Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: m6A/HAeFMzI9d+D2U6syyZ+aj+oLdjiaN1j2ZrZ6h/E=
Subject key identifier: 2E:30:23:CD:35:FC:96:80:F9:71:17:DE:19:22:46:2F:A5:DD:20:E6
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 0197B745B8C41A4AE605F694D72F1FD938FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:01:29 +0000
Manifest this update: Sat 28 Jun 2025 16:01:29 +0000
Manifest next update: Sun 29 Jun 2025 16:01:29 +0000
Files and hashes: 1: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: nNrLBoMyNJbljuZoZMWANW08c4uB7BTOdUr1W1EKaWU=)
2: vwwOJsNwZhQ7jXxQBO6C3CzaqW4.roa (hash: PgsS8twf0GYuOEotT5Wskvo1GlMh/1Ykh+edTuYgZgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b8:c4:1a:4a:e6:05:f6:94:d7:2f:1f:d9:38:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Jun 28 16:01:29 2025 GMT
Not After : Jun 29 16:01:29 2025 GMT
Subject: CN=2e3023cd35fc9680f97117de1922462fa5dd20e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:da:ce:6e:f2:c6:c9:4a:11:9c:0c:5d:54:31:
f6:13:1a:f6:3d:74:3e:d5:28:57:bb:ba:61:e3:a1:
8f:43:fb:9f:17:00:97:7f:75:39:a2:d6:3a:22:10:
e4:62:81:7f:3e:12:36:f7:49:af:1d:4e:0b:15:3a:
6f:59:4d:62:a6:64:97:0e:9a:48:e6:34:09:3e:5b:
94:63:f3:17:df:cf:3e:5a:bd:2c:b3:f5:29:f7:24:
4b:0b:de:97:8d:5a:50:3f:3d:7d:0c:06:3f:ba:6c:
52:a0:65:0d:8b:ac:fd:db:58:da:94:f7:b2:4b:ee:
30:bf:1f:c0:ea:22:2e:71:84:55:5b:08:42:bc:f5:
6d:aa:90:e3:be:da:86:c5:c1:99:7e:78:82:62:ea:
1d:dd:6d:46:80:d4:e2:77:83:2f:d6:5b:a2:2b:64:
9a:72:31:78:79:af:e3:04:42:8c:5f:32:8e:ab:45:
7d:2e:b8:28:c1:d6:33:15:52:7d:9a:89:48:a8:2a:
b9:1a:b4:d4:92:6d:1f:d1:99:4b:66:89:7b:b4:c5:
f7:a2:04:00:c4:65:a5:01:ff:87:4f:3d:df:a0:52:
b1:aa:81:33:5a:6f:30:ff:78:d0:b6:8a:4f:8f:b1:
ca:d7:72:f1:c1:cd:a3:a2:8d:51:60:62:08:de:c3:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:30:23:CD:35:FC:96:80:F9:71:17:DE:19:22:46:2F:A5:DD:20:E6
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:78:05:a0:c5:23:93:cb:75:b9:b1:1c:3e:1d:65:b0:6c:09:
3d:65:50:81:2b:20:c6:45:c6:12:e8:72:2d:6d:f3:8b:d6:1d:
b5:ef:bf:ef:a3:92:94:2a:10:76:f0:db:3f:8a:c1:9e:18:43:
0e:6b:d0:34:e0:03:01:70:51:6d:a5:1b:aa:a3:aa:84:33:a0:
9c:79:b8:7c:ba:41:36:6a:66:6b:2a:37:d5:4b:fd:09:37:8c:
a1:43:0c:0a:74:7b:4d:33:f6:0d:e3:34:ff:cd:74:dd:66:6c:
e4:37:2f:72:ae:16:ed:d2:82:66:64:66:9d:43:47:ba:28:9b:
67:de:74:78:8c:ae:31:1c:bc:52:6e:bd:66:25:da:eb:8d:85:
a9:4e:4c:c4:53:0c:b5:77:fb:f7:b2:20:52:b2:f3:3b:a3:7b:
0f:fa:96:a5:18:0f:e4:66:23:81:e2:32:7e:ec:63:f5:85:db:
8b:83:bb:69:ce:01:0d:3e:1c:42:b9:6d:e2:48:e7:c8:fd:c4:
55:ee:ce:8a:55:9b:b7:a4:99:1a:07:ea:da:a2:b6:9e:70:e6:
25:6b:4d:e0:8d:b1:6e:4c:f2:8d:f7:45:dc:d7:4e:c9:b0:76:
34:03:bf:3a:2b:b0:11:12:69:73:c1:6d:f7:8b:a7:c3:77:56:
60:80:b8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:04 2025 by rpki-client