Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
File: I67pTQ__bGx1KmlC_6lirjfH5rY.mft (raw, json)
Hash identifier: UJSt1psGCa3g4Sj4pccIJkG6khD/a2LWnKewDHir8Sg=
Subject key identifier: 9B:87:83:8D:35:8A:E9:B2:CC:EC:80:42:B1:D0:0C:86:BA:A8:E8:7F
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial: 0197CFBD0DB2E2E77B480B19AE9207D709D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
Manifest number: 15C2
Signing time: Thu 03 Jul 2025 10:02:42 +0000
Manifest this update: Thu 03 Jul 2025 10:02:42 +0000
Manifest next update: Fri 04 Jul 2025 10:02:42 +0000
Files and hashes: 1: I67pTQ__bGx1KmlC_6lirjfH5rY.crl (hash: byS5u6sXCnq1xLYlJglZh0fNVc093RRgZL918rJCmwU=)
2: gR0LYM6QGI-qsid_nSKtkxsGl7k.roa (hash: ZNyhf/gNov+ZA8ZlWmnXcmM+r4ht/hEtiegrCZhA7GA=)
3: s_AzbY_4r2Y_-4vfgCGonUFbZoY.roa (hash: HgaSiRleH54HgG93gpFtFR8yZx0H4YCH5wCdvkPpECU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:bd:0d:b2:e2:e7:7b:48:0b:19:ae:92:07:d7:09:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Validity
Not Before: Jul 3 10:02:42 2025 GMT
Not After : Jul 4 10:02:42 2025 GMT
Subject: CN=9b87838d358ae9b2ccec8042b1d00c86baa8e87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:d3:93:e6:9b:d0:d6:74:e4:e1:fb:6d:ae:
0e:e9:cd:c8:c1:c5:f8:dc:aa:48:6a:90:55:3e:17:
a4:5a:96:85:5d:3c:e0:34:92:16:41:ba:21:be:1b:
73:a1:85:12:62:21:44:63:0a:23:16:b2:33:7b:da:
bd:ce:a2:19:6d:71:15:0a:20:6e:f7:2f:39:f9:35:
29:94:66:82:aa:22:3c:40:94:87:70:2e:4b:46:d0:
76:e0:9b:93:6b:b7:e4:ff:b8:12:3d:f4:da:db:09:
79:a3:a8:d0:95:d8:94:28:9c:d6:a5:8b:11:ab:6e:
ba:57:2a:e3:2a:a7:2a:b1:f6:05:de:8c:77:97:f6:
fc:9c:b9:7e:f2:e5:9e:c7:b4:41:df:de:2e:a2:6c:
01:a3:c6:2f:5c:e4:2c:0d:d8:11:04:5f:1f:0c:1c:
d1:90:49:a9:6c:b9:0f:1f:10:3b:19:27:00:81:da:
d4:d8:cd:9c:6c:cd:58:91:b2:42:71:18:a0:81:25:
21:59:e9:13:2a:9d:c5:4b:04:e1:ac:7e:9b:56:24:
28:c7:a0:9c:a1:d4:7b:98:74:70:19:ba:2b:b7:41:
4e:6f:62:0c:3c:5b:b3:31:b0:21:4a:a8:fa:f1:a8:
a6:60:fb:a9:bb:b7:5b:79:82:69:a2:6b:d0:bb:ed:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:87:83:8D:35:8A:E9:B2:CC:EC:80:42:B1:D0:0C:86:BA:A8:E8:7F
X509v3 Authority Key Identifier:
keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:dc:55:08:d2:d5:81:18:9a:b6:8d:f8:01:27:1e:8a:09:bf:
70:71:47:1b:4a:fa:7e:b0:cd:3d:80:6d:f1:7d:19:96:89:a6:
14:df:9b:6d:bb:e9:54:16:93:8d:1b:c7:e7:01:42:27:b9:fe:
56:ed:3f:ca:02:eb:e0:e1:a9:c4:cf:ae:b6:8d:ed:30:46:c3:
61:e0:dc:62:f9:50:f4:ac:bd:f3:06:e7:33:8d:11:43:61:5a:
f1:e8:d1:65:85:9a:6a:af:1f:9d:e5:6d:6b:10:c9:43:13:5d:
a2:f8:a4:d4:d8:4b:a1:7a:16:7a:7f:2a:28:ae:50:15:b4:dd:
4c:23:ea:83:b9:1d:fc:e0:ae:76:0f:6b:57:65:ac:19:95:47:
b8:b3:7e:89:c8:ee:1f:ca:2b:5e:18:e8:e1:92:f6:22:43:78:
cf:22:b2:76:b6:cb:b6:82:a4:63:b4:d6:ab:ab:12:90:98:92:
07:6a:b9:0c:fd:fd:40:99:52:52:9e:3a:ba:ca:b2:b7:16:ad:
9c:dc:1c:c2:8f:b2:d9:5a:8e:52:00:44:68:c3:93:09:ac:71:
72:b7:22:58:f5:18:b6:36:9e:31:76:44:1f:e8:ea:9f:91:70:
d5:91:33:28:90:c6:d2:0d:95:f7:94:88:57:3d:d5:2d:4d:c6:
a7:34:6b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:31:10 2025 by rpki-client