Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json)
Hash identifier: PN9OUnpR6pqb7f5cHB6QeReA6CwNnkHTOEdTAOBNltw=
Subject key identifier: 4F:31:22:22:F0:B4:DF:5D:9B:CE:39:50:1F:5F:5B:9E:A1:93:D3:97
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial: 0197C312FA506F6ED8068852A0530D2BC577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
Manifest number: 15BB
Signing time: Mon 30 Jun 2025 23:01:30 +0000
Manifest this update: Mon 30 Jun 2025 23:01:30 +0000
Manifest next update: Tue 01 Jul 2025 23:01:30 +0000
Files and hashes: 1: 8InkRh5Wj50wupapEt3xMMDv2FM.roa (hash: FzSOMTztxVGNTuOuFeKpaH88eAgODwYDPG7DI36h4Cg=)
2: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: wBi1rTH/joEBWYjdNXN/abSZmTJMfYB9IUP01kcx1/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:12:fa:50:6f:6e:d8:06:88:52:a0:53:0d:2b:c5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
Validity
Not Before: Jun 30 23:01:30 2025 GMT
Not After : Jul 1 23:01:30 2025 GMT
Subject: CN=4f312222f0b4df5d9bce39501f5f5b9ea193d397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:54:80:07:68:27:a9:4e:c1:31:3a:04:d5:03:
d0:06:e3:9b:7a:8b:eb:fc:a4:b1:65:a9:19:ac:ee:
ab:a9:26:77:52:f5:7c:d0:c9:ad:f0:11:81:83:ed:
ac:d2:f3:e9:9b:f9:db:a3:ef:6a:03:f3:21:63:23:
0e:e1:0d:06:77:8d:7b:41:ab:e5:6e:29:17:6d:cd:
c1:18:f3:e1:8e:49:01:ff:ba:63:f0:60:b6:b2:92:
61:66:96:c8:39:ba:d7:a3:81:7a:f4:9b:b6:06:b1:
bc:e5:43:4a:38:a6:5c:46:46:2f:c0:da:e5:5b:dc:
2d:e6:88:a9:62:0b:d8:c8:ee:c5:e6:77:63:8a:09:
b7:f7:39:77:61:ec:4e:ab:b7:a3:4a:4b:d7:47:0a:
02:cf:fc:25:db:4f:69:ca:7e:08:95:c4:67:94:a5:
92:dd:f3:92:47:bd:7b:38:ab:05:8c:0f:79:76:82:
95:af:a8:23:aa:94:8b:dd:c8:61:89:e2:a9:e9:88:
00:b4:22:27:3c:f6:3f:74:57:cc:a1:74:b7:eb:84:
a0:06:cf:8d:8d:cb:2c:20:d4:1e:e8:38:52:5c:13:
61:1d:92:6b:9c:88:4e:d7:7b:77:1b:cd:1a:9f:61:
5b:91:b6:8f:ed:7a:26:d3:2a:60:86:40:f9:fe:93:
89:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:31:22:22:F0:B4:DF:5D:9B:CE:39:50:1F:5F:5B:9E:A1:93:D3:97
X509v3 Authority Key Identifier:
keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a6:7a:4f:dc:5d:7c:82:1f:1f:60:69:fc:51:88:d9:4e:86:
fa:b8:15:00:5d:00:cb:ed:3c:b3:33:13:52:c3:39:f9:f2:18:
db:7b:cf:9b:4c:e6:f3:81:a0:83:97:b4:a7:38:cd:50:93:05:
ec:b8:e8:95:94:86:8c:e1:52:cc:2c:88:2e:c1:03:f1:ef:88:
0f:6e:df:d9:9d:ea:74:d7:00:9d:97:32:ae:7b:c3:45:46:6d:
0a:5d:8e:05:4b:e1:eb:97:db:2b:e5:a7:13:ca:df:6c:a1:cd:
3a:94:cd:f4:22:75:1d:b8:f8:83:df:31:2a:d6:09:7e:05:17:
e4:0c:27:82:f4:64:5b:a0:68:b9:24:c5:f0:de:63:20:a7:30:
e3:fa:a4:50:c0:05:9a:a2:21:da:3b:8d:eb:ba:15:2d:fa:f7:
f9:6d:2b:3c:ce:d9:19:b2:49:10:32:b1:32:6e:bd:64:5b:9f:
ca:a7:f6:85:9e:63:12:dd:d0:77:96:76:cc:f6:d3:16:e2:1e:
d3:45:10:04:2d:a3:e7:cc:8b:f6:b7:8e:6a:04:60:84:89:de:
fb:36:8a:24:8c:6c:be:84:5d:13:5f:dc:26:89:a2:d4:42:c6:
92:1d:32:cf:99:17:fb:de:9f:82:fd:cd:26:0d:d9:fd:c8:53:
1e:3c:db:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:04:08 2025 by rpki-client