Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json)
Hash identifier: eic37gc11mlrW4YKXd7Y1o8/iGBktqAvU/xsuF+ZrLM=
Subject key identifier: F1:16:83:DF:78:2A:3A:8E:30:E9:6C:E3:BD:72:25:1B:B9:92:5C:90
Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Certificate serial: 0197CC4C9186504F8465874C41729470B98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
Manifest number: 136B
Signing time: Wed 02 Jul 2025 18:00:59 +0000
Manifest this update: Wed 02 Jul 2025 18:00:59 +0000
Manifest next update: Thu 03 Jul 2025 18:00:59 +0000
Files and hashes: 1: 2BLzMpQppQIzMULCcWC3cZT9k_s.roa (hash: 9ppFZ5NTdqvnyOW3fgV2zOryT5Kz4P3yq37cnn0pzH8=)
2: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: z8jAwNtyNvJY247tlma4/0ZIT//H5QsG8V19F5tqgFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:91:86:50:4f:84:65:87:4c:41:72:94:70:b9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Validity
Not Before: Jul 2 18:00:59 2025 GMT
Not After : Jul 3 18:00:59 2025 GMT
Subject: CN=f11683df782a3a8e30e96ce3bd72251bb9925c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:dc:98:12:0c:59:e5:b4:fb:d9:f9:52:d0:
9d:a5:34:34:17:f1:82:2d:58:ec:79:19:2d:41:df:
89:fb:6c:29:96:b2:0f:2f:1a:22:23:40:b4:eb:5f:
0f:13:0e:f2:f1:f2:7c:2f:98:10:0a:0d:a7:af:ec:
d4:e6:7d:b4:ad:53:71:80:39:26:51:28:91:a0:c8:
44:ef:9b:22:69:66:30:05:3e:1e:fb:25:6c:64:e8:
d7:76:86:19:a8:52:0f:03:ea:e1:f7:6f:ce:b4:3a:
a6:ab:62:7e:f4:6f:50:b5:d0:11:04:3b:a7:c5:0c:
74:18:f4:25:30:15:8d:73:fa:a3:f8:67:7a:52:bc:
23:9e:23:e5:7a:60:94:7d:f2:68:01:8d:bb:3e:e5:
11:3c:82:78:97:dc:63:7d:29:89:8b:ac:71:8e:47:
6f:30:14:c8:7f:19:06:3e:c9:08:5a:2e:07:fa:d5:
bb:81:3f:b4:44:49:c8:3b:67:87:b3:43:24:00:37:
d9:f2:3b:42:b6:ec:b1:46:7f:0e:2f:a0:87:7a:ca:
44:c4:0c:f6:85:5f:13:57:1b:4e:28:c7:07:84:25:
01:e6:88:31:4e:ea:da:51:74:00:94:f9:b3:57:be:
e9:b3:6d:cb:14:b6:fa:6d:ae:ff:81:8e:13:9a:b8:
43:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:16:83:DF:78:2A:3A:8E:30:E9:6C:E3:BD:72:25:1B:B9:92:5C:90
X509v3 Authority Key Identifier:
keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:bc:ff:54:0c:25:07:52:3c:44:1d:53:57:45:de:58:1f:21:
93:65:09:18:c0:01:73:ea:08:73:9f:6b:1f:f9:32:ea:5b:6e:
3c:df:0d:75:0f:e4:45:9e:b9:4a:a5:f1:b7:57:6f:8f:90:d4:
bc:fa:9f:36:b9:ab:1a:ba:d0:e3:cc:51:42:f8:15:da:cc:8b:
0f:1e:13:35:31:49:cb:61:95:a0:58:85:01:a8:04:1c:2c:67:
4f:08:64:7a:53:bc:3c:a0:87:be:ad:e3:e0:06:5e:a5:cb:87:
2d:e8:8f:c0:a2:8b:02:9d:39:04:28:aa:6e:92:82:87:58:7f:
f1:bb:22:68:65:d4:f7:d2:46:e2:fd:9e:85:fa:92:60:d8:6f:
d4:ec:ab:a4:a9:c1:08:1b:b8:e8:86:97:b2:bf:e1:a3:2a:f4:
9f:4f:2d:51:ec:8e:93:d5:42:3f:aa:45:b9:64:1c:0e:b0:9b:
fa:47:46:f5:2c:81:46:a0:64:52:03:84:75:4d:52:af:3b:f8:
fd:ff:fb:67:8d:1a:a3:81:65:5e:99:4c:90:ab:62:b7:b7:02:
7a:88:9f:3c:d5:40:92:50:55:d4:2c:e4:0e:45:42:8e:35:e1:
d2:47:c1:37:04:6a:ee:b3:12:ab:d2:53:b4:7a:89:ad:92:75:
f7:7c:ae:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:31:08 2025 by rpki-client