Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: MF6topVHDnZ9f5xQKtnGgKhUBFf+wpK12XhRW4s2h8w=
Subject key identifier: AF:DD:66:70:07:AC:2D:9D:D1:E6:AB:5C:A9:35:4A:A8:9E:5D:EF:0A
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 0197B70EB86B29A47B63DF63805953A4DCB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: 9Xk925SUUXfLnbw9FBp9N3qLdfo.roa (hash: Ly02I9+k8vuMGWxnQ136VFvx8sd3hejXT82bKGKV7BM=)
2: PHa1bwg0jlW9wU-ZxMrg4KmG4Zc.roa (hash: sT+3KqlrpBwNw2te0UajmvKsMUapvIEs9YfpHeq4XGU=)
3: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: EOlhBZbS9CL+AmfDAbJKq9ZauGpEky8BDpQRxRn2XvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b8:6b:29:a4:7b:63:df:63:80:59:53:a4:dc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=afdd667007ac2d9dd1e6ab5ca9354aa89e5def0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:40:04:62:c0:09:42:32:38:37:4f:c9:0a:
8d:5f:80:79:c6:a8:d1:ff:6c:17:a8:01:47:ff:b5:
ce:35:ce:4d:72:ca:41:5b:4b:3e:89:bc:7f:44:70:
25:e3:32:5b:fe:b6:c4:d1:10:30:f5:74:e3:c3:b5:
d7:99:13:15:73:29:f1:61:ea:5c:24:38:c7:13:7a:
e8:a1:aa:51:af:8e:17:94:38:02:84:f5:f7:11:66:
bc:47:8a:06:3d:b6:2e:5e:e4:53:f9:82:6f:8a:4f:
92:7b:97:91:08:e7:a7:e1:e2:f5:16:e3:7c:b2:55:
fa:39:41:7b:65:48:b5:ee:27:cd:6e:31:9c:47:2f:
f0:8b:d0:22:f9:4e:e9:c9:9b:60:6c:09:c0:ad:d1:
f0:2c:3d:28:ee:31:de:3e:3f:9e:27:f7:25:b1:5b:
b2:c6:80:60:fb:39:73:bb:e2:4d:d6:f3:c0:45:72:
bf:28:90:05:96:51:cf:4d:ca:27:c4:f4:5b:c6:f3:
73:4e:3d:b0:14:8d:bd:df:36:69:78:1b:18:7e:ef:
53:c7:fe:7f:9e:1b:2b:a2:c7:9c:f2:5c:45:c6:30:
cd:0d:02:9b:6c:3c:c6:d1:f8:84:8d:65:0b:04:05:
05:37:97:d0:6f:aa:7d:f5:cd:c4:63:d8:51:d9:d3:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DD:66:70:07:AC:2D:9D:D1:E6:AB:5C:A9:35:4A:A8:9E:5D:EF:0A
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d4:5c:6d:2f:99:f2:6c:68:15:da:76:71:61:6e:a5:67:46:
a4:b2:de:da:30:cf:56:c0:68:e6:9f:1a:fe:99:91:33:c7:d1:
ae:2e:3a:ba:2d:2d:c6:78:23:a2:03:b1:e7:fa:b4:57:68:9d:
0a:50:21:b6:b0:72:5d:2f:41:04:cf:8d:d0:d3:00:22:7b:f3:
c3:79:23:5e:6b:5c:18:d2:0b:16:6d:a0:05:72:e9:cd:e1:5a:
19:2f:84:19:99:8a:78:88:25:9f:a1:5f:b4:f1:91:0f:b1:52:
42:97:7b:5c:00:1c:b9:bd:41:08:e2:92:af:e3:23:9c:ee:55:
36:63:56:57:80:20:23:3c:5d:67:8c:39:35:a8:d8:a6:3d:f6:
df:fb:6a:f3:2d:65:c8:a2:4e:ac:a0:01:68:9f:5c:1d:eb:a2:
33:c2:34:07:78:b8:43:31:28:78:f9:1a:36:6e:b7:30:79:0e:
bf:22:89:41:e6:c0:d5:30:22:4e:e0:c9:8f:8a:76:c2:24:5f:
f9:63:0f:15:08:f1:e7:f2:c9:da:17:94:42:3d:8b:60:74:a7:
37:30:e6:c7:fe:68:4d:95:5d:82:3c:ef:81:e3:5f:20:a4:70:
f7:a1:8b:b1:0c:88:0f:dd:7f:b7:1a:33:d6:6a:bf:f1:ae:49:
73:8b:53:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:18 2025 by rpki-client