Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier: kXiVIga3UHWP04gOE7zOeeMP3VougZAtp82cQcpgJaY=
Subject key identifier: DD:9A:09:B6:A1:5D:90:AD:0A:FC:75:74:DB:98:60:B3:73:7F:88:F0
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 0197B890623AE2EB28093F60D815B4DD32C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number: 15C9
Signing time: Sat 28 Jun 2025 22:02:39 +0000
Manifest this update: Sat 28 Jun 2025 22:02:39 +0000
Manifest next update: Sun 29 Jun 2025 22:02:39 +0000
Files and hashes: 1: XXE5WlIT_ozyEAytSpXB35caxkQ.roa (hash: Z5Mr1yj+6v3QmltRiVNuWb2ENlO3YvaI3bd4LC6yd08=)
2: hYxEeDcN-ZCvWfxbhWHRTnBKx5w.roa (hash: abkpNh2rbEaJURGIshnWIsN6jClRtBNny3ctzSY8Z2Q=)
3: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: 6F3tdMBHAwhpFBNuLLcb5PUEYUUza8sYWFQwqpR04b8=)
4: vCe1hhmPjnbb0XE8yiRxgRed8A0.roa (hash: KTfoAuRaTuS/CmQPiG+Z8o3GDtlCRJukvO93N6O+Ywg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:62:3a:e2:eb:28:09:3f:60:d8:15:b4:dd:32:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: Jun 28 22:02:39 2025 GMT
Not After : Jun 29 22:02:39 2025 GMT
Subject: CN=dd9a09b6a15d90ad0afc7574db9860b3737f88f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:ea:c0:cc:75:28:58:3c:06:47:50:43:c0:
41:d0:2b:ad:1a:d6:fe:dc:fe:c9:be:bf:6e:7a:c8:
ba:e4:1f:87:f4:d0:f8:5b:12:07:9f:83:f3:71:6d:
72:80:4c:7d:43:28:a6:1d:10:af:ba:29:65:f6:ca:
99:c7:17:98:7b:cb:88:c5:e9:7a:ab:e7:e9:fb:c8:
59:a5:6f:76:82:c6:47:ca:ce:5b:da:7d:61:2d:75:
cf:43:5d:59:d9:aa:66:cb:dc:8a:b3:69:fe:d0:a6:
3b:41:5c:3a:f8:cd:18:91:6d:55:75:75:46:64:29:
d9:d3:a1:a0:6e:e8:b8:f0:01:dd:40:ec:9a:18:ea:
cf:26:3c:d7:85:e1:b1:bc:53:05:9d:d6:8a:ce:3b:
c9:d6:69:db:70:ba:ea:da:e7:55:31:26:e3:b2:56:
c7:01:98:ac:53:1f:b4:1e:b6:9f:3a:04:4f:2c:57:
f5:b4:22:2e:1e:6d:dd:90:81:3a:4f:21:4f:45:5c:
68:98:74:24:4b:1f:bf:ab:56:83:94:95:f5:61:62:
dd:3e:24:31:0a:4e:4b:70:6b:88:63:88:f2:18:47:
24:ca:f5:2c:b7:77:eb:5b:63:97:d2:50:d5:76:22:
65:94:eb:a8:eb:0d:d8:b1:a0:0c:ac:66:13:57:99:
e9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9A:09:B6:A1:5D:90:AD:0A:FC:75:74:DB:98:60:B3:73:7F:88:F0
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:dc:0e:d1:21:c6:00:b5:94:65:be:46:48:f4:9c:8e:73:5e:
0b:f1:71:78:c9:c9:e5:11:34:6b:60:06:8c:b1:5c:98:e9:85:
75:a7:c2:7e:9d:87:b9:32:6b:01:60:62:bc:fa:1e:02:1e:79:
09:2f:05:47:36:16:58:51:fd:e4:a5:a0:80:86:94:6a:95:1f:
fb:a6:ba:7f:ab:f0:09:ec:10:c0:80:a7:89:1d:af:56:97:ed:
6d:1b:b8:f8:c8:cb:35:17:e2:7e:41:d9:28:b3:bd:87:95:22:
cd:eb:51:f9:ca:7c:83:db:04:13:56:3a:28:71:a9:b2:05:ce:
fa:6b:52:c6:e0:f0:10:9e:30:fc:34:44:53:06:cc:24:6c:ba:
73:7a:55:47:8a:47:93:0a:78:ae:91:57:1b:dc:bd:ca:1f:f9:
d4:7a:16:70:e9:ed:9e:94:5d:a8:1f:0d:f6:ad:d6:eb:72:22:
e9:c1:45:a0:09:5b:59:bf:6a:cb:72:bd:da:3e:6f:a0:1e:08:
c3:e8:5b:a4:dd:bc:73:4f:a6:57:02:c1:f1:4b:ba:e9:6f:3b:
6e:5e:b2:44:8b:9e:fc:17:b2:d0:22:62:73:07:41:67:7c:1c:
db:94:f5:e9:be:50:0f:a5:75:7c:97:b3:7e:eb:61:2d:1e:93:
97:ea:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:55:37 2025 by rpki-client