Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
File: IY2n_1dueNwjTrdMvwcwdsH368k.mft (raw, json)
Hash identifier: FvpbTSHePHdK3GMEg04FvWC6j+/s52sZtf1zC/cp2CU=
Subject key identifier: 27:47:4F:18:2C:EB:76:0D:98:CB:55:A5:C3:75:76:BB:7E:7F:3B:E0
Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
Certificate issuer: /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Certificate serial: 0197B6D745155886A50943AE2D5D70BFEA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
Manifest number: 11D8
Signing time: Sat 28 Jun 2025 14:00:50 +0000
Manifest this update: Sat 28 Jun 2025 14:00:50 +0000
Manifest next update: Sun 29 Jun 2025 14:00:50 +0000
Files and hashes: 1: IY2n_1dueNwjTrdMvwcwdsH368k.crl (hash: l84a/npYklAAuIHUDfCa1P8T18Vw4alZ0INCUn6pzOo=)
2: vHFL3NqT62c-dvNoqZM6UY1Qkso.roa (hash: a6jTEveih8CJwQfmE458rXUCSvGrU0Bb9osIwlUUdEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:45:15:58:86:a5:09:43:ae:2d:5d:70:bf:ea:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Validity
Not Before: Jun 28 14:00:50 2025 GMT
Not After : Jun 29 14:00:50 2025 GMT
Subject: CN=27474f182ceb760d98cb55a5c37576bb7e7f3be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:a0:32:91:1f:8b:65:58:f9:8e:b8:a3:a1:
a6:d7:06:e1:d6:ac:a0:60:8c:62:05:c0:a2:ab:9e:
d5:ee:b9:b0:f6:75:ba:b8:77:ee:12:ce:a0:73:de:
18:4b:70:d5:3c:93:8f:03:b4:ba:78:31:af:1e:cb:
a4:83:9d:b5:53:9a:8e:97:e0:a9:c8:8c:18:12:79:
36:a6:44:42:c5:13:19:77:21:c9:a3:5d:9b:0d:43:
fe:e3:7f:6a:42:48:63:8c:97:8d:71:9e:85:ad:36:
7b:c0:ec:a6:9e:af:5a:49:57:47:35:dc:be:f7:5e:
c8:d2:d8:90:0f:54:b0:a2:e5:34:72:72:96:24:e4:
49:ef:80:1c:35:b6:0f:c9:f2:5a:c1:f3:25:7b:7a:
9d:26:36:b9:ef:c2:7a:40:4a:38:64:9a:dd:00:2a:
63:e6:b9:82:0c:2d:e2:23:ec:16:35:c3:a8:ea:77:
51:51:11:25:ac:43:ec:ac:65:50:ae:86:b2:d8:0a:
1b:7e:29:c2:6e:84:4d:73:e7:cd:66:69:91:ab:ad:
67:49:2e:c2:ba:d5:f3:56:ba:ae:2c:8d:3b:2f:1a:
05:28:d8:bc:ba:e5:9c:2e:a1:47:d6:45:01:8b:d7:
0c:df:3a:cf:f6:8a:c8:9f:62:90:9b:0e:51:1e:23:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:47:4F:18:2C:EB:76:0D:98:CB:55:A5:C3:75:76:BB:7E:7F:3B:E0
X509v3 Authority Key Identifier:
keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cc:59:bb:f9:81:1f:34:8e:ed:51:07:00:60:0e:2a:98:72:
e7:34:45:47:fe:d3:d7:03:7e:cd:9e:50:eb:e8:69:ce:62:b4:
89:3c:fc:04:1e:af:50:bf:69:66:04:02:3c:26:93:e4:4e:9f:
a1:f7:d8:0d:42:3b:48:28:7d:4d:b4:86:04:3b:4c:57:8f:51:
dc:11:97:9d:f8:9e:ad:fd:f1:bb:85:44:ee:5d:19:4e:bd:ee:
af:77:24:53:11:e5:1b:b2:e7:23:42:b9:c5:e4:ae:54:b0:63:
bd:07:93:5a:33:3a:37:6d:3d:88:c7:17:d1:13:7d:ad:80:3b:
8f:7e:10:15:02:31:e3:b3:f3:37:1f:0e:32:dd:8d:e3:bf:a5:
d4:ac:87:cf:6e:05:66:c0:ec:ac:b3:81:f7:c0:42:b4:8f:29:
68:74:11:e5:e8:5b:10:52:63:cc:cd:20:59:cb:2a:03:64:11:
1a:23:30:c2:d0:38:e7:74:d8:c8:fa:bc:a2:9e:f6:21:b5:8e:
ec:38:b3:47:e7:ac:34:5d:23:9e:a8:6e:80:a1:fa:cb:17:ce:
b0:10:8e:83:0d:07:5a:b5:7b:5a:12:37:d5:97:e9:53:ca:71:
e0:24:1f:03:50:4b:d3:e8:d6:e5:73:7c:ec:16:50:15:a3:20:
82:e1:a2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:11 2025 by rpki-client