Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
File: I0tEmJRYnRb2dr_ygqvtqlbMe40.mft (raw, json)
Hash identifier: br9fSkMCf8NgVJe3w16vlCdm+a8ZcaqGhHFNR4xGScM=
Subject key identifier: AE:1D:24:20:64:75:7E:D3:9D:90:F1:A6:A3:F3:A0:74:50:F9:13:4B
Authority key identifier: 23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
Certificate issuer: /CN=234b449894589d16f676bff282abedaa56cc7b8d
Certificate serial: 01974CD6CBEAFB7821F208CDEA0AE1097170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
Manifest number: 05BA
Signing time: Sun 08 Jun 2025 00:00:34 +0000
Manifest this update: Sun 08 Jun 2025 00:00:34 +0000
Manifest next update: Mon 09 Jun 2025 00:00:34 +0000
Files and hashes: 1: EBtcNhOJ92IGPVl-KdrFygnNVn4.roa (hash: Ykla49kgLw0fjmlAc5cpzOXx1fYgIVxrEDqc3yCSjAA=)
2: I0tEmJRYnRb2dr_ygqvtqlbMe40.crl (hash: FOqpgyYzTD4NXqSbVRDflf6qXvh4Rr2JsMQbUonD9a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:cb:ea:fb:78:21:f2:08:cd:ea:0a:e1:09:71:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b449894589d16f676bff282abedaa56cc7b8d
Validity
Not Before: Jun 8 00:00:34 2025 GMT
Not After : Jun 9 00:00:34 2025 GMT
Subject: CN=ae1d242064757ed39d90f1a6a3f3a07450f9134b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:05:68:3d:5a:e7:ca:4c:ed:89:23:8a:e3:
1b:36:0a:b8:81:e3:80:c0:77:29:da:06:88:07:08:
ef:37:8e:93:60:99:fb:b2:2f:e8:eb:c2:df:79:9f:
8f:95:28:a3:1f:6a:d8:32:a3:74:ad:d2:fe:38:36:
54:55:66:23:ca:e3:bb:0e:1d:8b:6b:a5:70:cd:88:
76:9d:e9:a4:9a:a9:a6:75:ea:28:69:2e:78:90:92:
92:5d:f0:67:06:6d:40:8b:cc:e8:85:f2:0b:83:a8:
08:05:b4:c2:51:0a:a7:ee:08:b0:4e:3d:25:13:4f:
db:b3:bc:a6:3f:bd:8b:8b:08:bb:f9:89:38:78:8b:
cc:76:da:94:9c:ee:5e:7a:0d:67:df:68:d6:fe:91:
75:bc:b9:bd:d3:73:bc:88:c8:f2:6b:2f:1b:2e:30:
19:c7:77:67:ca:c1:da:e4:b0:f4:63:e9:01:cf:32:
da:10:b1:6f:c9:f4:70:d4:71:6a:2e:68:8b:de:a7:
22:b5:62:5c:93:f3:5a:b0:51:fb:48:f9:ef:ab:ac:
e3:f9:b2:53:6e:92:b4:cf:68:8d:ec:f9:66:b5:db:
46:4d:ee:87:35:1c:fa:04:7e:48:84:ee:e5:32:0f:
0c:0c:cf:3b:fe:54:45:96:1d:f8:65:5d:04:9d:0d:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1D:24:20:64:75:7E:D3:9D:90:F1:A6:A3:F3:A0:74:50:F9:13:4B
X509v3 Authority Key Identifier:
keyid:23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ff:5b:fb:af:02:6b:8e:38:1e:0b:3c:94:c0:52:28:67:13:
3e:10:92:62:69:60:a7:5d:9f:74:94:58:7c:0b:d9:23:46:76:
5b:66:75:7f:d6:32:e9:9d:bf:bc:a4:55:10:89:13:a9:77:27:
ec:37:8e:ab:db:57:f5:5b:49:ad:03:fb:1f:53:40:6d:5c:b7:
cd:25:58:d3:24:9d:e7:53:6a:0b:4e:3f:14:84:72:75:a8:d2:
13:8b:de:0a:2d:7a:db:5a:e7:ba:57:35:32:ec:7f:11:68:38:
6c:f5:b2:ff:8e:63:3a:0d:17:86:7f:dd:c6:c1:f6:09:52:a8:
60:5c:90:2f:2c:d4:28:86:19:c3:93:47:17:9f:e8:fb:98:c6:
7c:51:69:a1:7f:47:34:98:8b:3c:1a:31:6a:3c:b8:57:46:65:
b5:e2:cc:6a:55:1f:d2:f2:ef:a7:cc:97:e8:28:68:15:e2:77:
3f:a6:cb:2c:4c:87:8c:17:8e:98:a2:c8:c3:05:23:10:07:f8:
c6:0c:88:1b:e7:5f:d6:bb:cd:00:84:74:7c:b8:3a:5b:4d:f4:
f0:89:dd:bd:ce:a7:bd:bd:3f:84:f4:92:10:55:4a:4b:9a:e7:
2e:e4:78:16:ce:35:0a:7e:23:f0:ba:e9:c8:f4:d4:a5:a1:2b:
a3:86:9f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:53:37 2025 by rpki-client