Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
File: I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json)
Hash identifier: deW+QH9+XwFQpiu93tlXXyJLErVzB4k09ZVAjcjndnk=
Subject key identifier: 4A:E8:FE:A7:50:13:B8:A9:C9:36:71:10:79:DB:19:47:89:4B:5B:95
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 0197B7458FE4082DAFB39823EF380F1EAF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
Manifest number: 01B8
Signing time: Sat 28 Jun 2025 16:01:18 +0000
Manifest this update: Sat 28 Jun 2025 16:01:18 +0000
Manifest next update: Sun 29 Jun 2025 16:01:18 +0000
Files and hashes: 1: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: D7QVcPeFtKLJlAjF8SLyCGCrvHA4XpUo0lmoiq46O80=)
2: pL8DPUuY6V_LTawy1OdUwrIg01c.roa (hash: yxyfBx5vs5Lhayo07nTfHgtEaPhrWIe0WeuncjCeyYo=)
3: rPtueqwAgjU2IUHv5A02J4kLlys.roa (hash: vDBPmEjKrFXU2lnK2ZWnREJRhpJ1uOnxEsPQx6QBwFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:8f:e4:08:2d:af:b3:98:23:ef:38:0f:1e:af:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Jun 28 16:01:18 2025 GMT
Not After : Jun 29 16:01:18 2025 GMT
Subject: CN=4ae8fea75013b8a9c936711079db1947894b5b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:af:2e:45:c2:c8:38:8c:e4:e9:8b:5f:df:dc:
ae:24:98:bc:9f:09:b0:2e:a6:d7:ed:1c:6c:c4:a0:
4f:d2:ba:38:08:fd:fd:29:78:80:e7:05:16:42:4f:
f2:bb:20:15:28:75:8b:be:65:37:9b:e3:65:8b:e2:
0f:cc:fd:57:cc:c4:b1:27:31:e1:7f:74:5b:1e:04:
a4:c4:d7:f7:06:8c:cc:7c:29:79:d1:2a:06:71:3b:
5b:33:07:81:26:59:f8:6d:b8:bc:c9:d6:38:21:a4:
b9:66:77:61:4f:41:59:70:79:fe:d0:bf:f8:cb:10:
24:d7:fe:fd:f6:49:6e:d4:5a:49:7b:14:aa:1b:7d:
05:44:ac:03:b2:e1:f2:30:60:6f:bc:b7:22:bc:ca:
91:f4:eb:a1:12:fe:42:a9:d2:27:b1:fe:78:44:70:
2c:2f:cf:f8:1f:9b:a7:ff:e4:48:5a:39:bc:d0:6f:
a5:5b:bc:4b:96:a7:f6:8e:0d:fc:91:a2:dd:1e:43:
bc:20:e7:3e:40:89:dc:42:82:7f:fd:4c:3e:17:45:
c1:d3:cc:bd:69:0c:b9:67:f7:51:e3:9c:c1:51:a1:
47:8e:75:16:5d:e5:fa:cd:c8:cc:43:14:c8:77:f9:
44:fb:f3:9b:f2:50:64:06:7d:d7:85:8f:a5:b6:8d:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E8:FE:A7:50:13:B8:A9:C9:36:71:10:79:DB:19:47:89:4B:5B:95
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6c:8b:c2:38:9e:7c:7f:7c:b7:04:cf:b3:8f:17:6d:33:8c:
6a:5a:26:e3:4b:9e:2c:42:4d:00:5b:f9:42:8a:4b:50:8e:d9:
d0:b4:d4:6f:46:76:b9:cd:31:63:ea:ac:96:b3:5b:39:f1:54:
75:12:90:56:de:4c:8f:db:53:63:88:99:15:70:83:45:29:1c:
ee:c5:12:ec:c4:94:4d:fc:d0:ae:21:5f:47:42:20:68:a3:a5:
1c:65:dc:f4:29:3c:3e:e2:8f:50:8e:9b:cc:be:74:fd:d1:6e:
48:55:f0:89:dd:66:ac:33:14:26:cb:fb:1c:12:60:20:7e:52:
44:4e:66:ca:e1:18:f8:8e:55:60:52:49:be:f7:ed:32:f0:b1:
d1:d2:11:02:04:fa:8e:17:d0:5c:0b:92:18:8c:62:85:33:63:
87:5d:ac:e3:62:cb:42:eb:5b:e6:ee:23:96:19:a3:47:3c:62:
2a:11:58:ee:57:be:ad:bf:9a:55:6b:e3:9e:a0:e8:ad:e3:9a:
b5:72:fc:f9:2f:fa:46:8c:01:28:4d:1a:bb:03:ac:2a:db:45:
5f:68:58:61:09:60:ca:c2:03:73:bc:f3:1d:17:07:30:2e:7f:
f8:b6:40:23:6c:5c:d2:ad:f5:58:fb:50:fc:4e:79:0f:71:9c:
c1:1c:27:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:56 2025 by rpki-client