Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: RX/CcKnMeD0nOxz1yB63USARhhxJ2Mgo0G0Wf6P2dqY=
Subject key identifier: 5B:02:EF:9D:2B:DB:51:CE:DF:3E:52:97:02:D5:82:38:3C:E6:65:50
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 0197B5C4F3C07DF6A656998F5764AFC746A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0C30
Signing time: Sat 28 Jun 2025 09:01:12 +0000
Manifest this update: Sat 28 Jun 2025 09:01:12 +0000
Manifest next update: Sun 29 Jun 2025 09:01:12 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: 6bafOpvyOEdvPXHZsy44D9dvFj+GJqy6pATQ6lsbz8k=)
2: efjuARdCpmdiyPaUU3_AH5I4td0.roa (hash: 4c8sivagBq88/iXFQqILtQVXJqZtsZ5vEblRM7AxfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:f3:c0:7d:f6:a6:56:99:8f:57:64:af:c7:46:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Jun 28 09:01:12 2025 GMT
Not After : Jun 29 09:01:12 2025 GMT
Subject: CN=5b02ef9d2bdb51cedf3e529702d582383ce66550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:ac:fc:48:b8:77:81:be:de:2c:96:a5:8e:
be:15:94:00:b6:05:ac:ee:8c:e3:c3:34:2a:ff:4e:
20:b4:97:c6:45:0d:6a:11:dc:a9:ea:87:7b:3a:64:
eb:06:9e:16:71:c7:0f:54:f1:33:08:6a:5e:fb:25:
91:f5:90:8d:03:91:5c:e4:4f:00:50:d2:4e:fd:18:
b0:ec:f8:a6:8f:f8:e9:5c:21:02:d4:cb:0f:24:96:
f3:17:e2:90:dc:df:22:51:2d:d4:1d:6b:fc:09:79:
f1:b7:e4:b2:b7:1a:ed:e8:40:2f:79:5a:58:19:e8:
ba:b9:01:81:64:b2:12:03:1f:27:ad:7e:14:11:aa:
a4:db:3d:20:7e:3f:d4:69:e7:4c:e3:2d:6e:0b:ba:
f5:62:9c:c8:35:de:d0:ff:0e:2d:41:4e:0c:e3:a8:
28:b1:59:6e:e0:26:5a:45:d5:2c:cc:ae:bf:f9:7e:
9d:e7:92:13:d4:1a:22:7d:0d:e1:04:c4:d8:30:fd:
03:43:ba:18:81:cd:d9:1c:a8:2d:f2:d1:c0:56:56:
f0:6b:c9:55:8c:21:9d:60:5a:4f:91:bc:cb:ff:c7:
1b:05:b9:37:6a:40:85:88:2e:c3:bf:9b:8f:24:00:
22:3d:7e:5e:1b:1f:c7:48:16:4a:ba:55:30:cc:e4:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:02:EF:9D:2B:DB:51:CE:DF:3E:52:97:02:D5:82:38:3C:E6:65:50
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a7:14:77:6a:e6:06:40:67:aa:43:70:85:f0:e6:b0:e7:ed:
68:55:1d:93:4c:72:b6:e0:13:ce:d0:87:79:e3:af:a4:f9:cf:
b3:e3:14:de:70:d8:5f:f1:ba:0f:66:8d:5e:3c:a4:b5:27:8c:
f6:d4:57:5c:28:dc:ca:cd:ce:d1:80:c6:d7:cb:bb:39:bf:44:
6e:51:b2:86:18:a8:c9:4f:03:42:ab:72:7e:84:b5:3b:9b:c5:
22:95:14:77:5f:18:fc:80:8e:a1:0a:9f:da:45:ae:61:e2:a5:
bd:23:dc:65:47:88:6c:ca:58:ff:60:a0:40:be:4b:77:1a:2e:
c8:cf:8f:e8:87:9b:ca:96:9b:ed:a2:49:2f:b9:da:1e:ef:e1:
06:a0:1b:3a:2d:75:f5:c7:57:37:f0:32:17:d0:b7:7a:52:c6:
80:8f:97:8a:07:c1:e0:11:dc:c9:b6:e2:04:ab:07:2e:6c:62:
de:b0:31:98:f1:33:6f:78:48:e1:8d:fb:25:d6:b0:2a:19:6d:
64:8f:e8:3b:ec:11:51:3f:ca:7b:7d:ce:67:97:3e:55:89:c1:
83:19:2b:2d:88:c2:87:c9:83:1e:48:cb:68:cf:ae:07:e2:54:
2c:d3:f6:f7:3d:b6:46:3a:6e:95:89:d8:10:4a:b0:b9:bd:ad:
95:2f:b9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:35 2025 by rpki-client