Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json)
Hash identifier: r+32gUpupBP4a4P6MpkpElsY7rdsdCLvcPxtODfIGhw=
Subject key identifier: C3:E2:43:96:3E:6F:07:42:5B:AA:9D:B4:90:06:FD:A8:35:B3:D1:C9
Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10
Certificate serial: 0198D77393078971216C29287137A196F982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
Manifest number: 34
Signing time: Sat 23 Aug 2025 15:02:12 +0000
Manifest this update: Sat 23 Aug 2025 15:02:12 +0000
Manifest next update: Sun 24 Aug 2025 15:02:12 +0000
Files and hashes: 1: 6q7TVMacTBaYR4P4ix3oetf6VRE.roa (hash: uLRq0asuqIHTiwS92wqc71gnPUUH1B7QJ0+2fDVufHI=)
2: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: g7mTNmsiaSDe2ViuSxsJZ0J054PEXzUKPYnvdSOEutk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:93:07:89:71:21:6c:29:28:71:37:a1:96:f9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10
Validity
Not Before: Aug 23 15:02:12 2025 GMT
Not After : Aug 24 15:02:12 2025 GMT
Subject: CN=c3e243963e6f07425baa9db49006fda835b3d1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b5:0a:55:c0:a4:5f:a2:f2:00:09:0f:b2:ad:
60:dd:f0:a7:2c:43:43:00:dc:a0:85:1e:17:27:55:
8a:c2:30:ba:cd:c6:98:f1:42:1b:25:02:11:92:40:
01:ec:9a:83:9a:a1:38:48:53:05:11:0d:ce:7f:66:
53:a3:03:0a:c0:00:77:e7:8d:b8:1d:e3:d2:1b:8c:
f0:43:99:8e:3a:52:a1:24:0a:be:ca:54:97:21:85:
ec:c7:fd:e3:87:cb:be:6c:e6:1b:d5:43:ac:61:f6:
de:b9:a2:fe:3b:7e:5e:3b:f5:5d:c5:25:a0:83:0a:
0e:10:84:ac:0b:9f:42:be:21:dc:08:b1:b6:bf:3e:
ee:8e:48:e7:d2:6d:1c:f5:73:4f:37:c3:67:8c:72:
a1:5e:3e:ab:16:22:f9:a4:0a:63:3f:8f:25:00:90:
d8:fa:32:4c:24:fc:87:e1:55:0a:7b:5b:86:82:05:
ea:fd:53:84:e0:f6:a5:5a:57:01:e6:69:1f:c1:c5:
88:b9:2c:c1:53:ad:cb:0a:50:ed:f4:c1:11:91:50:
03:97:26:63:a1:5f:03:2a:b8:f7:81:f6:c3:e6:2e:
a6:f1:c7:c1:40:92:ce:f4:ab:95:41:9a:69:b1:9a:
ad:3a:00:ec:85:3d:95:e9:b9:15:07:79:c2:50:34:
ba:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E2:43:96:3E:6F:07:42:5B:AA:9D:B4:90:06:FD:A8:35:B3:D1:C9
X509v3 Authority Key Identifier:
keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1e:d7:c6:aa:3d:27:09:88:3e:bb:c1:5d:0d:05:aa:fc:14:
75:95:b5:48:4a:22:a0:ed:fa:55:c0:b8:ae:14:13:a0:eb:02:
71:73:8f:81:16:53:b8:df:30:29:d6:17:bf:49:a3:5d:db:95:
5e:89:62:f5:e6:83:c9:bd:4f:95:93:32:cd:4c:69:0f:1b:d2:
00:7c:c1:97:b4:25:84:e0:75:21:65:a7:04:a8:9b:96:b0:d9:
37:72:5c:97:e3:db:93:34:b5:e3:bb:aa:dd:80:c1:1c:c7:d3:
77:bf:5c:35:c1:5b:98:6f:22:05:ef:76:e7:fb:5d:a4:8b:26:
08:b4:ca:8e:b3:f0:27:f9:3f:aa:5a:3b:a7:19:ba:ed:31:14:
be:e0:f9:cc:51:e9:d6:71:a6:ea:97:db:c6:10:97:c8:dd:87:
52:26:cc:50:86:e5:37:ef:81:51:a7:71:a4:93:f8:75:2d:fd:
f1:89:d4:ea:16:8c:2c:56:14:a1:7a:7e:92:70:18:74:9d:e5:
76:f6:b2:da:3f:85:e5:5a:27:83:b1:63:fd:bd:ff:83:26:72:
83:7d:93:cd:5e:3a:b5:da:9f:e5:36:12:6d:a5:29:26:7f:33:
a3:36:38:da:90:95:50:01:56:72:d6:63:a9:d3:41:b5:07:d4:
31:23:cf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:35:37 2025 by rpki-client