Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
File: irCobN7x1oVdGd50F1Nzzcga78w.mft (raw, json)
Hash identifier: paY5wyMLlNY1WXFJWOoLJMVHIzfg5JCRy+jZKolHy1o=
Subject key identifier: D5:1B:C5:F6:B9:9C:23:9A:52:58:89:3E:F4:62:8F:5D:A1:6E:EF:5C
Authority key identifier: 8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC
Certificate issuer: /CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc
Certificate serial: 0197B6A04A1E85E7136E978207BC4A94C840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
Manifest number: 6A
Signing time: Sat 28 Jun 2025 13:00:47 +0000
Manifest this update: Sat 28 Jun 2025 13:00:47 +0000
Manifest next update: Sun 29 Jun 2025 13:00:47 +0000
Files and hashes: 1: iDD0dIi8FZu6HOhyS7tjvaUtgQE.roa (hash: 0JHKcL5Vnxkq7EPVZmPbz9exzTMRAeW5CIg2FGWWjPE=)
2: irCobN7x1oVdGd50F1Nzzcga78w.crl (hash: HRWnKgAwx1JdneYjp0qKGpvDoFqKG5HbHEmPZxbr0Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:4a:1e:85:e7:13:6e:97:82:07:bc:4a:94:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc
Validity
Not Before: Jun 28 13:00:47 2025 GMT
Not After : Jun 29 13:00:47 2025 GMT
Subject: CN=d51bc5f6b99c239a5258893ef4628f5da16eef5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:bf:af:51:b3:41:6c:c8:64:d3:25:40:e3:
a1:75:01:bc:47:e1:8b:da:67:84:5f:d5:d4:e7:dc:
56:bf:d0:f1:65:a9:9e:ec:10:df:6b:65:2a:70:3b:
3a:bc:ce:bd:4a:2b:34:d1:01:27:9f:78:ee:0b:92:
2d:50:9b:6f:5f:cf:ff:04:48:97:41:59:69:cd:28:
87:30:3b:95:71:c3:32:e8:72:6f:b3:fe:a9:4e:5e:
ac:fd:f6:f2:89:a0:9a:ca:a1:01:d0:1a:d6:cb:21:
bb:a4:09:d2:f7:7e:f6:d2:a7:6f:47:46:26:e3:0f:
a6:a2:16:de:40:5f:a9:35:fb:8b:ba:c2:76:54:a3:
99:65:29:cc:0b:74:1d:d4:5d:28:bc:c1:36:82:1e:
be:03:7c:8a:37:bc:f2:63:76:a1:20:f9:42:db:29:
0b:a1:a8:8a:9e:d0:30:48:41:f0:c4:96:f1:f7:7c:
32:03:c7:5a:8a:ea:45:53:05:1a:70:b6:f4:e1:07:
27:e8:38:4b:ad:c8:78:43:95:16:6e:4a:1a:d4:13:
c5:d0:61:79:bb:65:32:e7:a4:17:11:3e:e3:27:19:
27:11:97:24:35:d6:17:dd:d6:27:0f:16:ce:a3:f3:
18:a2:9b:33:3b:f9:4c:0e:22:a0:3b:a5:9a:c9:2d:
93:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1B:C5:F6:B9:9C:23:9A:52:58:89:3E:F4:62:8F:5D:A1:6E:EF:5C
X509v3 Authority Key Identifier:
keyid:8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:96:e2:a0:d9:5e:0b:6d:13:45:ee:47:d6:19:94:d5:63:72:
4a:04:a0:3e:5e:47:f0:aa:02:dc:86:5d:68:23:74:39:f8:5e:
d2:ec:ad:7e:05:c9:b8:95:ea:d6:f3:67:83:ca:c8:ca:28:2a:
ee:1b:ff:33:66:79:07:91:99:71:41:d9:5e:a6:c9:57:e8:0d:
2f:0c:5d:0a:04:18:e5:56:29:64:6f:c4:0c:35:c4:c9:8f:e3:
4c:32:34:1e:91:97:a2:e5:83:2a:73:0e:6b:e7:d6:4a:7b:05:
14:11:f0:fc:c3:8d:44:34:d9:b6:b3:f8:74:7b:95:04:62:87:
be:07:c5:92:cf:ef:10:e5:1f:98:e5:d0:52:d4:d8:0b:6e:3c:
14:af:10:6f:d9:d7:27:6b:65:d4:85:2e:3a:8a:f5:28:17:2f:
8e:02:08:05:ba:f4:64:d5:7b:03:39:d1:3c:74:a6:26:4b:5d:
8a:04:92:a6:b6:2e:75:61:7e:d4:6a:59:37:7c:a4:8b:d3:33:
cb:e2:e0:9f:9a:76:e8:87:7d:a0:73:da:7e:c5:f0:3f:ca:f4:
70:4a:ec:21:69:c7:37:b5:28:ad:20:74:37:e1:4f:86:00:19:
0e:1e:bc:46:5d:0d:8d:ea:cb:4c:26:5b:e8:f1:16:eb:14:7c:
55:9a:33:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:17 2025 by rpki-client