Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File: IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier: tBxTctA9khlY3XKHjWbhIKEfo2o6oELAyVlpruAVgL0=
Subject key identifier: F1:31:F4:E5:5C:17:C8:33:4B:9E:1C:20:7A:BC:BF:42:A5:AF:D5:40
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial: 0197B7EA42109F068F520060CC9627A140DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 19:01:12 +0000
Manifest this update: Sat 28 Jun 2025 19:01:12 +0000
Manifest next update: Sun 29 Jun 2025 19:01:12 +0000
Files and hashes: 1: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: Rez1lRooXxSb9O+twB5QUx47hQz7J9Y07vl0Etthk2U=)
2: MOp992QACjCU4CSR_4wEvEmDi9g.roa (hash: dTmvXI6qyvbgdeeHz07O4lgdS1FEoKVIkXmdx9O7lnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:42:10:9f:06:8f:52:00:60:cc:96:27:a1:40:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Validity
Not Before: Jun 28 19:01:12 2025 GMT
Not After : Jun 29 19:01:12 2025 GMT
Subject: CN=f131f4e55c17c8334b9e1c207abcbf42a5afd540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8c:35:b7:97:b8:20:b1:df:42:94:8e:04:47:
76:78:28:7a:4f:c8:96:bb:06:d6:64:54:21:19:ca:
57:6b:a4:1e:8e:36:e5:d5:e2:a6:62:28:40:d6:64:
de:57:eb:e3:06:e5:0a:4e:e9:88:cf:46:71:49:15:
5c:6e:c8:4f:f1:1d:d8:54:9b:65:b4:ec:fb:f3:26:
c7:96:5a:32:76:ef:4a:34:2a:a9:43:22:ee:63:8b:
01:10:62:ae:6a:fe:95:bf:8e:7d:b2:d6:ff:72:b2:
b6:9d:cf:68:43:e2:f3:15:e7:3c:67:e3:50:3d:b2:
fb:6e:d5:6b:34:2d:a6:c7:aa:42:bc:a4:73:3a:d8:
5e:fa:4f:80:37:21:1c:82:da:99:d2:7f:82:f1:e2:
4d:99:be:ab:8b:02:64:93:ce:ca:f0:ab:60:45:de:
25:d5:6c:e6:b6:e8:ae:5f:c8:30:e3:3b:ee:a1:96:
01:43:84:3d:87:6d:6e:04:ce:fe:86:bb:81:b3:67:
7e:68:9b:83:e9:fb:62:29:9d:08:61:ff:4c:d2:40:
8d:3c:6a:73:1d:ab:89:6c:e0:95:58:ac:09:c8:ca:
a2:2a:f1:3f:04:db:fd:48:fc:af:62:2f:d8:e4:dc:
ce:dd:0a:0a:0f:f2:a4:61:ac:3b:9b:cd:08:72:5c:
67:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:31:F4:E5:5C:17:C8:33:4B:9E:1C:20:7A:BC:BF:42:A5:AF:D5:40
X509v3 Authority Key Identifier:
keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:91:62:7f:9b:e8:b3:3e:f0:07:1f:ba:23:21:7c:e8:df:8c:
21:6c:c2:59:41:90:f5:f9:c1:2d:3e:74:c6:11:d5:cd:f6:54:
19:e7:ce:6f:1c:8e:d0:37:8a:58:48:b1:87:89:cd:3a:a3:57:
80:1b:e8:ab:e3:54:f9:36:83:58:3a:cd:dd:2f:97:31:72:8e:
55:1d:83:1a:60:98:e1:d1:65:a0:fc:33:ec:be:98:d1:1a:cc:
31:32:96:18:a7:70:c1:0d:ad:f5:88:59:8c:94:f1:08:f4:9c:
c6:b3:c3:5c:fe:bb:ad:ef:57:2b:11:69:0f:57:56:22:77:31:
33:33:21:7b:2e:a5:2d:fd:85:a7:31:69:0d:96:64:94:50:9f:
70:b7:c4:40:b9:81:82:a4:49:bd:00:db:71:eb:c4:73:13:89:
37:b0:fb:68:71:e0:78:a4:ff:ca:d6:95:11:2a:41:17:ed:5f:
a4:03:bd:ae:dc:30:c7:7d:fa:35:51:a4:42:85:c5:00:21:55:
3a:0e:b3:33:0a:0c:a2:45:64:29:66:fc:cf:91:7f:0f:47:aa:
24:cb:4b:d0:b2:c3:c5:61:0b:df:4a:aa:a7:a3:ae:22:a0:34:
26:0d:de:13:fa:14:74:9f:fc:27:19:db:2f:6c:f7:0b:80:54:
d2:d6:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:59:51 2025 by rpki-client