Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
File: IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft (raw, json)
Hash identifier: YlUAS5P5hSYrqsQ9ytlTS4I9FMHFE6ANMDmhBER41Jg=
Subject key identifier: B3:8F:D8:C5:BD:78:32:68:C9:80:99:95:76:13:57:EA:EE:BD:83:7E
Authority key identifier: 22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
Certificate issuer: /CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Certificate serial: 0197B6A0DFB9014CDCFE9B23125D4137F97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
Manifest number: 0C31
Signing time: Sat 28 Jun 2025 13:01:25 +0000
Manifest this update: Sat 28 Jun 2025 13:01:25 +0000
Manifest next update: Sun 29 Jun 2025 13:01:25 +0000
Files and hashes: 1: IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl (hash: 3+V8qtUCyyxGGYHTWnqBZKoPmcKy8Ar9jOylBYTCe3Y=)
2: gJhF5evxe8g-iDe3hBXACq-nKPk.roa (hash: qM5+n5uw27ndltKhnl7N0lO0fW10CmbET7TyhvcxHok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:df:b9:01:4c:dc:fe:9b:23:12:5d:41:37:f9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Validity
Not Before: Jun 28 13:01:25 2025 GMT
Not After : Jun 29 13:01:25 2025 GMT
Subject: CN=b38fd8c5bd783268c9809995761357eaeebd837e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:bf:8c:5c:44:1a:4d:37:0b:2b:33:e1:2d:
f2:23:fd:aa:c2:4b:2a:07:9c:34:9c:e3:4e:3a:19:
79:b0:7a:78:d2:5b:da:52:45:76:9b:53:94:26:f3:
d0:f2:d5:26:ff:5c:a7:d2:01:fc:8c:45:77:bb:58:
5a:0f:ca:a7:8f:20:f5:3e:46:c1:e7:4e:b5:8a:8d:
d2:b8:ba:af:a8:16:ad:28:d1:4c:2d:50:d6:45:bb:
06:84:91:4e:f5:81:76:95:af:0e:b4:b7:a4:0b:b4:
47:e6:0a:f5:39:72:13:29:07:ad:b4:3b:83:66:7c:
69:85:e7:12:56:74:20:28:70:8d:bd:77:38:8c:79:
1b:59:1c:be:6a:0f:c2:26:ca:38:24:5d:c5:59:cc:
9b:78:58:5b:5e:ac:d1:6a:02:94:58:2d:75:0e:d9:
f8:fc:b1:fb:52:d5:c4:df:f3:d6:fd:9a:b6:73:4c:
cb:d1:d6:a0:d6:75:d6:30:81:eb:b1:6b:a8:0e:bf:
93:86:18:92:48:94:e2:2a:01:a3:81:eb:d5:45:8c:
f6:bc:19:32:44:bb:a3:0e:b2:4f:ac:e9:d2:d0:63:
1d:45:7a:53:ea:ae:30:9a:98:45:88:f7:16:09:1a:
58:11:5a:ad:c8:73:7b:7c:b0:a3:a8:49:79:57:08:
88:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8F:D8:C5:BD:78:32:68:C9:80:99:95:76:13:57:EA:EE:BD:83:7E
X509v3 Authority Key Identifier:
keyid:22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3f:29:53:04:28:ce:5b:b6:57:78:df:49:a6:91:e6:ea:50:
98:2d:01:fb:24:76:48:2d:7c:10:9e:60:69:b9:b7:54:f3:21:
ac:b4:cc:af:f5:e6:2b:ee:a3:28:77:ee:16:e4:ac:0c:20:d5:
f4:20:ea:3e:79:ba:7c:76:a3:d8:b3:c9:e8:94:5f:89:a0:b5:
0d:5b:6f:0a:79:3c:a3:9b:7a:b2:cd:0a:89:76:19:34:3a:d0:
79:31:d1:94:4d:6e:7f:4f:a8:34:c2:65:bd:4d:e5:46:2d:71:
42:3a:d6:da:b8:9e:1d:1f:61:2c:09:85:00:5b:d1:52:f8:5f:
70:ab:45:b5:3e:2f:5d:ee:04:8d:4d:ee:5d:72:93:fb:11:85:
ec:c4:06:70:08:6a:c6:9b:39:82:1e:fe:a8:41:36:d9:88:38:
e7:81:7c:f0:f7:f2:fa:b1:bf:04:56:e9:cc:74:3f:0d:44:04:
10:9c:67:60:f8:be:27:fb:72:06:61:9c:c1:55:e8:dc:b2:db:
6b:95:46:ad:06:13:81:b9:76:df:76:99:75:51:2e:24:cf:22:
91:bf:fd:17:35:96:17:d6:f3:63:5f:a3:9f:e4:7e:77:a0:87:
c6:d8:09:30:a6:4c:ec:95:33:d8:51:02:22:7e:b9:16:da:2e:
f2:48:9a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:51 2025 by rpki-client