Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
File: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft (raw, json)
Hash identifier: fDmyvkFBXIo6w+oSxZc7Fcdmlvx51yvvpV3yklqYRO4=
Subject key identifier: BF:95:F8:4C:A3:C5:E0:CF:58:15:85:77:5B:D1:67:19:EF:13:EB:8D
Authority key identifier: 23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
Certificate issuer: /CN=230d311fc19463fdd30adecc917b5f0298741b44
Certificate serial: 0197B8212F62D2C9DD8B682C4D46424231D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
Manifest number: 0FD2
Signing time: Sat 28 Jun 2025 20:01:11 +0000
Manifest this update: Sat 28 Jun 2025 20:01:11 +0000
Manifest next update: Sun 29 Jun 2025 20:01:11 +0000
Files and hashes: 1: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl (hash: dnyef1QmruhXqcAH7IYGcWv4tjMo8uC1Ws7L8cPVQC4=)
2: qaZCGy8ImKVej6couAVTC--aSzI.roa (hash: dKUZq0YlDWheyPATDjfQQ4lypZzKgD8qgqRTkln0uKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:2f:62:d2:c9:dd:8b:68:2c:4d:46:42:42:31:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230d311fc19463fdd30adecc917b5f0298741b44
Validity
Not Before: Jun 28 20:01:11 2025 GMT
Not After : Jun 29 20:01:11 2025 GMT
Subject: CN=bf95f84ca3c5e0cf581585775bd16719ef13eb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:09:44:8e:5f:f3:db:0e:c2:5b:97:6c:79:
de:e9:74:54:82:b6:01:e4:6d:8b:8a:1b:22:cb:04:
7e:63:af:36:27:e5:9a:9f:29:be:97:68:8b:92:b2:
ba:3d:fb:a9:4e:cf:98:30:d7:67:9c:d0:81:1a:76:
bc:61:f0:1b:07:39:4c:38:6c:a0:f7:61:af:fb:8c:
7b:a3:41:46:60:56:43:36:b3:c8:1f:00:13:a8:25:
9e:d8:34:a8:e6:d5:13:cb:d6:25:f5:7e:49:fa:bc:
82:2a:11:9f:f3:4a:af:a1:fe:bf:b1:bc:34:68:c4:
a1:79:c3:65:6d:46:2e:dc:0f:c4:5a:dc:94:d7:20:
f6:ff:9a:77:20:f0:bf:71:b3:f0:8f:0a:ff:ce:07:
3f:34:e5:e5:bf:58:bc:64:2c:f6:7e:8d:66:66:e1:
2a:39:c1:05:a6:c3:5e:af:66:43:38:e5:ec:57:5f:
05:ed:92:97:32:c3:35:12:4e:21:97:fd:c5:fa:09:
66:a7:bb:29:ad:65:35:8e:0a:b4:cf:1c:91:21:bd:
95:1e:98:f8:fc:52:ee:43:bb:75:75:89:9a:a8:b4:
05:c8:be:a5:cf:74:b5:5d:55:1c:cd:c7:7e:c9:a0:
4b:83:61:b1:30:a3:11:15:a9:76:9f:fd:ef:65:d2:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:95:F8:4C:A3:C5:E0:CF:58:15:85:77:5B:D1:67:19:EF:13:EB:8D
X509v3 Authority Key Identifier:
keyid:23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ce:0f:c9:c9:09:dd:9b:f6:88:86:58:f2:05:5e:61:f5:84:
27:8d:04:ad:62:7d:03:85:fb:12:da:05:ce:8f:4d:bb:0d:36:
71:ce:d7:4a:53:69:ed:24:20:93:36:64:f7:c4:99:a0:8e:24:
af:60:4b:5c:bd:a6:0d:ed:7a:16:73:75:bf:91:05:09:07:ee:
1d:dc:e3:b0:9a:0e:c9:98:37:e4:af:a8:f1:87:bb:b0:e6:51:
d6:d5:73:61:9b:03:90:74:0f:14:21:2c:cb:e9:ad:9f:8b:4b:
bb:38:39:95:13:99:cf:4d:db:d5:be:3f:af:b2:67:88:a3:54:
5c:74:12:46:05:f0:35:f7:e0:d8:5b:b4:0a:be:3b:32:ad:5f:
b0:2b:44:e1:bc:f8:ab:3b:bb:cc:47:0c:6d:08:e4:4e:44:90:
c3:5c:22:a2:02:ad:a4:c4:84:cf:80:85:aa:07:fd:93:17:75:
d2:51:6a:fe:9a:19:89:65:c6:6a:0d:65:9a:cd:1c:8b:5d:d9:
4b:78:88:9f:02:3c:bb:87:a0:d2:0b:46:a5:9b:22:f4:dc:ef:
45:36:75:46:d6:3e:be:f2:56:8b:c3:8e:e6:1b:25:b7:1a:a8:
82:c0:a1:2b:19:a9:a1:0e:34:d2:c9:25:14:11:98:92:a2:6c:
18:07:b3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:45 2025 by rpki-client