Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
File: IJPjg7LMUtXsow_rEml1k8nHiKA.mft (raw, json)
Hash identifier: d4upB+aqOxy9V8CsjvYryED+qfXr2lNofEDn/LOafX0=
Subject key identifier: F0:94:BB:C8:FB:5C:9E:ED:A4:77:11:08:DD:97:CD:CD:0F:95:31:A0
Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
Certificate issuer: /CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Certificate serial: 0197B70EC68B26E6232D0C6245737C76A4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:28 +0000
Manifest this update: Sat 28 Jun 2025 15:01:28 +0000
Manifest next update: Sun 29 Jun 2025 15:01:28 +0000
Files and hashes: 1: IFpZrxJhl8wQt7Uq0qRwzYFnZJk.roa (hash: eoMtlnp1ZLGeorMDixEuqh0nobwLwy70mhjbtsKxD5o=)
2: IJPjg7LMUtXsow_rEml1k8nHiKA.crl (hash: CiuNSB1kSUKgAxOmI4kOX27FAOJoY7Xarp6+NB2X8pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c6:8b:26:e6:23:2d:0c:62:45:73:7c:76:a4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Validity
Not Before: Jun 28 15:01:28 2025 GMT
Not After : Jun 29 15:01:28 2025 GMT
Subject: CN=f094bbc8fb5c9eeda4771108dd97cdcd0f9531a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:5e:f6:6a:4c:4d:93:61:f6:c4:73:63:67:
98:80:a3:7e:b6:ad:a8:c0:c3:81:f4:8b:91:57:08:
1d:08:e8:a7:2c:41:42:74:bb:5f:05:b1:4d:9d:b9:
d4:81:0a:3d:85:84:12:d1:50:9b:59:8c:d0:dc:64:
3a:3a:c2:71:58:a0:29:30:15:81:51:fc:48:3d:d0:
5e:4e:bd:ba:5d:55:c3:e9:0c:bd:1d:28:b7:71:b2:
f8:85:91:0c:9d:22:f4:f9:16:80:e3:b6:4d:83:27:
13:45:b2:be:54:5a:09:ba:69:79:e0:be:2b:53:9f:
96:d4:16:2f:2f:06:17:05:4a:52:c6:27:2d:1d:fb:
65:7b:2b:5d:17:8f:a9:22:30:c0:7c:be:4b:62:62:
c7:2e:73:53:77:5a:74:a1:a5:78:fe:cc:68:60:4a:
f2:7c:c1:8a:26:ed:23:cb:ec:be:2e:e8:b9:71:8a:
1c:4e:71:f7:5d:65:94:62:be:88:ed:61:30:2e:0e:
ba:4e:6e:bc:2e:d2:f6:61:2b:5d:ee:12:91:64:95:
2f:36:88:c8:13:89:b4:86:ad:a9:5e:bd:16:8d:34:
8c:06:40:2b:05:b2:39:77:bd:a2:ac:31:8c:d0:7e:
0d:f1:66:d6:f5:9a:77:5b:f6:51:8f:ce:08:77:5d:
4d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:94:BB:C8:FB:5C:9E:ED:A4:77:11:08:DD:97:CD:CD:0F:95:31:A0
X509v3 Authority Key Identifier:
keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:99:6d:22:99:06:74:13:99:ef:a2:ab:e9:04:32:f3:86:50:
2f:22:d1:e9:ef:78:93:54:e3:d4:19:f6:05:22:ac:87:12:57:
0d:4f:26:01:0a:21:71:11:33:17:1a:7c:c1:6e:aa:12:ac:c7:
0d:11:6f:b2:5f:bc:12:94:66:9f:c2:85:22:64:69:ea:26:d1:
c1:7a:41:35:4a:63:16:30:c4:c0:87:4f:6b:f5:bc:4c:e0:e4:
78:5e:67:bf:ab:59:be:d0:75:0c:ae:b6:e7:f3:f3:2c:02:32:
82:b4:8a:98:c3:74:07:97:8f:c3:aa:7c:c2:9a:9d:4d:8e:09:
a9:60:5e:a1:a6:28:10:62:dd:30:d6:51:c9:b5:35:df:72:5d:
ec:96:a2:78:09:9e:af:36:c3:66:a7:06:13:12:c8:ce:ce:f5:
1a:ec:7c:5c:d8:84:c1:fc:5f:41:d5:4e:0a:e2:a9:82:b9:25:
2d:e7:1e:36:99:7b:fd:34:2a:9f:5d:2c:d5:6e:17:e8:3f:c2:
a2:9a:c1:92:21:06:64:b3:18:a6:e5:c9:69:a6:d6:0b:1f:ae:
df:6a:66:77:c1:4a:f1:28:4b:73:01:e4:49:f6:db:c8:bc:2f:
fd:f4:8a:0b:c8:d7:ba:f5:36:d0:07:9b:d6:e2:c9:0a:b3:54:
95:10:b6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:17 2025 by rpki-client