Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
File: IysXeNY2I3Q-2JyH3oDCpkCToGI.mft (raw, json)
Hash identifier: YpcOMNQKJ/dCpprsMVYOZ0L7b6Hz3GGMP682paBLMqE=
Subject key identifier: C2:6E:96:5D:D4:3B:E7:05:5D:3C:20:E9:DB:D5:68:1F:A8:66:7B:BD
Authority key identifier: 23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
Certificate issuer: /CN=232b1778d63623743ed89c87de80c2a64093a062
Certificate serial: 0197B5FC4FD730BBAD8CD057B3DC56C5CA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
Manifest number: 06ED
Signing time: Sat 28 Jun 2025 10:01:40 +0000
Manifest this update: Sat 28 Jun 2025 10:01:40 +0000
Manifest next update: Sun 29 Jun 2025 10:01:40 +0000
Files and hashes: 1: IysXeNY2I3Q-2JyH3oDCpkCToGI.crl (hash: I/sW4fAdIX/NkIQCuSI07saCLJdLV07hBvOJN8Fig0U=)
2: Ljs9MQhWok74BFhLvX5tnc2erSo.roa (hash: +v8jaS8N6bSTt1OSxaSBvN/IEBx5vNtqPM0L9If78cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:4f:d7:30:bb:ad:8c:d0:57:b3:dc:56:c5:ca:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b1778d63623743ed89c87de80c2a64093a062
Validity
Not Before: Jun 28 10:01:40 2025 GMT
Not After : Jun 29 10:01:40 2025 GMT
Subject: CN=c26e965dd43be7055d3c20e9dbd5681fa8667bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:d6:1b:85:ec:bf:8d:37:3c:6d:8b:96:69:
2d:e3:2d:83:04:46:9d:c2:59:e6:c6:97:cc:25:60:
a0:d5:b0:60:65:89:f2:00:ee:a5:e5:7d:9e:55:69:
cb:28:a9:4c:31:e6:d2:c8:86:b0:86:58:ac:d2:81:
3a:7c:49:35:23:03:94:b3:ea:1c:90:b4:30:64:d9:
75:09:33:1c:8d:5b:8a:1f:53:bc:32:0a:13:b3:3d:
9f:54:82:c7:be:54:67:1b:eb:6b:43:d6:19:8d:33:
e6:8c:43:07:e6:b1:ae:b9:e6:05:47:94:00:a8:bc:
09:67:7a:b7:ff:e6:07:ea:59:21:00:af:8c:a0:7b:
f4:10:8c:1f:94:fa:fb:5c:6b:b9:79:17:f0:f6:0c:
8f:22:a4:91:5b:16:c9:84:eb:30:d4:d4:89:17:64:
a0:b6:60:28:d8:94:d1:25:71:67:3c:91:32:d5:76:
ea:09:4f:14:a4:02:c9:63:05:d7:96:8b:4e:77:e7:
ec:15:7b:c6:af:75:25:c2:fb:03:a2:f4:13:5a:42:
c4:f7:9e:ce:71:6b:6d:e9:30:c3:71:dd:2e:12:a2:
fd:2d:a1:67:5d:6e:15:09:06:4c:29:c1:6a:e1:ac:
3f:60:97:70:59:dd:81:bb:64:b1:a7:a0:7d:3a:b8:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6E:96:5D:D4:3B:E7:05:5D:3C:20:E9:DB:D5:68:1F:A8:66:7B:BD
X509v3 Authority Key Identifier:
keyid:23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d4:4f:91:cc:cb:df:15:ab:83:cb:b4:a4:9f:34:56:fb:aa:
76:06:56:8b:2d:7f:c7:bf:58:75:50:76:5b:5d:78:bf:52:2b:
bf:d5:62:cd:c3:c1:ed:e0:db:0c:62:9b:38:0e:4f:eb:ea:e4:
a2:d3:27:a8:dd:4f:6f:6f:8e:b1:fc:37:61:f3:33:3c:cf:ff:
2d:73:7d:e5:d7:dd:44:2d:eb:6a:8a:74:fd:f2:e0:bf:8b:8f:
ed:47:1b:ae:a7:96:a0:fa:8d:a9:8c:ba:2f:98:13:95:90:56:
b3:70:a7:20:be:0a:77:d6:94:d9:3a:b4:e3:5e:94:70:35:c9:
f9:8f:02:38:9a:32:a0:ea:a1:8a:c1:91:16:da:ac:e8:bf:88:
20:03:e1:b9:cf:73:6d:87:18:80:3f:33:e1:56:17:37:bf:45:
c8:8a:6b:99:79:f0:ee:ff:69:e6:90:74:2f:1b:c6:60:56:f2:
6e:0b:65:78:75:19:69:d8:0c:9b:d4:40:11:64:79:5c:f1:64:
ef:d2:23:53:57:c4:85:87:ed:fc:2f:39:4c:75:f2:62:a5:c8:
94:aa:09:c2:eb:ea:16:d2:b3:44:67:61:f1:18:9b:17:21:2a:
cd:4b:bd:b4:51:b7:a5:be:6a:20:07:a3:e3:6e:66:5f:b4:b7:
7f:d3:8a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:23 2025 by rpki-client