Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
File: IAxw024BOwfk5tjsPqTuQTtKqpg.mft (raw, json)
Hash identifier: 1mrrX2CMvglwhIas/HPcRlT1HUltD/jy1yoMVUeL/BQ=
Subject key identifier: 8F:10:3F:DA:70:5B:05:59:36:48:DB:3A:2C:0B:D9:35:AA:C0:47:ED
Authority key identifier: 20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
Certificate issuer: /CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Certificate serial: 0197B7453CD7FD573B349D7F7B62E1D2B51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:00:57 +0000
Manifest this update: Sat 28 Jun 2025 16:00:57 +0000
Manifest next update: Sun 29 Jun 2025 16:00:57 +0000
Files and hashes: 1: IAxw024BOwfk5tjsPqTuQTtKqpg.crl (hash: zw5VGeGTLThqc9ds/Ik4YiAVTpHfvh8vbfdjaV01uac=)
2: xInhnEQ1Wnjyaeg0NstEg1xaXmc.roa (hash: v0sQzu+7Kta5k4gVJi492esLH7WHwA4RWeUkfyAHe34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3c:d7:fd:57:3b:34:9d:7f:7b:62:e1:d2:b5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Validity
Not Before: Jun 28 16:00:57 2025 GMT
Not After : Jun 29 16:00:57 2025 GMT
Subject: CN=8f103fda705b05593648db3a2c0bd935aac047ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ea:dc:45:21:f9:ea:57:db:44:bd:df:ce:62:
72:28:cb:b5:ec:6e:af:a4:5c:25:08:f0:f8:a6:0e:
1e:02:02:33:cd:a3:3c:a7:b8:22:dd:8c:f2:e1:39:
6e:be:cb:b5:5b:6a:a4:01:31:ff:f3:00:3f:e9:c7:
39:40:95:40:71:30:40:e9:21:47:b0:b8:c5:59:09:
af:c4:0b:dd:93:0f:44:81:70:2b:b1:9f:26:f2:60:
b0:fb:d0:49:e5:3c:d2:5b:43:38:10:13:1b:93:e8:
43:2b:8a:c5:ed:f7:61:f1:a4:22:5f:9d:9d:71:1e:
fc:74:35:ff:85:b4:ce:1b:59:a1:70:8f:c2:e7:aa:
b5:1e:56:ed:0f:c7:27:d4:72:4f:de:7c:cc:1a:e9:
68:7a:8d:62:08:0a:3e:70:17:45:6c:bb:91:68:8e:
3a:f0:da:30:f2:6d:f7:22:cf:18:c1:eb:c0:ae:dc:
38:c1:5d:24:f0:53:32:7e:fb:4e:a2:cb:29:0b:ae:
12:55:76:66:0d:e7:70:11:ef:41:90:d9:7e:39:71:
80:4c:d3:d7:04:05:43:ce:95:20:b7:ad:6c:6a:b1:
0d:5e:28:e6:1d:9b:d8:56:b6:3c:50:ba:e9:e6:9b:
fb:55:02:94:1c:bf:e3:fa:06:75:63:a2:2b:1e:02:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:10:3F:DA:70:5B:05:59:36:48:DB:3A:2C:0B:D9:35:AA:C0:47:ED
X509v3 Authority Key Identifier:
keyid:20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:14:0c:f4:eb:54:1d:55:76:78:84:78:bb:3a:82:89:b1:27:
d3:ac:fe:ab:3d:cd:5e:78:ae:15:c7:4b:a1:bf:73:f1:31:92:
d9:98:f5:96:95:0d:5e:c7:e0:47:a5:fd:f5:78:52:b1:7a:36:
47:36:2f:b8:cb:7f:c8:73:b9:29:39:00:a1:b0:1e:e7:7e:c3:
ac:cb:5b:1f:e6:65:75:75:10:c0:0d:20:80:39:40:f3:b4:9d:
c1:92:21:ed:eb:cb:c3:22:c4:7d:1e:dd:5b:6d:b7:2e:27:49:
73:37:dd:82:40:6c:af:26:08:b5:d7:a6:2f:c8:50:66:87:cc:
67:b9:7d:f8:25:62:11:13:12:a4:09:ae:4c:ab:77:7c:a8:73:
bb:88:0a:af:1a:9d:2d:0d:7f:86:fc:e0:4b:60:a8:a0:f6:e3:
f6:ab:db:56:d6:92:29:6a:ce:bf:3b:48:97:09:f5:bd:9c:52:
3b:ea:02:f1:a6:12:9a:15:e6:bb:7a:78:27:ab:2f:f7:b6:b2:
22:d3:0f:ba:15:76:e8:6b:a0:18:f6:02:f1:05:11:d4:0a:bd:
8f:be:fd:41:3c:24:cc:67:00:f5:47:43:c8:dd:92:bc:9e:19:
2a:d9:c7:39:f5:1b:3e:25:b2:81:39:e9:01:de:c0:42:77:42:
76:bb:70:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:01:54 2025 by rpki-client