Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
File: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft (raw, json)
Hash identifier: 5mM618wNvYg74uTi8AiHGvdaqcC5515qm4id7cz+wYU=
Subject key identifier: B3:CC:CA:AD:33:B1:2E:05:A7:04:FC:DB:95:B2:F9:F0:37:3C:D5:55
Authority key identifier: 21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
Certificate issuer: /CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Certificate serial: 0197B77C618B381E40DE0C58E081FAAD480F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:01:11 +0000
Manifest this update: Sat 28 Jun 2025 17:01:11 +0000
Manifest next update: Sun 29 Jun 2025 17:01:11 +0000
Files and hashes: 1: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl (hash: 79tJyII4FZWeP+qiZXui9FAkgLDd9AmRxEhvVXaaimI=)
2: ZUnY6DcgMFOkn5YPuY63h16XVew.roa (hash: j75VTgwm6ax4o8jG9UYWYEtlaoF5sYfNI7iKEcRNxJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:61:8b:38:1e:40:de:0c:58:e0:81:fa:ad:48:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Validity
Not Before: Jun 28 17:01:11 2025 GMT
Not After : Jun 29 17:01:11 2025 GMT
Subject: CN=b3cccaad33b12e05a704fcdb95b2f9f0373cd555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:48:7a:cc:35:d0:78:46:86:74:43:b8:b9:
26:2d:74:1d:da:bf:b4:23:f5:74:67:6f:b5:ee:6f:
91:45:bc:ee:5b:2e:7f:45:24:76:d3:fd:bb:79:60:
d7:b4:57:d1:2e:f0:9e:c6:4a:1e:4d:b0:cd:00:4b:
d5:c7:f4:7f:14:9b:85:ce:48:1f:b2:1c:cb:ae:78:
28:e9:83:f8:17:92:3e:f3:ab:b5:2e:ac:a2:93:eb:
4d:93:50:92:c8:6b:f1:1d:f8:68:97:21:3a:97:3b:
1a:84:0e:77:43:e7:51:8d:1b:df:19:04:eb:cf:73:
4e:5c:0d:e0:85:3a:99:00:9d:40:1b:41:7a:a6:46:
f5:4c:35:7c:98:3e:08:67:21:96:24:2c:c1:fa:57:
c9:18:72:46:e3:db:a0:d8:2f:01:df:ff:d8:85:10:
e5:eb:bb:77:2e:a6:92:5b:ae:df:0f:cc:32:d1:b2:
e4:a8:ba:9e:1b:6c:8d:a8:dc:37:30:bc:5e:10:35:
57:d4:eb:1e:96:31:45:11:cb:ab:dd:12:54:af:bb:
92:60:cb:a6:83:fa:58:b3:f6:d8:5e:04:45:53:7c:
92:72:48:11:62:d4:c1:f6:8f:36:87:aa:be:4c:b2:
5e:42:90:33:d8:7e:27:c5:3c:dc:d9:f6:6c:cd:fe:
03:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CC:CA:AD:33:B1:2E:05:A7:04:FC:DB:95:B2:F9:F0:37:3C:D5:55
X509v3 Authority Key Identifier:
keyid:21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8e:9e:0c:f9:d9:26:da:8b:e6:33:41:05:50:da:db:c7:ee:
22:f3:e1:44:c9:24:bc:4e:a7:ce:5c:cf:21:fb:b8:aa:5a:f6:
38:f9:4c:9f:e5:b2:b5:20:81:26:f7:9a:b9:ec:f3:d2:1b:a4:
dc:17:9c:79:23:31:41:74:d6:ad:e8:e5:19:61:29:e4:5c:11:
d3:48:33:2e:30:51:57:e2:fa:03:a9:3c:63:21:98:13:6c:11:
e3:89:f3:bf:49:9c:43:8d:f5:68:bc:30:d4:b5:ea:80:12:77:
de:28:b8:65:4c:c1:4d:38:ac:a0:6a:c7:f1:f3:d7:dd:7b:3c:
e6:c1:5e:2c:08:a0:4b:ea:3c:0d:ef:19:2d:e4:a6:35:ad:a7:
42:f6:17:72:1b:61:5e:6a:f7:2d:1e:bb:72:62:a2:d2:7d:73:
27:ff:82:80:c9:f3:51:1b:04:a8:69:af:8d:ad:8d:c5:a8:1d:
50:6f:02:8a:ef:e1:50:fd:27:24:d9:c2:ff:24:cb:25:9c:46:
73:e7:2f:cd:7f:6d:29:d8:6b:23:c4:f0:5a:42:5a:6c:7c:91:
db:69:ad:d0:61:2f:d8:45:82:f6:65:46:33:6a:06:01:d1:bd:
21:de:ac:4c:b6:78:14:3c:b7:b7:45:d1:8c:ab:fd:84:11:30:
0c:76:6f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:32 2025 by rpki-client