Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
File: ip_Szd9LRN55pb_Iyhmlb1UutOg.mft (raw, json)
Hash identifier: dW9DLc0T+vSAoTuLW+0jUWZ/UsU9Y5FlKJhyqfx/Y+c=
Subject key identifier: 93:6C:8A:F3:43:51:54:3F:13:52:E6:ED:C7:2C:F1:A3:E5:3D:B8:9C
Authority key identifier: 8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
Certificate issuer: /CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Certificate serial: 019752A21ADF3D82C8A73B9CC3FEEBC0D28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
Manifest number: 021C
Signing time: Mon 09 Jun 2025 03:00:44 +0000
Manifest this update: Mon 09 Jun 2025 03:00:44 +0000
Manifest next update: Tue 10 Jun 2025 03:00:44 +0000
Files and hashes: 1: EjHQSd2Nf6QUdVOjBa5Ak5N3IUs.roa (hash: 9F79YDrAyrZr3jGxVCvlmn8UnHKM3CvRjuESh5xZJzI=)
2: ip_Szd9LRN55pb_Iyhmlb1UutOg.crl (hash: 7HHfp5gHrDb1zs83c5jUtyszH1QoUXZ9vFF2b9nNrcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:1a:df:3d:82:c8:a7:3b:9c:c3:fe:eb:c0:d2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Validity
Not Before: Jun 9 03:00:44 2025 GMT
Not After : Jun 10 03:00:44 2025 GMT
Subject: CN=936c8af34351543f1352e6edc72cf1a3e53db89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b5:27:13:dc:91:26:ca:30:39:1f:09:cf:f6:
ec:59:0a:4a:98:c5:38:f3:d6:93:fd:bd:80:4a:64:
c5:63:1b:1f:92:4d:d3:6b:ae:48:49:49:f3:17:d8:
2e:a8:e7:88:15:c0:ce:63:9d:dd:f9:80:fe:2e:7d:
e2:2c:f0:42:45:20:22:15:ae:95:9a:5d:4c:6f:ec:
5d:86:5c:ad:c6:65:5c:71:07:96:7c:e3:4e:95:f7:
e3:45:6b:c7:5b:33:d4:5e:b4:0b:7d:9a:ea:88:12:
7a:7e:47:7b:30:01:9e:3e:3c:44:45:eb:b4:31:e9:
6c:63:0c:8f:db:8e:75:35:bf:d8:8b:8e:de:ae:a2:
b4:95:13:65:17:0d:75:89:66:b2:07:ca:8c:0b:fe:
b1:e2:62:53:c3:a1:cc:49:11:6c:b9:b0:86:c5:7a:
94:09:7b:0b:1b:cc:89:01:f8:4a:06:4d:87:12:c0:
1e:f6:7e:be:e6:4f:80:e6:85:6b:0b:87:87:38:4f:
e5:36:a1:61:50:af:b4:1f:cb:59:1c:73:cf:6e:c8:
1f:f1:dd:cc:84:38:71:ca:d4:79:08:6c:be:04:66:
a8:68:a6:0b:28:a1:2e:5b:35:95:65:c6:40:f8:a1:
3d:6a:4e:ed:d9:28:bd:8b:73:ec:12:a9:4e:e4:4a:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6C:8A:F3:43:51:54:3F:13:52:E6:ED:C7:2C:F1:A3:E5:3D:B8:9C
X509v3 Authority Key Identifier:
keyid:8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:75:c9:5a:4c:10:f6:9f:f4:2e:b1:e0:2f:b9:f6:1c:36:d7:
b5:d6:ae:f4:ab:72:b9:62:48:64:09:06:fc:83:32:30:8f:a6:
36:05:25:3d:1b:c9:ae:9d:e0:82:8c:21:cd:98:7d:c6:3b:1b:
f8:3a:de:d3:d7:18:01:63:00:0a:6f:db:27:48:89:e6:9c:8f:
d1:b8:21:8a:e5:9d:c7:aa:7d:6e:0f:3e:75:c3:b1:69:01:2e:
b4:4e:66:43:13:90:a2:8e:13:1b:ec:b4:cd:95:45:8c:7a:d9:
c2:4d:ff:04:62:8b:f3:5c:f4:a8:dd:af:35:8e:4c:72:7c:e9:
cc:97:0f:19:d5:33:23:c0:a8:4d:78:d4:7f:00:d3:50:8c:2d:
95:ba:9b:42:e0:53:a7:ed:15:00:71:14:00:11:fb:5b:7a:8e:
75:4b:2f:8d:b9:2b:f6:f7:3e:17:d0:5b:b0:1e:33:ea:79:3f:
11:1d:91:14:ee:98:bc:d3:81:e0:0f:23:89:4d:ac:92:fd:f1:
27:fb:2b:c9:ff:93:5b:fb:43:d2:d0:4e:34:eb:4c:97:e2:63:
8c:1d:44:e8:58:98:7b:7a:30:e6:79:df:ad:d6:b9:56:ad:6c:
51:73:40:3b:ec:3e:93:d3:57:44:fb:66:8a:7f:b4:07:5b:0d:
e9:e3:e3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:19:47 2025 by rpki-client