Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
File: IO7gXaGD3uK4EYFBlWRiySQNeHY.mft (raw, json)
Hash identifier: 83IR0kUM8eWAW5gaGyJtbESqZkg9zReDkXIib9mONdM=
Subject key identifier: CF:56:6D:5E:2A:DF:A1:BC:83:35:8C:03:94:A9:34:FF:A9:86:BD:41
Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
Certificate issuer: /CN=20eee05da183dee2b8118141956462c9240d7876
Certificate serial: 0197B70ED89DAA1FC561EC5B1517EF30832D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
Manifest number: 13C0
Signing time: Sat 28 Jun 2025 15:01:32 +0000
Manifest this update: Sat 28 Jun 2025 15:01:32 +0000
Manifest next update: Sun 29 Jun 2025 15:01:32 +0000
Files and hashes: 1: IO7gXaGD3uK4EYFBlWRiySQNeHY.crl (hash: oT9AAZhXn1jWPsUY4W77QggYyn7tUuUlgPo1EMxpF1g=)
2: UOhBO5tiijOD2pDmpEzGmcmWS0c.roa (hash: xgr3YICoBLMfkC1gTEslMu1vKZNde/9vfYQRW1pAxzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d8:9d:aa:1f:c5:61:ec:5b:15:17:ef:30:83:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eee05da183dee2b8118141956462c9240d7876
Validity
Not Before: Jun 28 15:01:32 2025 GMT
Not After : Jun 29 15:01:32 2025 GMT
Subject: CN=cf566d5e2adfa1bc83358c0394a934ffa986bd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f7:c1:b6:a3:bd:6d:79:50:d4:07:e2:54:54:
1e:f3:3f:ce:ff:7f:88:df:b3:31:47:ff:5d:6d:6c:
ef:28:d5:f4:e8:c7:8d:be:a9:af:c1:90:d4:bf:ea:
91:d1:cd:e5:81:28:b0:ee:c9:4c:f7:ca:5d:ad:46:
ae:d1:2d:ee:c6:3c:60:02:87:07:f5:e3:10:39:ef:
57:15:a0:14:29:8d:b8:7f:47:55:e3:c1:26:29:7e:
47:75:ad:3d:cc:f6:3a:98:a8:a2:67:b8:d7:ae:6e:
f5:60:1d:e3:1d:55:a8:ae:df:ab:f3:b3:5f:8e:48:
6a:0b:4a:10:90:9c:5f:0c:c7:5d:17:14:a4:32:da:
52:cb:12:22:9d:a3:14:e6:59:ff:71:67:e3:f7:f6:
81:07:34:80:72:89:17:e8:ec:47:0e:07:a5:13:9e:
4e:bc:2c:1f:26:6c:68:8b:fa:bd:68:58:fe:bf:76:
2d:41:8e:f1:e8:13:e3:a7:9c:33:7e:32:2a:14:cd:
95:82:aa:13:0e:0d:9b:0d:5f:98:42:21:a8:7b:9f:
c6:a0:7c:f9:7d:3f:b8:e1:22:99:76:cf:14:aa:29:
0d:8d:be:91:00:0d:d9:5e:3d:92:ef:db:13:92:d1:
02:17:2f:c3:9c:ab:cf:38:13:1d:a8:52:f6:3c:20:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:56:6D:5E:2A:DF:A1:BC:83:35:8C:03:94:A9:34:FF:A9:86:BD:41
X509v3 Authority Key Identifier:
keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6a:b9:d8:55:3a:c9:42:bc:49:d5:04:db:db:62:3c:ad:33:
f4:67:04:1a:1c:30:8a:f8:c2:91:f4:b0:5a:41:9a:f1:7c:1f:
83:21:ce:b3:03:f7:7f:56:ce:7e:8d:d9:18:4e:98:9b:67:a8:
7d:df:8e:e5:a2:e4:4b:08:a1:23:20:7a:a9:83:5d:e1:c1:0c:
f5:1d:f9:a5:cd:cd:94:09:2a:af:55:95:b7:4f:a9:fd:89:49:
72:4f:74:ae:cf:63:66:a1:91:da:7e:e5:87:3d:db:9a:be:99:
ad:0a:99:69:8a:87:38:a6:63:96:d4:23:a8:60:fc:df:32:e7:
16:52:b9:77:67:7c:25:76:2c:db:a7:66:cc:88:6e:c3:98:44:
ea:63:13:7a:c9:f3:0c:4f:cc:7f:bc:ea:24:dd:4c:fb:14:a4:
3f:fd:e0:bd:e5:03:0b:fa:43:46:32:cc:1a:d4:78:5f:92:32:
54:67:67:e1:c6:94:f8:55:9f:6e:e1:44:d6:7e:7a:34:f0:53:
7c:01:a0:f2:61:2f:17:78:d9:0d:62:5e:42:fe:4f:68:82:ba:
fd:34:61:fd:e7:ce:97:7b:29:19:7d:f4:49:b1:f8:41:57:61:
2b:46:08:08:61:d6:c7:6e:b4:7a:af:95:15:ba:e5:07:83:2b:
97:29:8d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:05:56 2025 by rpki-client