Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: nJfDAtn8qmh+p7fU+rKGREaB+gY8rDyDJDK+qkX6ios=
Subject key identifier: E6:D5:6F:CD:9A:40:6B:6B:37:A8:85:FF:4D:10:7D:60:17:F3:77:B9
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 01975E38381F7E655AA8CC2D741CFE9A85AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 09:00:32 +0000
Manifest this update: Wed 11 Jun 2025 09:00:32 +0000
Manifest next update: Thu 12 Jun 2025 09:00:32 +0000
Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=)
2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: BE2I9RAmsh2/QmdKQXw6MvW2yCl4yCAN8yUixLTUsX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:38:1f:7e:65:5a:a8:cc:2d:74:1c:fe:9a:85:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Jun 11 09:00:32 2025 GMT
Not After : Jun 12 09:00:32 2025 GMT
Subject: CN=e6d56fcd9a406b6b37a885ff4d107d6017f377b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1a:a0:a7:fb:ab:d2:c0:40:d0:21:d4:d2:f3:
a4:60:9f:be:f4:a1:50:1f:f6:18:93:bf:3a:1c:62:
49:33:92:bf:db:8c:9b:bc:5c:33:04:4f:0f:ca:8c:
bd:f7:2e:02:03:0d:44:1b:43:a6:47:ea:0a:2c:64:
17:72:04:02:aa:1c:85:37:b6:68:66:da:58:45:c4:
fa:68:a6:b5:2a:7f:16:25:a9:d6:c0:c2:7c:ed:e5:
ad:19:2a:56:c2:4a:f3:e8:46:45:70:11:b2:ac:e4:
d6:29:b6:23:96:a5:0c:0c:d2:b0:30:46:e3:70:e3:
4c:34:f8:60:16:c7:4b:c6:30:9a:ba:13:3f:01:a2:
25:16:5a:5b:2c:df:44:d1:97:37:ec:3a:6c:8c:a1:
da:53:a9:63:04:cf:01:bd:8b:73:44:11:e3:40:6c:
31:98:59:45:6a:ea:12:ba:99:82:95:d8:b9:3e:54:
c7:2b:a0:cc:7d:1d:0f:26:d1:4a:8c:13:02:cb:af:
df:16:77:49:01:d2:11:a5:0e:1b:8e:a5:de:ee:0d:
90:4d:a6:93:c0:e3:14:cd:dc:92:84:36:5f:3d:ee:
6f:e2:24:dd:97:51:98:91:67:92:db:ee:e0:d4:0c:
5e:94:de:79:d3:93:dc:26:b6:90:f6:28:33:33:a6:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D5:6F:CD:9A:40:6B:6B:37:A8:85:FF:4D:10:7D:60:17:F3:77:B9
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:da:cf:bf:ef:07:87:f4:3b:bd:f9:14:a9:a5:40:65:09:4d:
01:f7:f3:ee:d2:1e:2d:a5:63:c0:d5:80:fe:1e:0f:be:95:8b:
9c:28:ff:d9:e7:53:20:01:bd:4b:2b:0d:8f:31:76:8e:49:c4:
10:74:c7:5e:a7:11:e6:a8:02:d7:b3:31:c6:35:72:41:df:cd:
36:28:35:41:6a:82:51:0e:22:ab:af:53:07:39:20:54:44:a4:
6d:5d:38:2d:74:51:71:a6:1a:12:8e:c6:42:61:95:9f:ec:f7:
a7:19:67:1d:e8:0d:41:23:56:8f:09:39:3c:a9:91:f3:6a:dc:
34:5d:7c:61:b5:81:bd:6e:c7:13:14:1c:1e:7a:58:95:13:c0:
d3:83:9f:c0:1f:6e:93:ff:7c:f0:ec:9c:28:4b:8d:f6:54:1b:
97:00:16:ea:92:f6:92:1b:c0:f6:46:9d:87:c0:74:d3:f4:89:
a7:3d:b4:8b:56:89:23:29:f0:d0:da:9d:8e:39:4e:a7:3a:af:
ac:b9:b2:31:d3:b2:27:5b:24:e7:85:11:8d:2e:78:dd:6e:aa:
e6:20:f3:fe:ed:7f:f6:c6:e6:be:97:69:af:c4:38:48:18:e9:
01:9b:4f:34:12:7f:f0:43:86:f7:7c:ed:41:d0:92:13:16:b4:
4b:a4:0b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:02:54 2025 by rpki-client