4c:37:ef:a2:
50:b4:f4:e3:ac:20:a7:e9:4c:aa:09:a6:39:3f:b8:58:e4:e2:
87:f4:9f:0e:86:96:9e:d7:64:2d:ae:ab:bc:31:30:17:23:9b:
d7:91:8b:4c:c7:f6:c4:76:b3:61:c7:f4:27:06:ff:87:c8:16:
06:29:7b:60:70:c9:06:73:f4:61:07:ea:d6:0b:64:a8:a8:42:
2b:5a:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:12 2025 by rpki-client