Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: 05Lxz9pwJp0YuOXrV2btDVZzHaY0OZwGmNyOF8DVx+8=
Subject key identifier: 12:DC:80:A0:7B:BD:8C:89:E2:00:8B:17:2C:70:84:C8:9C:1C:10:0C
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 0197D1ABAC4A7DAC867851D41AAB7FDB1EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0979
Signing time: Thu 03 Jul 2025 19:02:58 +0000
Manifest this update: Thu 03 Jul 2025 19:02:58 +0000
Manifest next update: Fri 04 Jul 2025 19:02:58 +0000
Files and hashes: 1: 1pYkybGgKOUsse4DTksz46U1UVk.roa (hash: TAfzGG00BI7uAR7rTZh0yLg+7xDY58D62iiCBqbod3s=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: CYAw+e1rLmtmHGK/fiYk2u1W8O2CnfXdJMTWfgdHJyE=)
3: VxdHezzHKrkrE2Feoz1POMlVQMY.roa (hash: FkZe/vgHmq1Yaa4HgYSORTSSTc1UQglxGrV02REUteE=)
4: XIWD4tmKPBUNLGHuM83XfdqSQLo.roa (hash: 1D5W9f26KTQarHJTs0xIKCgYO2HEyTRn2m31rQHLa2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 17:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:ab:ac:4a:7d:ac:86:78:51:d4:1a:ab:7f:db:1e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Jul 3 19:02:58 2025 GMT
Not After : Jul 4 19:02:58 2025 GMT
Subject: CN=12dc80a07bbd8c89e2008b172c7084c89c1c100c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:b5:4b:2e:5a:a5:e2:77:51:87:80:90:76:
15:75:f0:dc:15:ca:9f:9a:d4:6a:df:2f:26:b4:60:
76:34:cf:ba:74:5b:37:86:1c:98:60:71:5b:d6:6f:
3d:5e:3c:df:3a:27:2a:59:3a:b2:12:97:04:38:12:
a4:3a:87:5b:25:62:4b:8b:36:fb:b0:54:76:e3:93:
0f:ef:5d:ad:08:5c:34:d7:4c:28:bd:20:ce:6f:79:
5f:e3:ab:48:e3:4a:98:8d:18:b9:0b:4d:19:f6:89:
28:d3:fb:92:09:e6:78:c6:3f:50:b7:d9:49:ab:bd:
62:18:bf:07:3f:39:90:6f:0c:f7:1e:31:59:e3:c4:
bc:bb:d7:76:47:b4:d9:3b:54:67:d7:c7:c6:fa:2e:
4b:27:18:61:3f:5e:3e:04:74:b1:b8:43:21:60:e1:
70:cf:35:94:1b:17:83:4a:b9:90:49:e6:1b:9c:67:
52:00:c3:3c:1f:2d:67:34:30:01:7f:eb:5f:ae:57:
9e:2f:4c:15:38:04:f6:51:63:c5:f5:5f:9d:0f:be:
9b:47:6d:f7:3c:9b:44:db:bd:c6:32:ea:a5:1a:5e:
a8:fe:67:8e:b9:39:31:77:95:35:22:a5:cd:c4:c9:
5a:02:f3:4c:fa:f2:e8:1a:41:87:f8:33:87:f9:90:
d6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DC:80:A0:7B:BD:8C:89:E2:00:8B:17:2C:70:84:C8:9C:1C:10:0C
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:14:24:a0:c6:a2:14:d0:7a:e0:f1:51:13:2e:ab:02:5d:6d:
8e:b0:4e:3c:35:90:94:e5:63:d0:83:8e:67:75:52:d3:6b:f7:
e3:92:38:85:16:15:06:c3:e1:00:f4:df:d5:42:57:ac:24:f0:
94:a8:eb:9b:7e:c1:5f:9a:fc:f5:a0:e3:58:d2:4c:c0:10:19:
0d:cf:90:b0:58:4b:cc:f3:94:dd:50:dc:cc:ff:5d:f7:03:9e:
a2:dd:ec:5b:98:72:50:7a:bc:df:5f:c5:c8:e9:dc:6a:56:aa:
45:af:7e:ff:37:75:ec:88:cc:71:7d:fa:fd:82:ba:3f:25:80:
7e:2c:b2:72:9f:93:41:63:71:f2:6b:0b:0c:e6:b7:13:94:ac:
bc:fd:f7:c9:8f:d7:b9:40:56:54:1e:69:d2:70:a2:06:c5:5e:
90:17:4d:67:81:70:72:6f:f5:6b:94:0c:12:f1:a6:e2:62:16:
36:cb:19:03:b1:82:1b:ae:1f:3f:5e:36:51:1e:f0:18:c2:61:
e9:72:17:5c:20:ca:40:fd:85:ff:23:99:3b:e1:7e:1d:12:f0:
d2:60:3e:94:e1:6e:97:64:ff:3a:fb:92:ce:04:f7:48:01:aa:
06:34:e9:40:d0:a0:53:2f:0b:8b:c1:7d:e6:44:42:ca:68:38:
35:21:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:51:05 2025 by rpki-client