Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
File: x02iHagDioIFQrOvr76qqmZreyc.mft (raw, json)
Hash identifier: p/LVZPOgVgF+WM2CyjcQpExMZTvXpKmqquedLqCECFg=
Subject key identifier: F6:68:C1:F5:5A:D2:B1:43:66:F3:14:02:EF:59:F1:4F:5E:03:B5:09
Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
Certificate issuer: /CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Certificate serial: 0197B77C09759257FD82A1FB0F9CC1984B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 17:00:48 +0000
Manifest this update: Sat 28 Jun 2025 17:00:48 +0000
Manifest next update: Sun 29 Jun 2025 17:00:48 +0000
Files and hashes: 1: 2t0GWwoe7mmFS83bQQPX5JNcD34.roa (hash: hxRzouLeq4ys7uUoj+7mRAVC8MeKAFWBUYqAcz4n5d0=)
2: x02iHagDioIFQrOvr76qqmZreyc.crl (hash: 1pSKY27JTKdYX7kd/5CAAsxuvuDFFA3UneQpPExcJNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:09:75:92:57:fd:82:a1:fb:0f:9c:c1:98:4b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Validity
Not Before: Jun 28 17:00:48 2025 GMT
Not After : Jun 29 17:00:48 2025 GMT
Subject: CN=f668c1f55ad2b14366f31402ef59f14f5e03b509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:aa:ff:26:f9:20:00:ed:74:78:1a:ff:6d:
d6:68:79:29:44:c6:8c:19:f6:55:51:86:6d:80:b1:
f1:f6:61:62:8c:3d:dc:f2:a8:32:a8:c4:f2:6f:ac:
aa:7f:32:80:42:2e:cb:fa:31:72:0a:c5:d7:08:4d:
4c:b8:a6:9e:06:74:9f:50:c8:49:8f:e4:a0:73:3f:
9d:df:8c:82:94:14:5a:08:ef:40:2e:e1:0b:88:02:
bf:93:4c:00:39:50:01:7b:ed:65:c1:b8:bc:1a:5b:
1b:a2:42:59:db:2c:28:cf:e5:05:b3:61:53:8c:c7:
c7:03:3a:f5:ac:b2:97:b7:e3:db:fd:e1:d0:e3:40:
fd:ba:3b:29:0c:4e:e9:3e:83:bd:81:95:f0:c4:89:
73:b2:05:a1:a7:2f:32:43:92:87:90:51:47:b9:7a:
7b:76:c9:f3:22:90:3d:7c:78:93:72:fc:aa:45:4a:
00:93:92:4f:04:f2:cf:64:47:08:46:a9:f3:ba:d6:
a3:36:df:c3:e0:43:f7:e9:7c:26:df:ff:7d:e3:e9:
22:3e:9f:91:ab:c9:0b:a8:58:46:c0:59:51:6a:81:
f3:bb:d7:51:bb:8d:83:6d:64:30:77:d5:eb:75:2f:
7b:fc:26:a8:a4:50:39:d6:0c:0b:f9:f2:48:29:8d:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:68:C1:F5:5A:D2:B1:43:66:F3:14:02:EF:59:F1:4F:5E:03:B5:09
X509v3 Authority Key Identifier:
keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:31:52:06:19:7f:5f:89:1c:79:5c:70:36:0d:19:8c:a4:b8:
27:8f:f3:21:79:db:f7:16:3c:05:7b:76:2a:19:da:94:e7:fc:
78:bf:1e:4d:44:6f:eb:f3:52:35:7b:cf:59:3c:62:35:62:64:
a9:c1:69:20:86:d4:76:2c:b3:58:c3:e9:bb:c0:c5:66:d0:fa:
0d:6a:01:f3:64:b3:3a:ab:6f:a0:0e:6e:d2:a1:4f:c1:8a:70:
0e:ea:36:b9:09:39:59:96:37:dc:8c:da:65:c4:c2:a7:70:bd:
98:d4:bc:6a:3c:16:59:e0:ee:63:72:eb:41:f2:f4:6a:3a:69:
89:20:f6:d4:ce:34:5f:1b:7b:b0:11:bd:59:dc:c0:ff:7d:df:
05:ba:02:ac:2c:92:ce:b5:3a:ee:95:b4:de:d7:a3:09:d8:26:
59:72:be:6e:1e:7e:e0:26:3d:57:34:cd:ba:89:e1:c2:e9:56:
32:db:11:0f:6f:f9:27:28:0a:f7:f8:dd:f3:d0:7e:2b:94:9d:
09:b2:d5:7d:dd:c3:e5:95:42:81:d5:1b:3a:84:f8:bc:10:c2:
8c:35:86:62:90:1c:df:e7:2d:a4:de:5f:38:54:ff:c6:19:29:
cf:60:cd:9d:c0:de:dd:e7:0a:b2:de:d1:b2:c7:b5:b8:27:16:
ce:c9:8d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:27 2025 by rpki-client