Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
File: IwbLbMzQnnXtGfwG-1kkzyejmMM.mft (raw, json)
Hash identifier: YEztMIMFXkAxRjfy4DgFSiAkwYUWQoXhDbwXZBYHnPE=
Subject key identifier: A5:19:26:5B:B7:77:76:DA:72:C3:8D:31:DC:91:2A:E1:C0:95:11:BB
Authority key identifier: 23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3
Certificate issuer: /CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3
Certificate serial: 0197D6D076BF6221FC77612EBFE276045E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
Manifest number: 0341
Signing time: Fri 04 Jul 2025 19:01:15 +0000
Manifest this update: Fri 04 Jul 2025 19:01:15 +0000
Manifest next update: Sat 05 Jul 2025 19:01:15 +0000
Files and hashes: 1: IwbLbMzQnnXtGfwG-1kkzyejmMM.crl (hash: zVLECiDvOx0lnLSwJdR6rKztGU6o0TMIZjO2tFqzH58=)
2: YYev6Pek4prQk97zPtNDo2u2KRU.roa (hash: wJZbyHz8STJ6eKcT9ZVX0wVCLZZb2WUlXYfMJ35kaXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:d0:76:bf:62:21:fc:77:61:2e:bf:e2:76:04:5e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3
Validity
Not Before: Jul 4 19:01:15 2025 GMT
Not After : Jul 5 19:01:15 2025 GMT
Subject: CN=a519265bb77776da72c38d31dc912ae1c09511bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5b:33:30:f5:56:35:ba:4c:1b:a7:6f:e3:2c:
41:94:66:c0:0c:89:04:ad:5d:4d:31:94:d1:71:e2:
aa:15:dc:71:9f:86:9e:e0:cc:71:ec:78:9f:bd:48:
56:cf:24:8a:d0:bd:82:79:b7:c2:97:d2:07:fd:3e:
84:69:e4:ae:ae:ae:c2:77:27:7c:7f:a5:92:88:b4:
45:0a:dd:49:7d:94:08:b7:db:33:eb:51:0d:44:c6:
ce:8b:d4:b6:6c:47:62:6f:ce:a9:32:c6:ec:ca:89:
88:e1:02:ab:10:05:ac:ce:fe:e6:24:16:1c:cc:6a:
48:0e:c5:87:ab:cc:57:4a:20:a6:85:23:2c:7d:fe:
a7:02:4a:1d:46:5b:28:67:d3:42:7a:94:21:17:5a:
e2:16:08:82:82:9d:63:ae:68:65:90:29:35:a4:8c:
f7:b4:8b:31:2b:79:23:18:8c:33:07:1e:43:c0:92:
cb:6b:9a:da:c6:b6:c9:f2:42:f3:1d:b7:99:6e:0f:
06:7b:1d:70:11:60:c6:e6:46:39:e3:18:73:b9:e4:
e6:a8:d9:20:0a:b1:72:b3:17:00:21:6c:25:93:be:
96:a7:5c:07:1c:62:a5:79:0b:a6:4c:c6:20:4a:2b:
46:89:d0:b8:1a:c8:af:da:5c:3f:4a:80:a0:e4:38:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:19:26:5B:B7:77:76:DA:72:C3:8D:31:DC:91:2A:E1:C0:95:11:BB
X509v3 Authority Key Identifier:
keyid:23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:77:fe:b0:91:6c:1e:e1:a2:f6:bd:b2:a3:17:26:d7:4e:30:
4f:2f:b6:e4:b2:f1:72:22:8f:1f:33:ea:5d:72:52:03:c0:f6:
57:08:56:5a:0e:cf:73:7f:9a:31:11:87:2f:8d:fa:0f:2a:40:
b8:56:ef:65:34:86:21:31:f4:f3:6a:05:a0:f7:ec:99:84:12:
ab:43:52:e5:bc:c5:94:13:c2:2b:fa:6b:f7:64:fd:a1:e3:41:
ea:e1:ef:a0:89:cc:46:fd:9f:8d:76:14:21:b0:f2:2c:24:2c:
03:18:88:6f:f5:f4:9e:23:fd:a9:5e:c5:6c:24:ab:a0:52:3e:
77:13:d7:86:10:19:88:cb:11:a2:32:a7:30:1e:ad:87:9f:ce:
3e:34:c3:d6:ff:e0:53:8c:9b:85:31:df:1e:bd:a9:71:f7:38:
59:20:4d:e4:a8:fa:d5:cb:a2:67:ef:28:72:b6:e5:f3:44:02:
42:11:81:12:49:0d:dd:44:0f:e0:f6:29:28:92:f5:8e:b8:8d:
1c:ab:41:bf:a7:d6:ca:a2:97:e1:51:c4:5d:a3:a8:1f:8c:b1:
93:a8:fc:0f:cf:6b:70:0b:f0:52:12:bf:22:ae:70:b1:ee:11:
7f:f3:e0:48:22:45:d1:8d:d4:0f:9a:31:10:68:e6:ca:5a:7e:
a7:e5:1a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:26:59 2025 by rpki-client