Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
File: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft (raw, json)
Hash identifier: AEpNzVsKueIg5AmtpAxaKgn5nYjlXaaRxJ9GwU+NGNs=
Subject key identifier: 22:9A:C4:2D:60:9B:C6:9E:FF:30:6F:79:BA:65:D7:29:DF:73:E1:94
Authority key identifier: 20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
Certificate issuer: /CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Certificate serial: 0197B6A0C58A035808154F064D0CF5B45999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
Manifest number: 01F9
Signing time: Sat 28 Jun 2025 13:01:19 +0000
Manifest this update: Sat 28 Jun 2025 13:01:19 +0000
Manifest next update: Sun 29 Jun 2025 13:01:19 +0000
Files and hashes: 1: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl (hash: y21WxZmQQEcexOX589vKeY1QVSuWhfHs/+9coF1Zwms=)
2: QpNcCoA4Z5ottRskUsrVfwUI5R4.roa (hash: 3Ookyfb7wHO7/58EMfYEHBR9Z8xGK4lUfT1UByxh2SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c5:8a:03:58:08:15:4f:06:4d:0c:f5:b4:59:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Validity
Not Before: Jun 28 13:01:19 2025 GMT
Not After : Jun 29 13:01:19 2025 GMT
Subject: CN=229ac42d609bc69eff306f79ba65d729df73e194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2c:90:10:be:8c:3e:36:12:4e:0e:7b:d2:0e:
8f:55:63:38:07:da:48:66:a8:61:e9:b4:cc:ef:d3:
56:b2:d6:7d:b9:85:70:29:af:82:83:95:d4:f1:54:
84:1b:17:db:f5:66:73:d6:fb:48:c9:8e:fa:eb:09:
34:c4:20:f3:0d:97:2f:c9:e4:fd:54:fd:54:e6:f0:
2a:d6:d3:d5:38:73:60:5e:d2:bf:41:1d:6f:36:dc:
93:91:4b:df:8a:c4:d5:91:d3:02:c8:f5:44:be:a4:
86:6f:1c:37:af:95:f3:9b:5b:a8:f4:9a:26:5a:f4:
85:87:85:e7:6f:cf:0c:3d:8b:89:c4:b1:b2:a9:d3:
38:c7:5f:b5:4f:aa:6d:ae:e8:9c:27:8b:d4:df:68:
6d:ba:5c:77:ca:30:01:5e:6a:ea:db:5f:a0:0f:29:
a0:1f:e9:00:ca:99:b6:39:49:57:62:7b:7e:72:7a:
ae:c9:ea:76:72:ef:9b:81:47:b4:56:94:ab:1d:15:
bd:0b:8b:95:4e:04:3d:e2:f5:dd:56:b3:5d:d0:cf:
be:13:6e:f9:8b:13:3b:f4:ce:af:4e:b3:dc:a0:35:
dd:8a:d8:6c:1d:cf:c9:58:ac:ae:df:a2:5b:ce:30:
b9:dd:b6:db:dd:f8:6f:2b:d3:c5:11:35:d5:13:ff:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9A:C4:2D:60:9B:C6:9E:FF:30:6F:79:BA:65:D7:29:DF:73:E1:94
X509v3 Authority Key Identifier:
keyid:20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b7:e8:8d:c8:11:59:ee:a3:7a:ed:46:d7:4f:f6:6c:93:57:
da:a9:66:55:ba:a0:2a:72:7a:1b:fb:50:36:af:ca:00:d8:52:
71:5f:41:f0:a8:5b:25:fe:26:25:93:20:5d:07:26:72:3d:2a:
39:e9:76:da:06:45:ad:b6:d7:62:eb:d0:14:a5:2a:e5:5d:65:
8c:00:8a:21:50:86:3f:1a:ec:71:59:e8:a7:68:ad:e0:db:74:
d4:26:da:64:6f:9a:85:ed:b5:d3:a7:5d:7c:0b:8c:50:76:02:
45:ca:06:34:7e:e1:e6:16:f6:12:6b:0b:7b:e8:a4:75:5f:90:
35:3a:49:52:4a:6d:b5:87:b6:25:d6:e5:24:31:d0:e8:7b:b5:
b6:ca:1d:bd:a7:c1:e0:69:b1:5a:01:81:4d:8e:ae:3f:29:ed:
d4:82:d3:69:75:06:08:fb:27:ad:5d:9d:87:35:49:39:c4:0e:
94:4c:ae:03:5c:4b:e3:03:c6:ab:e4:27:fa:16:07:8a:74:84:
c3:ac:38:fa:f4:04:c0:ab:70:e7:30:1e:43:39:a7:03:91:b9:
f3:df:1d:fa:e1:ab:eb:8e:0d:d0:af:3b:81:e5:24:42:3d:c1:
fd:f9:b3:41:c7:7e:5e:00:e3:44:18:3e:38:23:02:64:0a:82:
e5:5a:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:03 2025 by rpki-client