Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
File: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft (raw, json)
Hash identifier: GtwA9NcCeEiN1Za5kpKcZIgDsKvKB+37imDPg9NAsWo=
Subject key identifier: C8:B9:08:1B:EC:56:A0:8C:31:5C:20:EC:57:81:84:A5:DF:B6:37:8B
Authority key identifier: 23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
Certificate issuer: /CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Certificate serial: 0197B7B36C2959A20E2C50586B61B011C9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
Manifest number: 09C3
Signing time: Sat 28 Jun 2025 18:01:18 +0000
Manifest this update: Sat 28 Jun 2025 18:01:18 +0000
Manifest next update: Sun 29 Jun 2025 18:01:18 +0000
Files and hashes: 1: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl (hash: tiy1Hsi68wUQX3QVCEk5Zm9SavZsUA7OVt2KjwnS7T0=)
2: W7lSiLgEWw1PU3RjMuVHViCtMd4.roa (hash: Z1eudaBmI9GAn6czSjHaqw3jDN0IX6tghnkKM1CKFjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:6c:29:59:a2:0e:2c:50:58:6b:61:b0:11:c9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Validity
Not Before: Jun 28 18:01:18 2025 GMT
Not After : Jun 29 18:01:18 2025 GMT
Subject: CN=c8b9081bec56a08c315c20ec578184a5dfb6378b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:06:e5:38:7b:39:63:9d:14:c3:47:a1:ac:d9:
9b:3b:73:f0:47:a1:bb:50:c5:61:ab:4c:94:d4:c6:
2b:d8:90:70:7b:20:ed:77:81:91:33:dd:08:68:97:
02:68:98:7c:2a:53:bd:b6:00:01:a8:04:56:4e:d9:
79:d4:18:c6:ca:a1:6d:cf:87:13:fa:b5:a3:2e:f7:
17:d9:b0:90:43:c7:be:73:4f:9e:83:39:7a:af:0b:
e8:e2:ba:35:ff:b1:05:39:e1:bf:a2:56:3b:5d:9a:
20:39:20:84:52:97:7c:18:37:8b:b4:72:f7:1a:f9:
91:f6:0a:6d:51:a8:88:cf:c6:71:1e:47:d3:e2:c4:
64:c3:cc:df:9b:70:7d:f9:85:6e:43:67:8a:b2:7b:
4a:73:9e:5d:11:dc:42:5b:71:c3:cd:5b:63:7f:d8:
96:fe:2e:d2:04:e9:ff:da:fd:ad:cc:33:db:e3:3e:
db:c4:ee:c2:5b:9f:44:af:60:de:74:67:34:3d:60:
52:04:dd:67:fb:a8:e2:a8:ea:ee:91:f8:d1:a5:20:
c2:59:3d:be:ee:e7:4d:22:80:fa:bd:6d:6d:cf:1d:
7d:66:3c:60:c0:33:a9:77:f8:df:e1:0f:09:71:6a:
38:7c:90:7e:ec:fd:20:75:a5:c8:ad:e1:07:08:68:
a2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B9:08:1B:EC:56:A0:8C:31:5C:20:EC:57:81:84:A5:DF:B6:37:8B
X509v3 Authority Key Identifier:
keyid:23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b6:54:6d:4f:c7:31:83:30:df:5d:9e:19:d2:e2:66:e7:38:
96:e8:14:95:e4:ac:83:54:d9:2d:6e:d4:9d:c0:29:94:95:2a:
6f:04:43:69:40:da:f1:49:c1:81:f8:3a:9b:c0:a4:fa:ab:37:
8a:f9:6f:c7:ed:b8:82:d7:d5:4c:84:7e:b1:3f:2f:96:1f:ba:
6b:b6:a4:55:cb:c9:13:3a:27:0c:42:08:72:9c:fc:c8:6e:56:
e7:7b:c7:3c:35:ed:76:7f:9b:ad:37:b8:68:84:cf:9a:82:06:
05:52:f2:2a:15:45:2f:65:86:e6:5e:ad:20:2d:ee:6f:8f:f0:
e0:7b:46:36:cb:f2:38:c5:98:ae:a7:89:ec:83:e8:d5:8a:58:
51:24:e5:77:d8:cf:ef:85:92:92:b0:e3:29:57:47:e9:ca:da:
f1:10:73:55:ee:e2:e0:f7:b7:a7:b1:39:88:8e:c6:3c:36:c8:
18:67:65:27:4e:9c:e2:c1:3a:e8:cc:9b:b3:a8:d5:94:54:d3:
7c:c0:6b:01:73:3b:fe:26:85:f5:b3:4b:a9:d3:a6:f9:b3:6b:
8f:1d:60:bf:fa:18:0b:32:81:19:ec:7d:57:3b:62:db:33:1f:
c2:5d:8a:66:d8:7e:79:be:80:dd:cb:ba:c0:3e:0d:1e:9f:1a:
10:ae:55:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:20 2025 by rpki-client