Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
File: ix22ROoOJ0ndbtAirs0SGUvLlvI.mft (raw, json)
Hash identifier: w9GBhhMaPgB8F97hQ8hn4ooymMplFx7QJXBp9UCi2CQ=
Subject key identifier: C8:96:9E:12:C2:27:BE:49:41:0B:BD:9C:D3:18:4C:8B:6B:EE:E0:49
Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Certificate serial: 0197B8FCE711367F86B167EF9945F4DE2605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 00:01:11 +0000
Manifest this update: Sun 29 Jun 2025 00:01:11 +0000
Manifest next update: Mon 30 Jun 2025 00:01:11 +0000
Files and hashes: 1: A41bCmeGcRe18SujefEGCOd0pEc.roa (hash: NjleSysihCL9A6oaK71bgTpnAO+ec2pn28x66pipbdA=)
2: ix22ROoOJ0ndbtAirs0SGUvLlvI.crl (hash: tQGrp4Dgy7IXoQormLukzM0H1XO1Hcsn/InXxKefCQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:e7:11:36:7f:86:b1:67:ef:99:45:f4:de:26:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Validity
Not Before: Jun 29 00:01:11 2025 GMT
Not After : Jun 30 00:01:11 2025 GMT
Subject: CN=c8969e12c227be49410bbd9cd3184c8b6beee049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:52:77:2e:e9:26:1b:eb:b6:f7:93:be:b2:
19:bd:b9:32:1a:00:21:8f:41:e0:49:1f:98:45:0f:
1d:e3:74:2d:95:a6:1c:d5:4b:bf:11:6a:09:01:50:
0d:17:5e:d3:6a:fb:a0:ab:52:c2:38:35:d8:52:a4:
c9:57:f1:9b:c1:14:eb:1f:36:d7:ce:83:38:89:d7:
55:b7:c2:63:70:5a:25:23:c2:67:42:f0:e8:ba:f5:
1b:7a:01:01:a4:59:71:16:38:10:3d:8a:d5:ad:b1:
ff:ce:77:aa:86:04:34:2e:f0:05:fb:96:2c:80:e5:
8f:dc:ad:f0:ee:20:59:13:a3:7b:01:62:ce:11:4c:
43:1f:64:b1:38:5a:13:bb:8d:17:d3:3b:b9:4c:53:
d8:21:c7:e3:a7:18:4c:ab:20:dc:3c:42:d4:47:da:
5b:4f:59:48:03:6a:92:c0:39:3d:1a:60:8c:c8:15:
75:0b:0b:69:b6:36:08:9e:25:70:d8:3f:08:00:19:
55:61:01:ea:be:3c:d6:da:19:e5:35:d4:1c:e2:66:
dc:47:b0:10:a2:06:ee:c2:19:a4:e4:bd:76:65:43:
f1:a5:9b:17:c8:86:c2:fa:ac:b1:05:e9:6b:59:11:
6e:9c:02:0a:77:90:c0:63:43:a6:c2:1c:2a:a5:fd:
98:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:96:9E:12:C2:27:BE:49:41:0B:BD:9C:D3:18:4C:8B:6B:EE:E0:49
X509v3 Authority Key Identifier:
keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a9:f0:c2:88:12:8d:19:13:e6:64:7a:82:62:e6:96:b0:fb:
98:1d:ff:9a:67:3f:59:a9:a8:a7:42:ce:7d:db:7e:10:a2:ea:
7d:aa:35:b2:18:d2:9c:6a:ff:79:94:e3:f2:f4:53:ad:22:e7:
20:18:78:2e:d9:b6:97:65:80:1f:e7:63:23:fd:7f:8c:95:1f:
70:66:ec:7f:75:dd:86:b6:61:38:4a:cd:e3:af:c7:54:d7:82:
07:fc:e0:0b:da:f4:33:6c:8b:2f:6d:84:37:bd:06:01:19:37:
8e:7b:9c:10:45:17:59:19:33:ad:23:7a:af:e5:bd:7b:ba:8e:
cd:7c:b1:2a:1a:ac:be:b9:da:79:b4:56:db:41:ce:15:89:31:
10:65:12:6c:39:83:61:41:47:2c:4a:2b:bb:f5:df:29:16:f7:
ca:5b:1b:61:d3:e5:30:0c:83:7b:88:d3:91:11:7e:06:e6:5f:
75:99:30:1e:6f:f1:b3:79:fb:d7:01:5c:38:18:83:83:a3:6f:
0a:16:e6:c4:c4:a8:85:14:a5:cb:5e:87:e3:00:51:79:fe:da:
94:99:51:9a:70:47:e2:0b:29:3f:9e:50:0f:6e:33:40:e2:63:
6b:1d:b5:f3:b1:65:63:e8:89:22:fd:62:76:fd:f0:8f:59:f0:
2c:70:d2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:34:04 2025 by rpki-client