Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
File: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft (raw, json)
Hash identifier: JaI3Rfjr8TvHysoKKOrAyub1/mXh/J4A7kK9UxoKjbU=
Subject key identifier: A0:E7:54:62:47:61:31:03:1D:9F:E8:E0:38:48:4E:E3:7F:54:86:5C
Authority key identifier: 22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
Certificate issuer: /CN=2213007596493802fb93a326731fd3329eae2dac
Certificate serial: 0197B6A05DED6EDE2CE0939E25BACD68FAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:00:52 +0000
Manifest this update: Sat 28 Jun 2025 13:00:52 +0000
Manifest next update: Sun 29 Jun 2025 13:00:52 +0000
Files and hashes: 1: DjsbeUScAR9EUfRE070QFYOZXx0.roa (hash: Jj0CL6iZxJ5XW4ZpctnqFGBbj6Ygbs9fspzlTAigxwY=)
2: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl (hash: 324c+dAut1NeChnMDSrAdWZgzDeCM4C5m5iK5xJoV40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5d:ed:6e:de:2c:e0:93:9e:25:ba:cd:68:fa:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2213007596493802fb93a326731fd3329eae2dac
Validity
Not Before: Jun 28 13:00:52 2025 GMT
Not After : Jun 29 13:00:52 2025 GMT
Subject: CN=a0e75462476131031d9fe8e038484ee37f54865c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:47:3b:15:99:09:01:b3:cb:55:82:59:44:41:
c7:89:1f:2e:28:17:d2:2c:00:4f:85:23:53:ea:62:
52:c9:85:d8:d5:78:a9:f9:dd:02:7e:5c:38:76:03:
57:70:ed:2e:93:96:47:58:04:e9:7d:13:e8:9c:17:
8e:3e:67:5a:b7:fb:99:71:ff:f6:7a:94:82:8c:80:
10:7a:77:ca:f1:1e:2b:b2:c8:97:74:9a:f9:23:1d:
ed:78:99:fc:47:37:36:20:38:6a:2a:91:bf:ee:61:
4b:1c:34:8c:32:28:49:4a:50:68:1a:a8:51:68:17:
0b:7d:30:62:0e:d3:e3:1a:44:39:dd:f3:9a:25:c2:
aa:74:bf:c4:41:96:b3:78:dc:e3:3d:aa:e7:4a:a3:
5a:48:0a:ec:82:18:58:6e:93:30:e5:6f:06:04:7b:
47:8e:4f:c0:94:4b:17:ce:16:f1:35:23:86:7b:c7:
71:66:1e:4e:64:3a:ac:d8:99:53:7a:41:b6:16:01:
d8:2b:b7:3f:58:af:00:ca:4b:56:5f:84:4b:60:1a:
8f:f3:00:f4:b3:75:c8:f3:10:13:c1:0f:d8:eb:81:
5f:1e:8e:8c:be:58:49:2b:84:f3:0c:cc:f1:4d:d7:
2c:50:81:19:f7:1f:c7:2f:2f:e3:c7:23:33:ae:c5:
0c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E7:54:62:47:61:31:03:1D:9F:E8:E0:38:48:4E:E3:7F:54:86:5C
X509v3 Authority Key Identifier:
keyid:22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d6:fe:f8:68:ad:d4:88:ed:6c:8a:c3:f1:59:a9:12:8d:48:
8c:f8:75:8c:eb:e6:da:29:fa:7c:78:36:f8:46:35:97:96:3f:
2f:3b:d3:3e:8b:88:0a:e5:f6:b4:59:e3:04:45:6f:23:7d:9d:
10:67:b2:f7:db:db:61:c6:0f:c9:84:c6:9b:43:06:c2:9f:46:
e4:81:23:22:03:80:47:6c:3b:10:5a:b5:d9:b8:f4:8e:5f:41:
6e:90:e8:7a:03:b8:41:45:66:1a:37:56:bf:5b:b6:0f:12:2c:
66:1d:ce:45:08:9a:83:f6:27:d0:bb:2c:10:8b:06:32:5a:ac:
95:5a:73:c6:5e:f1:07:e6:5e:25:ce:84:e4:5b:c4:53:23:a9:
fc:89:92:b3:22:61:38:e8:cc:bb:f9:ff:b3:d9:e2:31:9d:f1:
bc:cb:e6:98:b1:c6:8f:f7:02:34:cf:59:d3:fe:11:94:d0:72:
4b:2b:3e:9d:60:69:e9:fd:7e:3a:31:2b:5f:90:1e:cf:b0:6b:
af:25:68:7a:97:6b:73:7c:d7:c9:1c:78:2e:eb:20:9a:68:8b:
07:2e:cf:42:1e:bd:c2:d7:d2:12:03:b0:69:5a:8e:3d:52:b2:
07:44:39:03:5d:e3:64:d8:6f:dc:82:cc:01:c9:30:71:f4:2e:
bf:82:37:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:08 2025 by rpki-client