Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
File: IuKOVQMUE4-dg6KLLWZum4dEtRA.mft (raw, json)
Hash identifier: m8TWc3hsImZ2W4AUvnrD+PMs0sgBLg0yln91WfRfWOs=
Subject key identifier: 10:6A:DF:2E:6B:39:A5:A1:F8:FA:59:DC:7D:FF:08:11:6B:8F:54:93
Authority key identifier: 22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10
Certificate issuer: /CN=22e28e550314138f9d83a28b2d666e9b8744b510
Certificate serial: 0197B7EA1BF36AB6FB212E9FBCE26AB43697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:02 +0000
Manifest this update: Sat 28 Jun 2025 19:01:02 +0000
Manifest next update: Sun 29 Jun 2025 19:01:02 +0000
Files and hashes: 1: IuKOVQMUE4-dg6KLLWZum4dEtRA.crl (hash: 1wWwctCxC/dgBMlsc5oVIYyd+AJJwQUZIUT7mWyszrk=)
2: cFbXH5gO6qs06Nq1Ek6wrTAvxB0.roa (hash: c0tlMuDM/vPMybXrB0sIatVwyL/aO7RZmUvD1wZIObw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1b:f3:6a:b6:fb:21:2e:9f:bc:e2:6a:b4:36:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e28e550314138f9d83a28b2d666e9b8744b510
Validity
Not Before: Jun 28 19:01:02 2025 GMT
Not After : Jun 29 19:01:02 2025 GMT
Subject: CN=106adf2e6b39a5a1f8fa59dc7dff08116b8f5493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:a5:bd:79:9a:b6:b8:d1:1c:89:48:7c:40:
16:25:18:25:8f:bc:ca:1a:64:0e:19:53:54:f6:8f:
e2:01:dd:ef:c0:24:37:2e:80:df:15:d8:df:a1:37:
b6:9f:30:2f:9a:d6:42:d6:58:e7:2a:67:1f:1b:f9:
52:d3:b9:6c:7c:aa:f7:8c:dd:dc:27:6a:b2:4e:32:
e7:c5:cd:0d:1c:90:f6:fd:73:24:a2:9a:aa:6a:c3:
d6:5d:3d:f2:ce:16:df:27:54:68:4b:f4:17:27:87:
87:f3:cf:93:94:e2:31:dc:da:ed:4d:a2:1a:01:31:
06:e0:ea:50:ad:87:50:70:cf:6e:79:e5:60:ca:38:
f5:8e:0c:5d:51:41:cd:37:4d:34:ab:00:10:51:87:
9c:5d:ca:ff:55:2b:17:9e:55:e0:b1:b1:76:0f:20:
16:bc:4a:a0:5c:f3:e4:44:88:8e:62:32:ba:eb:43:
53:f8:8d:fb:75:95:a8:e3:ca:c7:13:37:22:05:4e:
b1:df:94:d1:27:4b:81:f4:29:ff:4b:73:e7:31:3a:
be:d5:99:c2:73:c4:bf:60:29:aa:3e:a7:d3:3f:e1:
7f:4c:b4:e4:dd:82:7b:cb:be:aa:73:6a:d2:e8:85:
4a:ca:a3:cb:8a:19:92:34:5c:2e:f1:d2:16:f9:50:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6A:DF:2E:6B:39:A5:A1:F8:FA:59:DC:7D:FF:08:11:6B:8F:54:93
X509v3 Authority Key Identifier:
keyid:22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:66:6d:b8:f5:31:84:24:b9:0b:e4:98:82:44:75:31:cf:b6:
0a:43:8f:96:57:1e:98:d2:75:d0:2f:20:2d:b9:fc:27:a7:9e:
5f:7e:af:ed:44:08:03:b1:25:78:24:dc:0a:6e:96:51:c7:ac:
c7:5d:d7:5f:b5:c7:08:a6:b8:53:53:d7:dc:a8:b3:cd:76:f3:
4c:0a:90:a6:ee:dc:18:c8:01:8d:04:c3:c3:eb:bb:b2:67:a8:
4c:33:86:34:8a:e9:b6:d6:12:e8:b4:6f:ea:7d:23:62:68:57:
5a:58:cf:a7:d2:44:e6:88:e7:87:e9:28:b6:6b:2e:3c:05:72:
96:0b:35:dc:47:8e:30:a3:fe:0a:4d:d3:bf:0c:45:25:15:ae:
66:0e:0e:a9:06:c9:de:ed:86:e7:f9:21:02:dc:d6:35:17:94:
14:3e:32:db:1b:a3:0a:5c:f8:92:a4:87:73:0b:9a:44:df:7e:
6f:87:61:1a:12:ee:35:65:c3:9f:90:01:05:b1:74:82:de:d4:
13:c3:a4:e3:33:ce:cf:fc:6a:53:93:7d:b1:ba:14:64:0b:ec:
74:79:80:8f:2f:75:48:5a:bc:98:29:e4:fa:2c:41:f7:ca:11:
26:72:e8:1f:ea:5b:a8:07:86:bc:a3:6f:f8:f2:17:54:21:d2:
96:51:13:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:49 2025 by rpki-client