Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
File: I5Vy3fyrYpHmQQzNToYO42AA5mg.mft (raw, json)
Hash identifier: 8RtMnR4lBOQHF3FX2mzcbvPIDlK4JxRLp50FLrjHRBY=
Subject key identifier: 4A:EE:30:1F:78:04:9E:DE:7F:C8:22:D2:A6:95:00:69:EA:63:ED:38
Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
Certificate issuer: /CN=239572ddfcab6291e6410ccd4e860ee36000e668
Certificate serial: 0197B6A0F4163EC93DE7B8A774790BD906AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:01:30 +0000
Manifest this update: Sat 28 Jun 2025 13:01:30 +0000
Manifest next update: Sun 29 Jun 2025 13:01:30 +0000
Files and hashes: 1: I5Vy3fyrYpHmQQzNToYO42AA5mg.crl (hash: GnIFvCZGKkIcHcu/XHTS8m5l9dDMhQXjJUQecueRqvY=)
2: cEnlNHZ35kSVNo2T27Ex45pap18.roa (hash: q/g4pWJ8XYH4irxAQK7i5w/oElgLduGOhld/VI56BOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f4:16:3e:c9:3d:e7:b8:a7:74:79:0b:d9:06:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668
Validity
Not Before: Jun 28 13:01:30 2025 GMT
Not After : Jun 29 13:01:30 2025 GMT
Subject: CN=4aee301f78049ede7fc822d2a6950069ea63ed38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:8e:0e:af:29:a9:22:3a:23:66:c1:f3:2f:
8a:f0:18:c7:d0:70:63:ea:bc:af:3d:9e:4e:34:99:
b8:c9:10:0c:89:fc:bb:3d:0c:2f:bc:09:c5:56:36:
40:1f:c4:05:67:e8:66:30:46:f1:3c:71:92:66:27:
62:18:1e:11:32:14:1a:6e:8c:b6:ee:86:66:66:73:
48:e0:75:3c:84:74:dd:f2:6a:f7:95:69:9f:0f:a1:
dc:df:b3:c7:5e:06:10:2f:f2:8a:98:6a:f4:cf:2e:
6c:72:18:62:8a:a9:bd:39:76:2b:50:cf:20:4e:7f:
ca:82:ee:be:e1:43:ea:ee:40:69:42:63:79:05:cf:
d6:3c:0f:3b:af:c9:56:29:30:18:62:00:15:ad:21:
08:6a:79:41:5d:1c:63:77:cb:7e:d4:e3:4f:6b:1d:
71:73:73:95:90:25:17:72:ff:f9:49:c2:6e:07:13:
b6:bd:c4:33:f4:63:d3:10:65:50:6b:1f:c2:14:40:
74:09:39:68:0f:8f:2f:9e:ab:10:e8:9a:77:b9:9d:
8e:18:fa:be:38:ed:83:7c:3e:de:98:cf:6f:34:e6:
10:3d:1a:ba:90:67:d8:bd:68:ed:17:0c:eb:b0:7e:
8a:69:7d:93:b8:0a:b6:fc:8c:cb:e7:f0:5d:d4:60:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EE:30:1F:78:04:9E:DE:7F:C8:22:D2:A6:95:00:69:EA:63:ED:38
X509v3 Authority Key Identifier:
keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:8c:00:e7:73:1d:5a:4e:f4:8b:c4:5a:1d:a0:f4:1c:8f:0f:
5f:1a:57:91:c6:b6:2a:b3:0a:67:25:91:f0:a1:8d:1c:5b:24:
b1:86:77:2a:cd:67:66:aa:7a:29:10:61:a4:3f:d9:e2:ce:d3:
2a:9b:ab:e3:1a:bd:f7:e9:6c:b0:66:c8:95:20:6c:56:34:13:
b3:82:e9:be:4e:72:fb:20:81:ee:e2:d0:26:34:02:de:fd:b2:
59:cd:e2:b0:a4:57:ec:da:21:1c:88:bf:aa:18:77:ad:34:e8:
83:f3:20:d8:e5:29:cd:00:db:3b:99:14:cd:e1:3f:fe:48:8e:
28:50:f8:2e:9a:b2:aa:3b:b3:b5:8a:c4:6e:30:40:42:2b:e9:
7c:9a:b8:03:37:ce:d9:fb:ee:3e:49:98:15:2a:0e:fd:a7:b9:
68:30:85:58:f7:e4:62:a8:b5:18:00:d3:ec:66:c4:c7:80:88:
f1:54:7f:6f:8a:6f:e6:fe:2d:3c:0a:60:3b:32:f6:f3:29:5f:
a4:fc:9c:d2:c6:9d:82:7b:8e:38:4b:53:a3:ca:94:5c:56:12:
f8:6b:e6:e5:94:1b:b1:4e:72:6c:ac:9e:e5:93:e0:e6:79:fa:
97:fa:8f:cb:5b:b7:5b:f4:99:de:11:3b:a9:c2:83:1f:45:3c:
f8:ce:b5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:52 2025 by rpki-client