Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
File: IAs7I0VxCglvajTX8Im-seP8U4g.mft (raw, json)
Hash identifier: JUa7LmhF10jnzbeYOLaIh/eeO5hsBmoHVGx4dGVT430=
Subject key identifier: 97:24:5D:9F:2E:A4:D4:AE:3B:2D:30:D6:F4:09:6A:4F:9B:56:89:5C
Authority key identifier: 20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
Certificate issuer: /CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Certificate serial: 0197B5FC31CBE3DD25C2EDD54C90D9EAFB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
Manifest number: 03D6
Signing time: Sat 28 Jun 2025 10:01:33 +0000
Manifest this update: Sat 28 Jun 2025 10:01:33 +0000
Manifest next update: Sun 29 Jun 2025 10:01:33 +0000
Files and hashes: 1: 3twUXXIP_KmiWrUBvyT5612yZdA.roa (hash: i8TOwD+JQVgsZynDBd1FE+mCLj4YL4GBf0bnlreCNh4=)
2: IAs7I0VxCglvajTX8Im-seP8U4g.crl (hash: LidS82AfqBgFhU2L4vUbWphnZLOLrAwR162QsCK92DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:31:cb:e3:dd:25:c2:ed:d5:4c:90:d9:ea:fb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Validity
Not Before: Jun 28 10:01:33 2025 GMT
Not After : Jun 29 10:01:33 2025 GMT
Subject: CN=97245d9f2ea4d4ae3b2d30d6f4096a4f9b56895c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:82:16:da:99:d6:99:4d:b6:d5:2d:fe:98:
eb:96:b5:0d:e5:b4:b4:35:2b:9e:a5:5e:a0:7f:f8:
a5:21:5b:19:90:86:2a:6f:d3:6d:f0:42:54:6e:07:
83:de:55:ec:ac:85:fa:bb:bc:c8:e8:bf:0e:52:e9:
43:bf:d0:f4:39:ce:11:c4:fc:95:fb:0a:39:dc:68:
27:d0:5e:6b:f1:f3:21:de:ab:95:87:86:90:59:61:
4c:00:13:b8:14:b7:05:07:01:ba:27:88:bf:2f:60:
b2:b9:ee:67:2c:fa:9f:d3:7a:ad:a5:90:ae:bb:7b:
d2:39:c9:00:fb:0e:16:be:2b:93:e8:fd:b4:08:04:
7e:5a:d4:96:97:9b:27:8f:f7:ea:37:98:c4:e5:03:
37:0d:48:a4:7f:ec:4d:55:62:a1:ca:0a:10:63:5e:
03:11:66:62:49:9c:64:61:5e:f5:06:34:d9:d1:8b:
9c:c3:4c:3f:f6:02:d1:91:e9:43:70:11:1f:29:eb:
d2:d6:49:a7:5d:cd:d8:30:6c:13:d9:c6:5b:51:77:
07:1b:6b:47:0c:50:c7:2d:97:1f:9c:46:5e:da:a1:
82:54:37:1d:65:65:c7:20:bc:a7:b1:e0:af:4b:a6:
9b:0a:f3:cc:57:db:47:bc:21:e6:c3:5e:0f:1c:19:
5c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:24:5D:9F:2E:A4:D4:AE:3B:2D:30:D6:F4:09:6A:4F:9B:56:89:5C
X509v3 Authority Key Identifier:
keyid:20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a0:f6:6f:3b:28:28:ee:d3:82:d5:ce:45:87:37:30:fb:25:
6f:98:4b:03:ea:e1:f3:45:94:e3:c8:7b:3d:c5:b4:0c:9f:da:
15:a9:90:b8:95:66:e0:f5:d1:77:b0:2e:4e:4f:80:e3:ee:9f:
cf:a5:f9:e2:05:6b:4f:5d:aa:80:0d:7c:48:e2:74:2d:fe:fc:
6c:12:8e:2f:32:59:80:cc:a4:83:b8:57:87:48:fa:d8:bb:1a:
b6:84:fa:71:5e:da:2f:b7:1a:5a:fc:7f:60:0c:5f:52:4a:b3:
7d:49:5e:51:0e:fd:40:8e:d3:c6:7a:11:0d:d8:68:d8:6b:e1:
48:db:3b:42:8b:52:d2:69:78:b5:a7:6c:68:59:d6:ed:16:18:
35:17:40:3c:c5:3c:41:55:2d:01:ec:02:c5:d3:ff:1a:b5:ed:
a0:b6:dc:42:f6:ec:6c:d4:b8:c9:ca:d9:77:d3:29:b3:d7:cf:
0f:34:24:5a:c4:ce:70:26:21:c9:aa:90:38:b0:cb:1b:8b:c4:
50:40:66:45:07:a4:34:9a:b0:e7:79:a9:23:25:96:7c:fc:4b:
59:d7:3c:d7:ad:0a:7f:57:36:ba:fb:c7:3e:e3:2c:2f:b1:7a:
31:57:39:e9:ec:4d:29:81:01:2f:7b:56:44:59:52:f4:12:58:
a4:5a:64:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:44 2025 by rpki-client