Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier: AsyGbbgkIOFdmxcPwDNHfyI+eohqf4uycCwR7pcgH1Q=
Subject key identifier: 7F:BF:02:F7:14:A9:F8:18:10:D8:C7:8F:5A:43:A4:BB:2A:9F:BE:91
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 0197B8C61A5F8C0C8E9C1258296268B19446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number: 0A2B
Signing time: Sat 28 Jun 2025 23:01:19 +0000
Manifest this update: Sat 28 Jun 2025 23:01:19 +0000
Manifest next update: Sun 29 Jun 2025 23:01:19 +0000
Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: OiEYAO9jU53gX/1juWVP+tVVuh1K/UKISxkd5EXPoE8=)
2: l-HFEGYP57VmF8aDDh7--ZbJBDw.roa (hash: z6foBKVqU7T5Yu/Dwks8ZalWU/MYlRsXoQCU7GPCUOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:1a:5f:8c:0c:8e:9c:12:58:29:62:68:b1:94:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Jun 28 23:01:19 2025 GMT
Not After : Jun 29 23:01:19 2025 GMT
Subject: CN=7fbf02f714a9f81810d8c78f5a43a4bb2a9fbe91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:52:dd:92:25:2c:77:59:77:58:bd:95:96:
73:c9:52:64:66:19:2c:93:c1:08:e3:0e:03:e5:dd:
0c:d3:72:92:8c:1f:04:9e:81:26:01:96:47:35:d2:
fe:a2:d1:29:d8:00:e9:11:f8:f3:11:21:8c:5f:88:
93:7e:ea:7b:5a:f3:6d:fb:31:78:1b:ac:92:bc:3e:
32:21:72:aa:cc:64:b2:15:90:0d:6f:68:0c:a8:0c:
79:ee:b7:57:dc:ce:a9:55:49:d3:00:f1:e3:73:a5:
b8:b2:69:09:0f:08:fc:df:0e:73:fb:9a:b8:d5:66:
01:d0:76:2f:2c:1d:f0:88:d8:5f:96:aa:4b:0e:5d:
4e:5c:2c:81:6f:81:39:c5:0e:4d:b3:3e:47:48:75:
0a:d9:a8:14:97:80:7b:46:72:60:5f:d7:43:82:8c:
4e:90:26:d3:ef:43:6f:29:df:d4:54:f6:50:ed:2f:
a2:f8:d4:97:04:84:29:9d:d7:e7:71:65:72:4d:50:
ef:88:e3:47:bb:26:fd:55:cb:be:01:bd:a2:f1:90:
b7:03:1d:07:67:8b:1c:b8:24:5d:f8:32:9a:59:f6:
06:98:c5:b7:4c:f1:82:b8:9a:a4:e2:aa:6b:ab:f7:
72:97:ec:93:9e:09:8e:08:b0:c2:eb:78:e7:ff:cd:
b7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BF:02:F7:14:A9:F8:18:10:D8:C7:8F:5A:43:A4:BB:2A:9F:BE:91
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9c:44:11:c0:71:8a:99:19:4a:1e:62:a7:73:a0:a4:f8:87:
24:11:e8:87:3b:5b:c1:3e:73:bf:94:16:8e:56:b6:46:34:59:
21:bc:e4:86:ad:8c:b9:1c:de:5c:4f:b3:3c:be:06:0f:72:f8:
d1:47:3c:7a:5b:35:81:88:b5:13:c6:c6:02:fb:b1:93:52:ef:
52:12:c9:81:a7:8d:2d:0f:3e:08:af:96:e9:4a:c8:a8:07:3d:
47:97:e8:6c:fa:e8:22:61:fd:db:26:e3:37:d7:df:3d:fa:84:
8e:05:73:ba:f0:c4:cd:bb:b1:4b:4d:ff:0f:9f:0c:15:06:b2:
23:52:e9:68:46:e5:05:ae:85:f7:52:4e:fa:0f:d6:7e:6e:80:
53:a3:22:3f:62:c2:d8:7b:81:61:13:35:28:c7:d5:bd:56:45:
29:9d:21:12:cf:4e:fc:b5:a5:15:15:b9:4b:5b:a8:a9:40:08:
ea:57:f3:ea:d6:6c:8b:d4:11:89:44:3e:29:39:4e:b4:ec:d1:
e8:b1:d1:ca:03:e9:02:4c:1b:9d:10:eb:4b:43:b8:90:44:ba:
91:44:9b:d4:b6:ee:dc:55:3f:69:47:a9:04:9c:03:3e:b6:df:
69:3f:74:1b:23:d7:86:91:b7:cc:1a:30:4b:41:e9:15:fc:11:
54:0f:ad:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:13:34 2025 by rpki-client