Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
File: IAsV4Hg_4A8bile9FP29BpJLiDI.mft (raw, json)
Hash identifier: aOHoec/lOkzVLISGoKUnxMGl1nBrfILu3CdTm9TMNyI=
Subject key identifier: 89:59:30:FF:ED:79:A1:26:FD:6A:A2:FE:33:B9:3F:D6:F0:35:B9:58
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Certificate issuer: /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial: 0197B74578BD49C5ACEB1218CCA5C4C66A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:01:12 +0000
Manifest this update: Sat 28 Jun 2025 16:01:12 +0000
Manifest next update: Sun 29 Jun 2025 16:01:12 +0000
Files and hashes: 1: IAsV4Hg_4A8bile9FP29BpJLiDI.crl (hash: tgQp7tteWVlNYQUtFwL5UMhYCq4tUG5odk1wXmPqXUk=)
2: foZeHIwLujdlY8Z9L88C79OdbL4.roa (hash: kBji60S+DjYJ/bgY7+g+22RM5gAKkLkkfayTk1h8AIo=)
3: szEuog0QzjoBQW1CQcU6MA8xPCY.roa (hash: LsMXxa5IeE1fxcnMKQjYIuPdJ91pJvkbpdujugd5olw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:78:bd:49:c5:ac:eb:12:18:cc:a5:c4:c6:6a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Validity
Not Before: Jun 28 16:01:12 2025 GMT
Not After : Jun 29 16:01:12 2025 GMT
Subject: CN=895930ffed79a126fd6aa2fe33b93fd6f035b958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:84:e5:99:a0:e3:6e:19:5a:db:76:f6:ce:34:
8e:e0:bc:6c:70:ee:1c:8c:51:3b:47:bb:bd:6b:64:
75:ad:ea:8d:d6:c4:39:51:08:14:59:ac:71:74:d2:
26:dc:a8:12:21:0b:c8:2b:15:79:55:36:e8:d6:6e:
e6:a8:f9:b1:af:15:9c:ab:f2:e6:78:aa:58:0f:5d:
29:3d:30:a3:00:6e:47:bf:0f:68:f9:31:70:6e:6f:
f6:7b:24:12:61:6c:a6:09:38:25:7c:6b:09:09:35:
e4:06:cd:61:2a:24:33:0a:53:e4:50:ea:c3:39:fe:
ac:64:af:b9:c2:21:b0:62:68:f8:71:70:1c:d6:e9:
4e:aa:74:e9:a8:51:b6:33:fa:02:54:09:4a:b2:ac:
0d:d0:13:1c:fe:d2:00:f3:1c:28:01:68:84:79:7e:
61:4d:cb:4a:41:37:c5:30:1b:26:f2:33:76:ab:1f:
5a:a2:20:f8:39:36:cf:90:14:ed:be:f3:01:8e:0b:
3c:5f:65:06:6b:56:5e:ba:bd:60:c5:b2:86:c7:65:
17:a1:32:54:19:5d:79:12:00:ac:ba:7d:7c:c2:dd:
59:1c:1c:a8:a7:f1:f8:66:12:93:32:5d:7c:a5:e2:
3a:7d:d5:1e:ff:d5:c2:f1:a5:bf:50:3d:03:77:36:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:59:30:FF:ED:79:A1:26:FD:6A:A2:FE:33:B9:3F:D6:F0:35:B9:58
X509v3 Authority Key Identifier:
keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:79:f6:97:e5:9d:3c:a7:0e:38:87:7c:5b:a2:3f:9b:fe:52:
92:2f:fa:35:96:28:4f:23:fb:b9:6c:60:63:37:54:83:d1:aa:
99:a7:87:1d:2f:d7:af:ec:b3:4c:ee:59:79:14:cb:5d:3d:0f:
55:b8:31:3d:cf:3e:d5:43:83:3a:fc:b8:fd:c7:d2:5c:70:c1:
cd:6c:3c:0c:1a:ae:79:b3:e0:85:f6:c8:96:be:9f:13:ac:ec:
29:ce:63:08:90:eb:5c:d5:73:1a:16:34:35:f2:be:49:5a:cd:
61:d3:1a:0c:af:2c:fa:b6:e1:48:ba:10:ce:36:fb:23:89:e7:
6d:05:97:a4:5f:3b:90:17:18:74:57:b1:32:74:42:c0:b7:e5:
f6:60:11:24:57:29:bb:0f:d7:9e:61:ed:93:7a:91:eb:ac:b9:
65:b1:7e:72:cf:da:b3:88:5b:92:a4:cc:0e:c0:74:c8:a2:59:
ab:c4:1b:e3:c3:2c:80:5d:a5:a1:2c:1d:31:74:4d:72:bd:db:
ef:80:af:c8:52:89:27:c8:c7:e4:3f:d8:93:68:10:5a:49:81:
63:90:a0:17:36:a9:9b:f4:a6:ea:01:c8:a5:75:a7:25:20:e1:
32:0a:73:da:da:d9:56:2a:0f:c1:ce:d1:17:6b:01:4c:7e:9b:
53:cb:f8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:29 2025 by rpki-client