Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
File: IVGBuCd2l4rS27aVKNzpsgmOsH4.mft (raw, json)
Hash identifier: denb9sWYTIEvrjsgyvtjUPJXk/pxLAJ+gOpECdrBdFo=
Subject key identifier: F1:33:02:20:B3:7C:38:5F:BE:27:DA:75:8F:07:DD:DF:B9:E6:07:8E
Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
Certificate issuer: /CN=215181b82776978ad2dbb69528dce9b2098eb07e
Certificate serial: 019750B3FE36BBC0794E6625985B95629E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
Manifest number: 1041
Signing time: Sun 08 Jun 2025 18:01:02 +0000
Manifest this update: Sun 08 Jun 2025 18:01:02 +0000
Manifest next update: Mon 09 Jun 2025 18:01:02 +0000
Files and hashes: 1: IVGBuCd2l4rS27aVKNzpsgmOsH4.crl (hash: PsY6ouzvbHNwfnL1zB8hgS7Awcp9uvI9A2Y5IM5xUVs=)
2: eer-d-fcLvelLG4V4pmzSNp8bYo.roa (hash: 57pdrUijyw7X3aaJAIz94z/NxRDOdVIhHh5nf8aYnHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:fe:36:bb:c0:79:4e:66:25:98:5b:95:62:9e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e
Validity
Not Before: Jun 8 18:01:02 2025 GMT
Not After : Jun 9 18:01:02 2025 GMT
Subject: CN=f1330220b37c385fbe27da758f07dddfb9e6078e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:70:8e:7c:35:ed:03:ef:f7:6f:62:3d:c1:
54:c4:02:87:a2:57:7b:50:d3:03:35:ee:08:0e:79:
50:e9:09:2c:01:9f:ee:fc:ca:c2:36:c7:74:c0:57:
24:a0:19:e3:1d:62:eb:42:59:8b:a1:18:d6:97:aa:
b9:53:fb:64:a0:83:7a:6b:01:39:f7:70:9b:18:2f:
a0:5f:17:fe:20:08:24:29:be:fd:5a:6c:b6:ee:8a:
ab:50:f2:e5:16:46:c7:c2:08:23:46:f2:c1:f5:ad:
6c:03:c7:45:1e:0b:f4:e0:31:7d:ef:39:d5:a3:2b:
49:c6:98:9f:b2:ec:2c:e2:f1:0b:9e:0c:73:ad:ac:
37:e3:08:fa:ce:1c:bb:2b:8e:f9:93:62:40:da:43:
2d:47:39:53:e9:e8:48:83:e8:87:2a:d3:85:e0:19:
1e:ef:c1:c1:4d:7d:8a:52:2b:70:ca:c1:79:bc:9e:
1a:26:e4:3b:f5:02:15:f7:02:b1:1b:7e:96:10:89:
87:06:6f:5a:ea:9f:2d:e8:c3:70:da:d0:57:a2:4e:
65:9b:be:f5:3d:b9:c0:3f:eb:8e:e6:9a:ea:f3:cc:
61:61:ca:f7:9d:5a:83:49:be:11:ab:27:7e:ae:11:
32:2e:49:18:88:12:5a:f6:df:dc:13:69:a3:b5:31:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:33:02:20:B3:7C:38:5F:BE:27:DA:75:8F:07:DD:DF:B9:E6:07:8E
X509v3 Authority Key Identifier:
keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:52:28:2d:f3:9f:17:2d:7a:a2:91:aa:b7:7d:0a:1e:b3:fc:
c9:dd:17:63:bb:af:47:cb:1c:d0:29:57:d6:89:79:4b:4e:2a:
36:fa:60:84:68:c7:40:8d:1c:42:cb:ea:d9:14:ad:13:f6:25:
7b:fb:44:8e:60:d6:ba:4f:94:d4:38:11:c0:e1:24:3a:6e:47:
34:1e:fd:e7:6b:dc:7f:b3:3b:9a:64:b9:3d:60:54:32:7c:8d:
01:f6:8e:cb:7a:85:25:02:76:36:42:aa:99:ff:6b:4c:03:42:
e2:7c:88:c3:ef:6b:4b:eb:0c:49:33:12:3b:f2:b3:7b:18:04:
37:e9:2f:ac:3f:00:24:00:df:8b:dc:3c:ec:2e:a2:5a:d9:60:
de:c7:12:ed:e4:23:0f:f6:75:c4:11:29:60:a0:f8:8c:7c:e6:
1f:5d:3a:cf:5f:b0:68:40:1f:dc:b7:59:74:1d:97:5a:8a:22:
d1:a8:cd:23:e2:77:de:ff:66:66:54:d1:76:6f:09:9b:85:a6:
30:bf:3f:b2:87:e6:10:05:9a:be:89:7b:b2:4a:35:1d:d6:ae:
f8:c3:42:56:0f:24:cb:1e:b1:b2:fb:9d:c6:26:b1:be:03:60:
ad:c7:a6:03:e9:52:65:05:cc:c7:41:2a:1e:f9:9d:72:db:13:
5f:3c:22:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:08:00 2025 by rpki-client