Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: TkW5D261BWejN/yqovhFeDZE92IY1KXQ8ChlqTEFXV8=
Subject key identifier: 0E:20:52:D1:2D:0B:B8:D8:18:0E:EB:2D:20:8E:D1:58:95:F6:33:0D
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 0197B6A081D95C3C3F66BD334A5126B1FB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 0D9A
Signing time: Sat 28 Jun 2025 13:01:01 +0000
Manifest this update: Sat 28 Jun 2025 13:01:01 +0000
Manifest next update: Sun 29 Jun 2025 13:01:01 +0000
Files and hashes: 1: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=)
2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: utpUuhzHkLd+1P7ndTiDK5PqGZoikad3W55cuKXWFdY=)
3: l9Ip7JI4fAFd10Cj77KHHSrnVWw.roa (hash: SkELgqgLspURpsKcvlJgINn6NNXlC7+9EjVyn8WnT2A=)
4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:81:d9:5c:3c:3f:66:bd:33:4a:51:26:b1:fb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Jun 28 13:01:01 2025 GMT
Not After : Jun 29 13:01:01 2025 GMT
Subject: CN=0e2052d12d0bb8d8180eeb2d208ed15895f6330d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:5b:92:56:eb:2b:8e:1a:08:50:57:f0:f4:
44:d5:2a:b2:66:bb:08:d3:55:02:b3:4e:ef:0f:e2:
d5:69:f1:79:28:4a:cb:0a:f2:0c:46:ae:ee:34:37:
b6:65:34:1d:e2:ed:01:09:a3:47:18:df:5a:a5:5c:
99:da:b0:e5:fa:3d:68:1c:e0:e4:7e:ca:8b:e5:45:
79:4c:27:dc:0c:80:b0:61:c4:b2:5d:4b:80:6e:e0:
8b:22:33:7b:42:31:1a:66:f8:4b:15:dc:0b:df:b9:
61:46:07:28:4a:67:92:ef:52:cb:8a:5a:fc:fc:b2:
9a:cd:e9:7e:9d:f1:fd:55:cb:e9:ac:03:82:06:da:
d0:b6:8f:7c:b0:22:e9:f0:da:77:68:07:78:02:6b:
45:fa:3f:b5:dc:28:f0:9f:28:30:fb:49:02:28:18:
90:92:2c:54:48:4b:0e:49:fa:4c:15:73:36:f2:cc:
4c:b2:95:3a:3a:73:1b:33:56:5a:c8:f0:ee:1d:02:
2c:aa:ca:c6:9c:96:ab:6a:55:62:9a:8f:ad:64:75:
24:3f:24:a2:98:9b:b6:77:70:18:fb:ba:2e:eb:b6:
13:ac:86:ea:f7:a5:9d:41:27:fa:15:69:d2:4b:cb:
e0:53:15:71:5c:13:cc:64:f4:9c:a5:64:24:ba:0e:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:20:52:D1:2D:0B:B8:D8:18:0E:EB:2D:20:8E:D1:58:95:F6:33:0D
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:73:47:ec:19:15:e3:1d:3d:f6:f7:f4:0c:91:20:32:18:e6:
f1:21:f3:ab:0c:01:aa:1a:85:17:97:41:9f:4c:dc:cc:52:01:
a4:3d:77:2f:95:33:8c:90:54:e0:21:ce:63:8d:b0:bb:2b:88:
0b:ef:be:a2:1a:7a:9a:f8:43:07:de:17:04:47:b9:a6:28:cf:
32:8a:7e:92:22:d4:42:18:1c:b0:5e:cc:71:a5:d2:5b:78:09:
df:c5:25:88:ca:44:a3:cb:c8:ab:aa:fd:e4:11:8e:96:15:23:
86:37:10:0b:7d:96:27:a0:81:82:da:6e:f0:47:90:fb:5a:50:
50:83:4b:4e:50:72:56:d8:96:75:a7:9d:f7:02:6a:f3:4d:90:
01:32:74:55:df:bd:10:97:e8:bb:c1:9c:14:f9:5b:23:31:39:
dc:9c:2f:af:b0:da:82:bd:6f:85:12:83:8b:98:d1:15:89:ad:
d9:a9:e3:18:43:9a:c2:0c:34:46:80:73:97:00:71:9d:29:ac:
05:59:fa:23:85:11:8a:ee:3d:b8:1e:16:6c:75:c0:a7:05:56:
8d:1e:1b:0a:d2:57:3a:ae:68:09:92:c6:97:1f:95:32:09:a0:
e1:38:9e:0d:df:34:e6:33:58:5c:4a:c4:93:98:b9:83:85:e0:
65:78:d4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:39 2025 by rpki-client