Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier: vFRBFmLvFrMd71plT9+PsJgTFtB7ZnH0Th0r1utJmo4=
Subject key identifier: 2D:22:41:8E:0B:50:92:F8:B5:62:C2:6E:E0:46:30:82:93:6C:58:F6
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 0197CACC59D85872BABFAC0D80397784DE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number: 137B
Signing time: Wed 02 Jul 2025 11:01:19 +0000
Manifest this update: Wed 02 Jul 2025 11:01:19 +0000
Manifest next update: Thu 03 Jul 2025 11:01:19 +0000
Files and hashes: 1: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: 7gDu4TIXtS4wuMaijvv8G33DeryW8kePd6h51Cxdekg=)
2: ZCDIooS_ImzZeN5QrbFaFhO5dyA.roa (hash: TP421izhVwKSZitQyZKTA1SgQgPy6vE7WxBJa4Db6y0=)
3: xOQ7AmZa9_C69z9KUz6w5PLIpQA.roa (hash: 8+VSRj7tw2mCh7Z/e6KhYhg5OTkoPLOgLEVa0Q5ZizM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:59:d8:58:72:ba:bf:ac:0d:80:39:77:84:de:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: Jul 2 11:01:19 2025 GMT
Not After : Jul 3 11:01:19 2025 GMT
Subject: CN=2d22418e0b5092f8b562c26ee0463082936c58f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:e0:db:8e:ac:bd:39:33:c2:ee:98:e6:9f:
68:f0:42:26:8b:10:85:4f:7a:f7:0f:f7:31:38:cc:
ef:63:f0:95:23:f8:be:25:56:f3:a4:6b:74:30:34:
5c:b7:b7:05:11:b4:3d:75:ea:3b:69:f4:31:ce:e7:
ea:ec:37:0e:30:8b:4b:ed:aa:88:9e:98:bb:c8:e0:
1d:3b:b0:3c:8e:38:51:c5:dc:a6:dc:c4:0f:fe:88:
d3:64:d8:1d:a8:92:c8:e1:cf:da:a3:3e:d5:07:a5:
05:98:9c:ee:75:b0:dd:d2:c4:24:f4:c8:36:63:84:
63:10:dd:0e:10:ea:3c:0e:ed:80:b0:e3:3d:66:8d:
49:51:92:d8:2e:75:7c:f8:6c:bf:f0:0d:b6:11:f0:
58:e5:4c:52:20:02:55:aa:82:2a:d5:79:75:e7:8c:
bf:6b:54:2a:4f:bb:fb:e4:d7:ff:38:56:c2:49:bb:
2b:8f:90:c7:2d:cf:83:90:1a:09:9d:7d:8e:07:f8:
bf:61:e9:81:c6:bf:12:75:84:38:8c:c9:7d:ab:a2:
b4:bb:9f:b9:a0:4f:c1:be:06:1d:d4:f1:94:29:b7:
5f:c1:82:7e:96:98:cc:b8:ed:73:bb:55:d8:7b:21:
0f:56:a1:a7:46:43:12:f3:22:fd:92:d6:bb:f7:62:
8b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:22:41:8E:0B:50:92:F8:B5:62:C2:6E:E0:46:30:82:93:6C:58:F6
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:95:26:9d:55:23:4c:89:e3:d2:5a:4e:21:3c:d7:99:85:b5:
73:16:bb:89:04:c0:af:c5:0b:af:63:28:9a:67:42:fa:e7:f2:
26:9b:fe:99:61:be:e1:d7:40:6b:f6:7b:9f:d8:be:bd:63:e5:
71:43:93:d6:7b:cb:56:e3:b2:f3:c2:25:4c:cb:e0:26:7a:81:
ed:a8:5f:17:5d:32:6d:3f:16:5c:03:1e:33:56:1e:37:cc:29:
52:d3:d9:1f:4c:f2:c6:99:5b:7a:28:88:c9:22:8c:db:e0:a8:
9b:1b:ee:38:97:0f:85:40:77:c8:6e:ec:82:9e:46:17:50:fe:
e3:bd:b4:c4:7f:12:2a:1c:22:f6:17:25:1f:2a:cc:9d:62:62:
7e:04:69:b5:9c:2a:df:e2:35:3d:89:0f:e3:32:9b:85:e7:34:
60:c7:94:00:f3:90:e3:a7:80:dd:e9:33:8d:92:d1:41:2a:83:
ab:98:31:1a:1f:1e:cf:10:f3:06:a5:91:a6:0b:3a:81:ab:18:
a7:68:8a:04:86:e9:54:cc:a8:45:6c:d5:53:ea:72:2f:5b:4c:
58:31:fd:50:65:91:00:3e:9c:2e:ac:0c:82:28:6d:bc:1f:d9:
b9:6f:94:09:dd:37:1f:58:92:4e:b0:38:92:64:ce:4c:a3:b4:
ce:7f:aa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:55:01 2025 by rpki-client