Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
File: i4GUQccJMDSp1GVqL202qyQDP-Q.mft (raw, json)
Hash identifier: 8iXKLZxd7vyFIHZY4BlFLw3L/6z+orsHUGGCwbO/hzg=
Subject key identifier: D9:15:77:17:97:1E:74:27:B4:B8:9F:5F:B8:42:6E:1B:A6:A8:65:AB
Authority key identifier: 8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
Certificate issuer: /CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Certificate serial: 0197B96AD906F53A2FCC37137C78449F622A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
Manifest number: 2C
Signing time: Sun 29 Jun 2025 02:01:16 +0000
Manifest this update: Sun 29 Jun 2025 02:01:16 +0000
Manifest next update: Mon 30 Jun 2025 02:01:16 +0000
Files and hashes: 1: Dm667XnaRqtK2i3UfsThVeXTWc4.roa (hash: 8yEFF1MNlsRKs74/fi+3dMb5d+dLJ3drU0IwlTP+fus=)
2: i4GUQccJMDSp1GVqL202qyQDP-Q.crl (hash: ry+HZEsrytw2/Kp2COsrfNdU8gdLtN3iNVDgbHvhO+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:d9:06:f5:3a:2f:cc:37:13:7c:78:44:9f:62:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Validity
Not Before: Jun 29 02:01:16 2025 GMT
Not After : Jun 30 02:01:16 2025 GMT
Subject: CN=d9157717971e7427b4b89f5fb8426e1ba6a865ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:2d:9c:33:a9:a6:76:06:fb:7e:49:c5:22:
50:38:44:11:e4:22:18:28:8d:d5:d3:05:a1:e6:3d:
5a:69:9a:32:11:3e:f5:fa:ad:d3:bf:79:e3:e6:18:
3a:98:79:1e:9f:b6:96:78:39:f5:87:8a:c7:37:9a:
66:3e:f4:11:ca:dd:0d:8b:b7:c5:54:e5:38:b7:08:
ef:e8:4f:a8:9d:eb:40:3c:c7:00:3c:90:8c:a5:06:
45:a5:8b:8a:e1:7e:dd:d8:7b:aa:e7:13:ed:4c:06:
00:2f:93:99:e7:20:f7:a8:d7:77:33:49:bb:96:81:
8e:97:a7:25:0e:fb:79:c8:7f:b3:0d:60:27:f8:80:
20:35:a2:24:bc:9a:56:05:8f:8c:ef:30:f9:92:82:
a8:ca:89:1b:6e:d4:9d:98:4c:99:cc:84:cb:b6:70:
46:e9:c4:39:7f:5d:24:8f:69:0d:41:5b:9c:de:f2:
19:e8:0c:e5:8c:79:4d:f7:a9:15:6c:7b:f8:1f:3b:
dc:ca:b4:5f:45:3b:bd:3b:8b:1f:90:05:fd:5b:08:
9d:7d:ae:4c:ec:90:74:32:ad:66:b8:4c:11:6f:cd:
3b:4e:db:5c:6c:74:44:d7:3d:68:17:f0:be:8a:99:
2b:4a:42:a5:17:12:91:fa:68:b9:c4:72:ce:04:e5:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:15:77:17:97:1E:74:27:B4:B8:9F:5F:B8:42:6E:1B:A6:A8:65:AB
X509v3 Authority Key Identifier:
keyid:8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e2:6c:16:25:30:42:7d:79:b7:94:7f:1c:49:e1:fe:b2:40:
fd:eb:50:ca:ba:cc:db:4e:6c:e3:6f:1e:e8:4a:d7:dd:90:32:
d9:be:a5:f6:c7:bd:fe:c0:9c:95:b7:89:ec:ab:1f:de:ae:55:
ab:1e:0a:60:82:f6:4f:d6:8a:ef:ad:96:d8:2e:44:4a:4b:38:
28:d8:6a:a4:81:be:e8:14:f8:33:8b:64:b3:21:ae:eb:4e:b0:
6a:30:ea:83:0d:c2:ea:bf:ff:5e:b3:a6:fd:22:46:b9:14:a7:
93:fe:c1:f0:10:78:ff:44:8d:a9:89:9e:8d:ea:cd:4a:5a:3b:
53:a5:db:d6:7d:38:73:32:fe:87:02:03:4d:00:62:23:93:ff:
ca:74:08:9f:94:77:36:50:8a:2f:1d:5b:21:4c:61:75:35:67:
08:c0:fb:8c:25:b0:45:f5:56:ab:ae:eb:ee:14:d1:ca:eb:c1:
66:44:a6:1f:f8:cf:27:cd:cf:ed:fe:a4:71:53:f6:54:ff:dd:
50:48:97:a6:a9:82:f3:18:ab:9a:d6:24:d3:e0:a1:29:9d:91:
95:3e:d1:71:bd:e2:46:a1:b6:fa:ce:5d:f6:36:02:39:07:b1:
3e:b3:44:56:f8:b5:dd:ad:fd:90:51:fe:bc:1c:e6:fc:cf:6e:
01:c6:57:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:20:27 2025 by rpki-client