Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json)
Hash identifier: zPQOi7Z91l18aoeixHA5L+LcTXx8m9kCh2YAZHE1LZs=
Subject key identifier: C5:B3:D9:68:A8:85:E7:A9:35:C0:86:3A:25:96:B5:E1:5E:4D:58:13
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 0197B6A0BDC3FB87AAF37A5EF067BEFA62F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
Manifest number: 01F6
Signing time: Sat 28 Jun 2025 13:01:16 +0000
Manifest this update: Sat 28 Jun 2025 13:01:16 +0000
Manifest next update: Sun 29 Jun 2025 13:01:16 +0000
Files and hashes: 1: 2n3afJDZ2VaAW1ICi9wuuluJH-s.roa (hash: n7gdmzqfRPjhPckkIN46JD6+pmnsuH8Fvwcad0thHWk=)
2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: FaFREhEjgfrcESmw32ZXCXfg6oy3pjVsk5LEHSslvL8=)
3: fc650b5-Hy28l_7CM0InWSbhHHA.roa (hash: I0jfOZTYpGZasFE0U01uqVVs9byyAIXg5OzAj9nSBPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:bd:c3:fb:87:aa:f3:7a:5e:f0:67:be:fa:62:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: Jun 28 13:01:16 2025 GMT
Not After : Jun 29 13:01:16 2025 GMT
Subject: CN=c5b3d968a885e7a935c0863a2596b5e15e4d5813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:b4:9b:db:b1:bd:82:54:d6:17:b2:bf:f9:
27:c4:93:96:c8:75:64:d1:34:d9:e0:cd:e7:4a:7c:
49:c2:3f:c3:67:b5:b9:bd:25:73:b9:18:f9:56:2a:
e5:86:19:2e:b3:85:1c:94:cf:03:80:80:0a:ad:66:
50:d6:f4:4a:24:d2:d3:b4:c7:f8:f9:c8:e6:56:fc:
5b:54:b2:18:97:7d:0f:a8:47:0d:d0:c6:cf:9a:fa:
00:76:16:ab:4c:51:e7:fb:4c:87:5e:f8:f0:a2:72:
28:39:77:e5:6b:ef:df:14:bc:5d:04:db:4f:10:9a:
83:ac:66:2e:03:14:1a:79:e2:81:f0:4b:b3:11:c7:
9d:52:6e:0a:9c:d2:af:02:ea:49:af:72:47:85:6f:
d3:c7:5a:0b:f1:c3:af:51:5d:86:07:ac:62:aa:c7:
8b:60:36:41:1a:82:68:76:04:44:21:bd:52:5d:ee:
50:ad:d9:74:07:c4:54:de:b9:75:62:1a:2c:b1:b4:
4a:73:88:ed:a1:5b:6b:e6:6d:02:ae:20:4d:79:42:
cf:0a:4e:83:69:44:c3:1c:3f:46:1d:1e:88:37:e8:
b2:aa:60:b9:8d:ec:2d:bb:2e:75:ae:22:69:d1:4e:
31:22:16:e0:2b:4a:b6:84:02:df:30:34:2d:a9:9d:
af:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B3:D9:68:A8:85:E7:A9:35:C0:86:3A:25:96:B5:E1:5E:4D:58:13
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d8:a7:1b:c6:c7:5b:c6:06:a2:9b:70:28:73:17:65:41:50:
ee:08:3e:d2:f6:15:00:6a:64:c8:57:6b:05:83:38:49:db:16:
9e:32:3c:ea:02:17:de:a6:cc:37:4e:54:d9:9a:97:3d:1d:b2:
b9:8e:9c:f0:5f:9c:39:00:c0:49:24:cb:8a:2f:4a:e2:9b:21:
52:13:e1:27:d8:f8:cf:b3:94:17:45:a3:67:86:3e:94:ae:95:
32:0d:08:00:e6:94:bc:13:de:9b:ff:38:d2:95:d8:f9:46:a2:
f4:95:cd:f6:7f:6a:ca:31:ad:9e:c0:3e:59:35:f5:d5:c0:76:
85:7b:64:68:a1:7f:b5:03:3d:e3:d1:17:d1:d1:8e:be:bb:e2:
d9:8c:fa:7f:b1:1c:2c:45:11:2f:05:dd:b3:58:42:ac:6b:99:
eb:d7:b3:d1:6f:af:9e:46:86:c2:91:ec:a5:6c:7d:57:69:8f:
ed:74:bf:10:cc:1c:89:16:1f:4c:24:06:42:92:59:c5:9f:dd:
31:21:2a:05:a9:dd:0c:06:04:18:58:e4:1e:53:10:01:5b:1f:
65:75:db:08:d5:51:7f:17:3e:d0:1e:c9:7e:3b:35:93:7d:9b:
10:d5:d2:f6:cc:53:5a:75:ce:6b:e7:a7:a3:d0:e2:ee:a4:05:
a8:2d:21:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:51 2025 by rpki-client