Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: +NQmBpXicZPs1xXmSAPFowYBCcOcNy+hiOUnPKCLCLw=
Subject key identifier: 62:87:0F:3A:BC:DA:EB:31:46:AB:C0:E0:C3:C8:FF:21:DD:FE:6F:1F
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 0197B6328BD54C4D0D11223F17C0BFFEFBF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 04D5
Signing time: Sat 28 Jun 2025 11:00:55 +0000
Manifest this update: Sat 28 Jun 2025 11:00:55 +0000
Manifest next update: Sun 29 Jun 2025 11:00:55 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: K4Wt+Vb4CqoCBEgsIlsYuYG4x8fU8XbtMP4mRShPScU=)
2: NppGj-vB7qPIZEIjN2QiF53Di1w.roa (hash: /HZmGG+wWIrcuKRavKc6Cvy6ql5RNC9frBmMmRXn2ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:8b:d5:4c:4d:0d:11:22:3f:17:c0:bf:fe:fb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Jun 28 11:00:55 2025 GMT
Not After : Jun 29 11:00:55 2025 GMT
Subject: CN=62870f3abcdaeb3146abc0e0c3c8ff21ddfe6f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:10:3b:2a:89:3e:f9:46:fc:a1:82:8c:a2:
17:e8:2d:9c:ad:e6:5f:a0:07:fa:ba:92:b1:0d:11:
a2:8c:59:1a:94:88:0b:1a:38:60:57:c2:cd:49:d0:
55:59:3c:e0:58:c6:59:4b:97:96:46:98:81:7f:13:
6a:dd:07:c4:6f:eb:46:5d:e5:12:47:22:ac:8c:0e:
b3:a8:2d:c2:40:39:8a:93:ee:be:b7:2d:08:37:bc:
c7:58:96:0a:0d:e8:cc:f8:07:42:96:bd:d5:21:ee:
e3:30:bc:ba:7e:0a:7a:e7:d7:73:bf:a8:67:07:0b:
3c:3b:53:a0:f4:ac:95:04:1a:c3:1f:6a:e6:31:79:
cf:f7:b8:ed:c0:ee:10:e9:83:c3:7d:d3:22:4c:50:
06:8a:12:bf:49:99:e4:da:13:61:87:ee:9c:ff:4e:
47:89:9b:78:f6:b2:74:b4:45:0e:db:73:3c:72:c5:
fe:cd:69:11:d0:f6:c6:cf:85:fc:db:ad:d4:b5:1f:
f6:ea:0c:84:25:af:50:35:cd:03:da:7a:2e:50:fd:
b0:68:b9:f4:8f:8c:1b:1f:4d:fc:42:63:e2:e6:a8:
fb:19:7d:91:ae:4c:3a:95:15:b8:67:4f:b9:aa:a1:
5a:2d:f6:f7:30:b1:dd:83:f8:0c:1f:c9:21:0e:05:
6f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:87:0F:3A:BC:DA:EB:31:46:AB:C0:E0:C3:C8:FF:21:DD:FE:6F:1F
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d0:d1:cb:6a:6e:0c:2e:e6:73:7f:e5:a1:e1:ac:be:2b:74:
cb:ce:18:f5:60:8f:cc:51:b9:ab:f4:cf:ed:bf:ed:81:13:03:
10:ac:16:74:10:53:fc:29:87:bb:cd:c2:53:ef:ca:29:ff:f8:
f7:09:7f:e5:e8:fa:17:4b:c6:93:78:7b:b0:41:ba:d1:8d:4c:
ca:4a:cf:0b:ce:43:37:0e:01:04:48:ba:91:c8:ab:05:84:95:
a1:48:53:20:17:1a:93:b9:1c:26:d1:64:3a:b5:c5:50:a4:f1:
bb:9b:fd:19:73:94:a2:9e:86:3d:57:5e:ac:04:00:fc:82:34:
08:1a:62:13:9a:07:8c:e3:e0:c3:d5:64:47:7f:ef:c5:59:9a:
50:15:68:6b:30:18:7c:18:af:55:10:a5:68:f1:4b:fe:89:f8:
a7:13:16:62:bb:b7:04:01:58:10:ac:0a:60:2d:75:7a:e2:6a:
cc:3f:88:96:50:4e:59:d4:3e:d7:bf:d0:b0:0c:4f:69:ac:74:
15:96:4a:c5:46:48:1b:40:dd:dd:47:a4:b9:24:61:f7:72:7f:
62:c7:93:82:f6:8f:2a:0e:df:54:14:a7:2b:61:14:f2:7e:5b:
fb:61:1f:cc:91:85:7d:7a:bc:d6:63:e3:58:fc:0a:73:bf:52:
e0:18:e7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:50 2025 by rpki-client