Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json)
Hash identifier: 9sSRtnoEYLtzouYaN/8J1yPGe2/vcDixkc86xOtkLqI=
Subject key identifier: C9:72:A0:23:1E:A1:0D:41:C0:9C:99:B1:B9:F6:3A:B5:FF:F4:EF:F1
Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Certificate serial: 0197B745561C8A1F3AC60DEA49B197FB08E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 16:01:03 +0000
Manifest this update: Sat 28 Jun 2025 16:01:03 +0000
Manifest next update: Sun 29 Jun 2025 16:01:03 +0000
Files and hashes: 1: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: CZo5YcsbmaAnQo3jS4EAFVzgofuArI9EC5viGp3J8oU=)
2: UipKreH4zZ-JKObDVFkMEdQTy8E.roa (hash: 2lFb7AbIOkpByp+mzj8V6olwzUC3cjME2INFe+siQFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:56:1c:8a:1f:3a:c6:0d:ea:49:b1:97:fb:08:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Validity
Not Before: Jun 28 16:01:03 2025 GMT
Not After : Jun 29 16:01:03 2025 GMT
Subject: CN=c972a0231ea10d41c09c99b1b9f63ab5fff4eff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:08:6c:a8:79:52:d1:5b:a0:b5:74:f3:79:
fb:bf:ea:64:4d:b0:bb:b0:9f:07:7f:d5:35:4a:e5:
c2:ab:c5:e1:b9:08:f8:e6:71:39:9d:fa:5f:c1:df:
b7:67:05:6f:92:c8:e2:26:57:0b:89:74:b2:60:5b:
10:e2:67:d4:c4:93:83:7f:a4:9f:09:d2:9d:47:b2:
ec:43:74:8b:b4:66:71:ae:bd:1d:26:62:00:76:05:
ad:9d:8c:5c:75:6b:c0:bc:45:50:fe:9a:1e:02:07:
f1:ab:fa:7a:3d:10:27:a0:a0:23:a6:c4:23:e7:9a:
a8:66:21:7b:73:6b:04:c2:19:aa:5e:2e:9b:fb:00:
8f:ff:cc:3a:66:4a:d6:60:39:97:69:32:3f:d5:1d:
74:ed:26:99:88:66:fc:06:c5:15:b5:5a:d3:0f:51:
f0:b6:c9:98:c6:28:0d:25:2e:ad:29:50:45:e5:3a:
56:b3:b4:2a:fb:e5:9a:85:97:8c:3a:1c:73:73:e5:
01:59:9e:cd:b5:42:6a:ed:b2:4d:3a:ac:9b:0d:78:
a8:4c:08:c7:27:e7:27:c4:2c:61:cc:2c:a5:d9:cf:
5c:a2:c3:f6:b4:89:78:b1:4a:e3:2a:4e:4f:23:12:
cb:14:99:1a:91:ba:3a:fb:3f:9b:40:5f:dc:15:b1:
cc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:72:A0:23:1E:A1:0D:41:C0:9C:99:B1:B9:F6:3A:B5:FF:F4:EF:F1
X509v3 Authority Key Identifier:
keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a5:5d:af:c4:a7:b6:60:af:4d:7e:ab:b2:36:eb:b9:eb:1d:
37:24:b0:8e:ab:c1:55:e1:e6:b7:9f:a8:bd:ca:43:fe:a8:2e:
f1:bc:88:c2:64:5e:76:7f:ec:6f:a5:a5:ed:af:2a:d5:92:9c:
16:be:1f:32:5c:90:a4:fd:bf:b7:74:c3:23:49:f9:fb:e4:6b:
28:dd:e6:bc:d5:65:98:31:3e:77:0b:c3:9a:d1:62:de:a1:75:
87:f1:1e:ee:46:2b:54:ba:17:3b:5d:fd:9e:e7:1c:e5:2b:28:
5c:68:3a:eb:f1:10:7e:cd:56:0c:63:85:a5:49:e0:5f:f3:96:
f9:b3:a9:b6:32:1a:81:96:99:ae:ac:1b:18:28:f0:33:3b:58:
91:c3:90:f0:f5:81:be:20:3e:35:31:ef:16:8b:89:c4:fa:be:
4a:82:fa:e1:0c:fd:46:e3:27:cc:eb:90:90:7c:04:78:0f:48:
3c:6e:65:88:8f:e6:b9:9c:42:73:f7:ec:44:5f:00:bf:21:20:
0e:4b:74:e3:b0:98:23:0b:de:2f:e1:41:c2:df:5a:e6:f4:5d:
ba:09:98:b8:7f:9e:06:75:bb:41:71:44:59:42:86:63:30:50:
61:5b:08:07:12:2f:16:2d:f4:22:cf:89:01:76:45:2e:35:87:
c2:f4:e3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:53 2025 by rpki-client