Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
File: I_IfcxbhvXj4bupkJdXCKbmA-aw.mft (raw, json)
Hash identifier: pWB1GMix7in5ZD5M6tTeF7amR74ImZxHERfv1IC5Lco=
Subject key identifier: 7C:07:C8:23:0B:8A:21:8A:42:85:4A:D4:CE:B3:A5:99:A9:CF:D7:FC
Authority key identifier: 23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
Certificate issuer: /CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Certificate serial: 0197B6D77A10B3FC8600E30DA7F6BE302BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:01:04 +0000
Manifest this update: Sat 28 Jun 2025 14:01:04 +0000
Manifest next update: Sun 29 Jun 2025 14:01:04 +0000
Files and hashes: 1: 15gQ3l_CTz5DpsQh5tCstrbwJks.roa (hash: NBh6zaBQW3FImxNGTreLJET3gJwOeBKW+FttZU4GhEA=)
2: I_IfcxbhvXj4bupkJdXCKbmA-aw.crl (hash: H2nhcdPLUIu+2DOOo17eNdk1Zp78GPX3LI9bIWk8kY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7a:10:b3:fc:86:00:e3:0d:a7:f6:be:30:2b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Validity
Not Before: Jun 28 14:01:04 2025 GMT
Not After : Jun 29 14:01:04 2025 GMT
Subject: CN=7c07c8230b8a218a42854ad4ceb3a599a9cfd7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6d:f4:17:ec:bc:16:e7:d4:42:a1:c8:69:fd:
db:eb:ba:c9:13:f5:58:bf:12:dc:bf:94:da:4f:54:
c0:3c:6a:e0:86:a5:96:ca:19:6a:74:39:de:0f:3d:
e7:c7:d3:69:c1:df:14:8a:b2:0a:a8:db:d8:37:b1:
ea:db:a2:a5:dc:13:05:d5:d7:38:47:b0:d4:dc:63:
f8:80:8f:2d:37:62:65:93:df:68:d7:8c:df:e4:9d:
74:01:b5:3e:9d:c5:83:ea:7c:68:55:d9:25:98:49:
56:4b:31:81:88:8b:4a:85:dc:61:a6:dd:b0:81:08:
40:38:56:6f:b6:4d:a1:13:17:4a:54:29:13:ab:34:
9b:bf:30:0f:ac:34:f5:4b:6f:95:b5:a3:aa:3e:07:
45:01:51:22:df:6b:eb:ff:31:59:ca:2d:00:f8:13:
ed:b6:2e:10:da:71:7b:dd:7e:2b:d8:86:cf:5b:95:
66:77:be:8d:b6:b1:87:0a:89:74:99:8f:bb:7c:49:
f2:18:e4:b4:10:5f:2b:5e:3e:6a:3b:f2:4d:d0:d5:
3a:72:ea:64:0d:78:fe:b9:30:a6:f3:74:d7:14:9c:
20:71:96:90:58:42:94:79:0b:cf:d8:93:52:53:02:
d0:36:bf:05:10:d6:22:5d:21:66:94:f7:06:39:ef:
64:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:07:C8:23:0B:8A:21:8A:42:85:4A:D4:CE:B3:A5:99:A9:CF:D7:FC
X509v3 Authority Key Identifier:
keyid:23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d4:6f:fb:ae:a9:20:70:0b:c9:e1:46:41:a1:d4:00:b1:61:
11:29:50:11:ba:a6:99:7d:c5:01:e3:89:b9:0b:bd:4a:f2:a8:
2c:d5:32:c0:94:7d:a0:16:f0:8e:c1:3b:21:1b:7f:0c:e3:3c:
aa:9f:d8:5d:df:a1:e6:9b:01:54:55:60:a2:73:2c:7c:fc:23:
3c:8f:1b:0e:44:4f:7a:38:8a:27:f2:69:51:67:6d:94:69:eb:
4a:96:fe:c1:bf:1c:4a:aa:a8:8e:5e:a4:6d:79:a8:87:fe:ff:
36:45:01:9d:0c:77:16:99:c2:57:1d:72:51:ba:9b:c7:58:1c:
f3:a9:da:cb:26:10:45:d0:76:fa:cb:4f:ff:4a:e5:d5:f4:fc:
19:3a:d6:6d:35:a5:98:f8:0d:ec:fb:91:46:ef:18:b5:99:8d:
8d:97:35:35:ae:d1:da:38:3c:b5:c8:bc:bb:2c:26:9a:1d:2f:
22:08:04:a4:a2:05:41:0a:61:30:fd:4b:08:94:de:b6:84:8a:
cf:bb:cb:97:0a:88:f8:f2:e9:5f:52:96:6f:9b:5b:4c:37:7c:
60:c5:fa:62:b0:2c:35:ea:9f:b8:b0:39:87:52:49:9f:4a:aa:
18:fb:22:9b:2b:ea:70:ec:8f:aa:71:aa:5a:26:c6:ee:ea:05:
c8:29:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:53 2025 by rpki-client