Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
File: IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft (raw, json)
Hash identifier: PozaTGAUDKkXtSNWWQq+QTi6IqG/s2pjPqKlqGAbDkM=
Subject key identifier: 47:EC:6C:01:9A:5A:AE:F4:6B:D5:93:E2:1D:2F:20:08:F9:C3:64:78
Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
Certificate issuer: /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Certificate serial: 0197B6D7836817754E6488E8E938298A998B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:01:06 +0000
Manifest this update: Sat 28 Jun 2025 14:01:06 +0000
Manifest next update: Sun 29 Jun 2025 14:01:06 +0000
Files and hashes: 1: IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl (hash: 0yRemBqQgSRUaxvASG6ZzmGlsYImkK199mwdQIB+WqQ=)
2: J46kuUmF_sgE0zFOUz0hgWBo52M.roa (hash: jPrLPvaHVRm/LYCKQXvlkQimqCpYkjCK3g37WDkRjQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:83:68:17:75:4e:64:88:e8:e9:38:29:8a:99:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Validity
Not Before: Jun 28 14:01:06 2025 GMT
Not After : Jun 29 14:01:06 2025 GMT
Subject: CN=47ec6c019a5aaef46bd593e21d2f2008f9c36478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:54:6b:ed:c5:64:43:14:35:d6:20:8e:a7:
05:16:41:6b:ad:3b:6f:69:41:8d:25:09:1d:34:06:
37:64:c2:06:03:8a:ba:d4:5f:f6:ab:33:79:c5:c3:
17:df:d7:d5:85:61:a5:55:cd:6b:c3:b2:3c:a6:3a:
d9:84:04:76:cb:59:23:0b:db:38:cf:50:2b:32:1c:
ce:1d:e8:2e:c9:55:b1:44:68:4e:e6:e6:6d:9a:23:
29:76:23:bd:8b:f9:d0:5c:ae:9f:03:bc:ec:4e:19:
14:6f:f0:50:de:9a:a8:99:f1:a3:96:7f:42:6f:dc:
fa:ca:3c:e7:83:43:20:ef:0c:c0:18:b4:99:e4:99:
36:da:95:e9:b6:24:43:3d:de:d9:96:f6:48:c8:35:
05:f4:a7:55:90:96:c2:e6:bf:e0:76:9e:71:38:e0:
91:12:8b:c8:79:87:77:b3:8c:f7:c1:dd:fb:6b:5f:
68:c4:2b:ef:ff:e7:08:8f:a8:f6:3d:af:25:d6:90:
d6:b7:5a:7b:cd:15:8d:2a:87:bd:24:3c:dc:0a:f3:
e4:c4:04:23:10:ce:ba:82:9e:90:e3:3f:c2:a5:fb:
dd:a2:cd:bb:49:62:cd:47:c5:a4:59:5e:da:94:13:
33:4d:66:93:32:e3:be:3a:f5:f6:2f:4e:34:31:3a:
31:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EC:6C:01:9A:5A:AE:F4:6B:D5:93:E2:1D:2F:20:08:F9:C3:64:78
X509v3 Authority Key Identifier:
keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3b:79:70:19:ae:e2:b8:ba:30:79:50:e7:ad:e4:9a:37:ab:
eb:a2:76:1f:a3:13:37:c6:5a:3d:00:ff:35:3e:63:b6:32:22:
8c:c4:f7:74:a0:88:6e:44:9b:08:cb:1b:7c:25:de:bd:4b:0e:
39:1e:6b:92:b3:64:7a:50:22:19:b2:3f:55:31:fd:53:e8:52:
f1:50:ab:cb:92:71:8c:ec:48:ba:0f:8e:b4:ac:b2:37:51:95:
4f:ce:29:6d:d4:e7:9d:ae:fa:2a:3a:3f:64:d9:5b:17:b0:9a:
1b:39:0d:0b:42:66:86:44:69:5c:36:8d:f4:3b:4e:e4:fa:2d:
8a:50:98:87:dd:a2:20:cd:7b:e5:78:5b:ca:47:a1:42:5c:bd:
fe:44:2b:49:b6:38:f1:0a:d8:aa:14:6b:e4:f5:5b:2b:f0:67:
72:46:a6:4c:e3:db:67:74:07:03:f3:51:8c:fc:c0:21:cd:7b:
b4:79:94:ab:99:b8:51:a6:22:50:3d:b9:18:7b:6a:46:51:d2:
a0:d5:06:f3:5d:3d:b3:63:3c:4e:cd:ff:6b:c2:b9:91:81:94:
c1:86:3a:93:ce:de:31:46:4c:6d:a7:ef:83:42:75:1a:ba:e9:
03:89:78:ae:f1:37:fa:ca:03:03:59:47:29:ed:3b:c7:26:f6:
5f:1c:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:32 2025 by rpki-client