Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json)
Hash identifier: 0218m9h95fVP2d/u0YEAyhQ8ic25qJk+WsKGnjFSMrE=
Subject key identifier: BF:48:EE:7A:89:FC:2B:14:6B:2D:EF:56:26:E3:F5:3D:92:20:9E:B4
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 0197B745723B4E46D4F86B6D60538252DD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
Manifest number: 0E8B
Signing time: Sat 28 Jun 2025 16:01:11 +0000
Manifest this update: Sat 28 Jun 2025 16:01:11 +0000
Manifest next update: Sun 29 Jun 2025 16:01:11 +0000
Files and hashes: 1: 5Nxb95AjDYyihX948d4SpKIggZQ.roa (hash: LXnf6zKJW6C6S9ESb5TMXAjwJki5kjy7RI6/DxC0q14=)
2: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: E/bACsaJj0frWqlfntunVt/9eO/aVe2JJHLb88QXwrg=)
3: g00WlqoayNMboio4aQJxi5oYUAs.roa (hash: Hyc0gnAg44yWXRt2jBl8ZFxFJUhWTRX2EA3Xr0Vxj/g=)
4: lZSfaFLQsnTkwdvn0B3rZGkqRuA.roa (hash: QyBiQ/S33Pxg+43BukzMj/PPueurFOtFulFm03RWAS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:72:3b:4e:46:d4:f8:6b:6d:60:53:82:52:dd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Jun 28 16:01:11 2025 GMT
Not After : Jun 29 16:01:11 2025 GMT
Subject: CN=bf48ee7a89fc2b146b2def5626e3f53d92209eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:c6:18:5c:b5:71:97:ab:7a:0c:2d:31:ff:
91:f8:31:67:dc:dd:08:d7:13:3b:15:b1:2c:e3:cc:
e1:2a:8c:ee:43:df:4b:13:2b:d5:16:b4:09:60:d4:
b2:f8:5e:a5:fb:9e:5f:4c:64:96:3f:05:97:96:c3:
45:c8:c8:1b:6a:b7:53:59:53:09:58:a8:42:1f:01:
35:88:88:71:b8:d6:25:82:47:f8:f6:a0:77:41:5d:
a6:8b:59:d5:9d:21:87:38:43:d4:54:f7:f5:ab:b4:
fd:7c:e6:ef:a6:97:c5:34:eb:f7:22:7e:c4:aa:40:
29:95:30:80:10:7d:65:83:ad:a8:b0:7c:b8:00:f5:
48:09:2f:36:03:71:5d:53:07:92:95:d3:30:d5:72:
76:fd:c1:46:e0:c1:64:1b:aa:ef:db:64:24:66:f1:
49:92:6b:b0:7b:63:12:9d:6b:03:41:d4:18:db:9b:
ed:32:1a:09:78:ac:93:45:f8:9e:58:24:97:af:26:
1e:95:5e:56:f8:66:8d:dd:c3:10:7d:53:8b:22:d9:
9c:e6:1e:b6:15:e6:2a:7a:44:88:c3:0f:67:9f:b7:
fc:8e:2b:bf:a2:7d:0e:c6:a6:95:7f:a5:99:5f:28:
23:6d:db:35:fd:59:fe:5a:47:f9:c3:4e:54:f9:71:
f3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:48:EE:7A:89:FC:2B:14:6B:2D:EF:56:26:E3:F5:3D:92:20:9E:B4
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ac:99:a4:49:8d:51:c5:6f:f3:a7:ac:7f:9e:ae:1d:85:1c:
46:d4:fd:09:a7:cf:45:8c:d4:b6:f3:ac:a3:73:a5:85:f7:ac:
6f:c8:f4:e6:43:5f:7e:f3:98:bb:72:92:15:ca:5a:8f:8d:04:
da:45:18:58:3e:79:fb:7e:55:5b:11:40:37:60:89:d7:78:b2:
dd:ee:d0:14:97:64:40:0b:db:2b:25:f9:c1:c6:8b:60:3b:f6:
84:79:ca:a1:b2:ad:18:58:01:e6:93:db:d3:fa:cb:94:e0:9a:
ea:a8:0b:71:25:b5:b6:bc:b6:53:54:04:f4:49:96:53:6d:6c:
c4:00:de:c7:3d:b9:ca:f5:96:4e:c8:60:22:a7:b7:f0:29:b8:
e6:25:2a:f6:d2:06:ab:57:81:ae:64:5f:b0:50:d9:08:38:22:
c8:b1:46:70:a7:e0:62:18:58:b3:ac:59:93:f0:a4:e9:43:89:
ff:62:06:90:04:bc:f0:1f:e4:b5:0b:b6:b6:51:75:35:4d:48:
93:b6:ed:a4:72:94:01:82:0f:f2:88:1b:fa:04:b8:04:4b:7c:
fe:92:a6:bc:8b:05:74:3f:60:ec:95:03:e0:31:1a:98:9d:69:
01:05:fc:a0:98:cb:61:75:d2:db:a0:0f:c0:e3:37:a2:95:66:
1b:72:9d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:05:05 2025 by rpki-client