Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
File: IrPk850cPBTYMWBr_KFmbd6b7WI.mft (raw, json)
Hash identifier: 6y7+vdVqec/wG8UGVh0szwPahwstCpatKTJuA2eyNyU=
Subject key identifier: 87:9F:21:D7:9C:98:A9:BB:28:62:A5:32:C9:4C:10:81:93:D6:A6:89
Authority key identifier: 22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
Certificate issuer: /CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Certificate serial: 0197BB590754BE087BC3DAF092AF0EC9D2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
Manifest number: 0FF2
Signing time: Sun 29 Jun 2025 11:01:03 +0000
Manifest this update: Sun 29 Jun 2025 11:01:03 +0000
Manifest next update: Mon 30 Jun 2025 11:01:03 +0000
Files and hashes: 1: IrPk850cPBTYMWBr_KFmbd6b7WI.crl (hash: Y7ROuroNosCeSDtNb2mCS2J0aLKWTzusw4YRxAazrY4=)
2: eUQnxtW594Ad6vU9njmKr7uq7YI.roa (hash: 1w4c53hZ6iVZ5hhHMJGwGhh/v6xJyfrfdyok+gD0KR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:59:07:54:be:08:7b:c3:da:f0:92:af:0e:c9:d2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Validity
Not Before: Jun 29 11:01:03 2025 GMT
Not After : Jun 30 11:01:03 2025 GMT
Subject: CN=879f21d79c98a9bb2862a532c94c108193d6a689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5b:3f:80:13:16:dd:60:31:e9:ee:54:a7:11:
46:5d:55:96:b3:23:49:27:24:69:d9:11:1e:83:94:
87:25:fa:4f:5a:ea:d4:17:25:ad:31:ad:a8:ba:11:
7a:1d:23:c7:3d:cb:b7:f0:b4:5a:84:21:e9:a4:5e:
f5:7b:44:89:18:d4:d8:01:cb:16:3b:fa:e5:d5:7f:
7c:1b:71:51:25:94:de:d8:01:b1:39:bc:e6:be:e4:
9e:7b:65:28:a3:14:74:42:27:7b:1a:a0:cb:35:bb:
96:53:8a:4b:9d:ae:2d:29:f0:65:0c:19:b6:d9:31:
e7:b0:ab:2d:6e:28:75:05:56:1d:0f:a5:05:b7:64:
bd:21:7b:88:56:3f:d7:31:bc:73:62:96:62:3d:1c:
d2:d1:42:0f:09:a2:58:25:c2:9b:5c:7c:f9:67:e0:
b1:b4:36:13:10:d8:31:49:64:f6:4d:45:69:4f:c7:
41:fa:23:f4:a4:f3:cd:4b:43:c3:83:63:af:5d:c5:
80:1f:85:99:c8:a4:c5:f1:b2:61:81:d1:ea:78:6d:
27:3f:fe:4a:18:89:0f:90:72:5d:2a:4b:47:6d:67:
3b:bb:c8:ba:82:7b:bf:2a:96:9e:00:02:7e:78:da:
29:64:ca:98:e0:21:1c:8e:92:0c:b5:5c:64:48:e6:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9F:21:D7:9C:98:A9:BB:28:62:A5:32:C9:4C:10:81:93:D6:A6:89
X509v3 Authority Key Identifier:
keyid:22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e0:8f:72:32:88:6b:3d:21:d4:31:cd:30:7e:6e:31:00:6e:
09:ed:9b:f5:66:b3:f7:a4:75:85:04:f4:f4:30:0b:69:8e:d5:
fb:08:7b:43:fe:1d:d8:45:5d:37:27:92:2f:82:c0:4d:aa:e3:
3e:d8:36:8d:81:6a:35:89:5c:b5:d9:08:69:49:ea:c5:96:b7:
e4:f3:75:7a:b2:60:c7:01:82:73:da:6e:ec:87:a4:e7:56:7f:
6b:b4:19:ee:2b:4a:13:65:1f:4a:ef:0f:e7:02:9c:d5:4a:78:
67:b9:8e:41:07:8f:66:5c:d8:03:85:8c:d6:5d:72:ef:5b:60:
e2:52:9f:fa:72:7b:23:6e:88:92:ab:be:bd:97:99:a9:9f:3f:
9d:72:2a:c9:eb:33:5f:1b:23:0e:8f:b9:bd:2d:ba:8c:93:1b:
41:1c:a6:bf:13:10:af:b2:03:f0:20:09:5b:b1:8d:55:ac:e9:
8a:8a:69:5b:b2:a9:5a:8d:46:c4:52:2f:4b:99:c8:36:ee:fc:
3a:a9:3e:29:81:ba:f1:19:97:5c:cd:9f:fc:8b:9a:45:4a:ee:
8d:7e:85:72:ca:84:c3:0e:0c:ef:b4:93:f8:63:0a:36:b2:ad:
28:0c:52:ce:cf:d7:b2:7b:88:93:52:7c:07:83:4e:e2:38:6f:
0b:36:9f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:55:32 2025 by rpki-client