Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
File: ip_Szd9LRN55pb_Iyhmlb1UutOg.mft (raw, json)
Hash identifier: dk3JL60vfCbyZfXfxxc87CY7rHzrhliSYq7U326+abs=
Subject key identifier: 22:AE:53:9D:3D:42:04:B0:A6:E8:F5:A4:0B:36:65:D9:A8:32:72:A4
Authority key identifier: 8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
Certificate issuer: /CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Certificate serial: 01975E387480F3D542F054FD3E6F26CB1CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
Manifest number: 0222
Signing time: Wed 11 Jun 2025 09:00:47 +0000
Manifest this update: Wed 11 Jun 2025 09:00:47 +0000
Manifest next update: Thu 12 Jun 2025 09:00:47 +0000
Files and hashes: 1: EjHQSd2Nf6QUdVOjBa5Ak5N3IUs.roa (hash: 9F79YDrAyrZr3jGxVCvlmn8UnHKM3CvRjuESh5xZJzI=)
2: ip_Szd9LRN55pb_Iyhmlb1UutOg.crl (hash: Pf8IeMrFoSYOPQyM6E+uv1GguXyh2aFaRridiWK/2Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:74:80:f3:d5:42:f0:54:fd:3e:6f:26:cb:1c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Validity
Not Before: Jun 11 09:00:47 2025 GMT
Not After : Jun 12 09:00:47 2025 GMT
Subject: CN=22ae539d3d4204b0a6e8f5a40b3665d9a83272a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:ee:b4:18:b7:e7:95:0b:5b:40:90:77:0d:
ef:ad:e1:b8:33:9a:20:cd:26:44:b0:5e:07:79:55:
a0:ea:4a:d8:41:47:01:71:25:1b:2f:c6:d0:c4:1e:
9d:6a:c1:a9:d6:8d:7a:9d:2a:59:25:76:d2:af:65:
a4:da:87:52:90:0f:b4:47:f5:42:07:26:fc:19:66:
6e:69:52:a3:84:e3:c6:de:06:42:ab:e4:2c:a8:fa:
be:0e:c7:52:5e:2e:13:0d:1a:24:31:91:eb:b0:fd:
84:77:55:9c:f1:df:30:d1:08:d2:8a:84:4a:47:0f:
88:f7:bd:07:84:7d:2d:11:61:ba:02:60:63:64:24:
ea:56:50:46:34:10:b4:41:56:f3:72:77:5f:00:44:
80:ae:b8:2e:3b:48:ac:44:64:db:70:3a:17:90:c7:
fc:aa:fd:b4:e0:50:e2:69:6d:ee:64:61:4d:63:ca:
db:91:da:4c:15:f3:0a:81:0c:d3:89:2b:34:ab:a0:
0c:27:bd:1b:8b:3d:f9:b5:77:67:2a:bb:de:19:6d:
de:80:3d:1c:0c:78:05:19:29:f8:24:d3:0a:47:9b:
0a:b2:9a:ec:fb:86:df:9c:81:ae:63:25:ae:56:e2:
39:3c:61:6f:d3:67:9f:68:d7:a8:b6:b4:67:ca:37:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AE:53:9D:3D:42:04:B0:A6:E8:F5:A4:0B:36:65:D9:A8:32:72:A4
X509v3 Authority Key Identifier:
keyid:8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6c:6c:5f:76:c2:32:f1:b0:28:dd:43:9c:21:49:f6:7a:d5:
32:2b:21:a1:ff:e5:7d:b4:3f:ca:40:b1:1e:a0:df:8d:0f:5e:
a7:3c:4d:21:0c:54:54:63:49:11:46:ea:0a:58:83:a2:b6:0e:
f6:7e:42:6f:fc:ad:bc:58:31:67:39:3c:fa:ab:58:04:41:bb:
b6:df:d1:73:b1:75:6d:c8:be:6c:ea:cd:35:58:0b:5a:75:71:
f3:c7:6c:b4:c1:cc:d2:aa:a7:92:f2:30:a0:83:2b:30:de:66:
2c:eb:7d:dd:fa:91:43:71:07:d4:2a:2e:42:ac:c9:c7:88:6a:
7a:9f:70:11:5d:99:b7:50:63:29:58:e3:fc:00:b3:ed:25:63:
5c:63:02:1c:78:36:eb:0b:bd:10:40:79:23:b0:ad:39:81:7b:
8f:39:b5:c4:c8:b3:1d:92:71:44:23:4b:af:2b:a9:07:30:bd:
2c:8d:e3:c4:5f:c7:b5:07:ce:f1:a0:98:a0:7d:38:e2:ec:c6:
16:d2:78:fe:2f:b3:4d:f9:ad:50:e6:2d:8d:fe:c3:1a:13:80:
b6:fa:ff:a4:45:58:e1:9a:ff:ed:48:54:c2:81:79:59:e4:62:
6d:ac:74:b3:0a:50:1b:a8:53:98:4f:3d:e5:ec:68:fa:d3:62:
00:c8:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:24:24 2025 by rpki-client