Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: aDf7Z6mlh/nbaFJOEnLQJPXJiT3dmqRFCLpNsdEsrVc=
Subject key identifier: 82:33:09:82:85:5D:E7:37:B6:7D:9F:D3:67:2F:A4:F1:B3:61:5D:81
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 0197B820C8D0E88EB73463547B2B6B8A8A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0A0B
Signing time: Sat 28 Jun 2025 20:00:45 +0000
Manifest this update: Sat 28 Jun 2025 20:00:45 +0000
Manifest next update: Sun 29 Jun 2025 20:00:45 +0000
Files and hashes: 1: 8Ztwq8Ff-jJd_sBf28s8lvQ9SqU.roa (hash: QWa/HtnKYiYQsWevU25s3knaSRBSQ+SLuyEHZRqaj0Q=)
2: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: L1bRmWWMXixFbgT6X2pzWaMyXTTWTKQi+C52CfgbppE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:c8:d0:e8:8e:b7:34:63:54:7b:2b:6b:8a:8a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Jun 28 20:00:45 2025 GMT
Not After : Jun 29 20:00:45 2025 GMT
Subject: CN=82330982855de737b67d9fd3672fa4f1b3615d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:34:7a:5a:dc:7b:97:f6:87:16:e2:66:12:
3d:cb:8f:8e:41:27:0a:3b:db:f6:f4:6d:90:8b:7a:
d7:18:47:a4:5a:6b:30:da:82:49:7b:cd:4b:27:25:
53:e2:f7:1c:6c:84:03:ee:f3:ce:34:5c:e7:83:08:
50:68:de:13:ab:24:7f:9f:0a:33:55:89:ae:ce:ca:
f0:87:6d:f6:30:6f:c2:dd:23:7e:24:20:c2:53:0a:
6b:c5:2e:7e:b1:66:1c:54:8f:89:c3:45:b9:e2:3a:
b8:0e:44:2f:f3:93:53:46:d6:d3:d8:9c:35:3a:ac:
6d:bb:e0:cb:80:6a:46:d3:b3:60:bf:cf:0b:e8:cd:
16:6b:40:a8:28:fe:00:ec:0e:76:9e:55:71:dc:76:
76:6d:41:cc:1a:6d:04:03:8a:07:70:24:a1:f8:0d:
d8:46:87:ee:85:1c:ef:a5:ff:29:30:a0:85:02:a9:
18:7a:23:f7:45:ac:4c:ee:75:fb:29:ff:0c:97:40:
76:76:85:e7:9c:ab:5a:08:ab:84:89:d4:88:31:5e:
20:3b:25:98:07:a8:e9:b3:56:b4:c6:8f:64:8f:55:
43:e7:a9:8a:47:5b:d8:69:6e:9a:b4:63:63:83:e2:
dd:88:b7:27:4a:be:88:24:68:b3:67:ef:01:b9:21:
36:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:33:09:82:85:5D:E7:37:B6:7D:9F:D3:67:2F:A4:F1:B3:61:5D:81
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a7:08:e8:c2:45:6c:3c:67:61:be:3e:e4:3c:28:05:bb:85:
d4:83:66:2b:07:23:1c:e4:80:ad:6f:26:7f:8b:11:d2:26:46:
6b:e6:79:71:d6:ee:89:e4:72:0b:71:40:67:61:22:b1:e8:13:
aa:fc:3e:f3:80:7c:a7:b3:28:77:19:01:4c:07:48:4d:f9:b1:
9f:15:c0:bc:76:56:bb:8e:b4:e9:93:25:91:04:b0:1b:36:ae:
88:ef:16:61:fe:c2:f0:6f:41:1c:4c:8c:88:35:11:7b:6e:f5:
70:ab:0f:73:44:cd:c8:0d:5d:10:3c:ef:97:ca:15:1f:bb:b0:
c2:27:a3:55:8f:a0:5a:81:f6:f8:89:0e:0b:a4:d4:87:41:ca:
3d:39:a4:d7:2b:7f:17:59:00:2d:93:27:02:07:5c:fc:33:e1:
9c:c0:fd:dc:75:0f:3c:9a:87:1b:8c:52:7e:bf:cd:13:7e:97:
03:96:84:15:86:4d:b1:97:5d:12:66:fb:80:22:d7:6b:31:52:
1a:e0:a0:49:31:78:38:a1:c8:dc:7c:2d:5c:9b:65:79:77:f4:
62:8e:8b:2d:ed:42:6f:53:b8:80:d6:da:de:a9:7d:72:22:e6:
29:fd:5c:85:99:71:36:33:e9:23:ae:82:23:62:82:a4:fd:1a:
0d:49:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:34 2025 by rpki-client