Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
File: IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json)
Hash identifier: hHqZRoeN16w8IwNRUNaL3k1uMppH35oGuCiD7mUlH5Q=
Subject key identifier: C3:21:E5:26:D6:88:F0:E1:A9:29:63:52:00:EA:AB:26:10:6D:8A:23
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial: 01974BC405AED138FE7DFD3503B93976555C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 19:00:27 +0000
Manifest this update: Sat 07 Jun 2025 19:00:27 +0000
Manifest next update: Sun 08 Jun 2025 19:00:27 +0000
Files and hashes: 1: GNNeHZyvG9VKvKXPSj2VAqX1Q4o.roa (hash: l5teIcaNt4zv8uIriCA79rj79r37yRmFeLrH41aNJJA=)
2: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: Vgz91wt6UpStQOyRzZp1jlRLbgKHcRBQQXycY16gvvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:05:ae:d1:38:fe:7d:fd:35:03:b9:39:76:55:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
Validity
Not Before: Jun 7 19:00:27 2025 GMT
Not After : Jun 8 19:00:27 2025 GMT
Subject: CN=c321e526d688f0e1a929635200eaab26106d8a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:e8:fc:0d:0f:50:8e:e8:88:b9:7f:46:5d:
be:be:5b:c4:da:e1:a7:60:aa:26:71:91:3e:95:7b:
f6:0d:0c:ab:92:c1:68:73:ea:8d:14:7b:48:a9:6b:
78:03:36:c0:33:5f:07:88:85:3f:89:e2:c8:99:c9:
c1:ae:68:d5:23:5b:f2:2d:b8:de:9a:9a:3f:02:a7:
80:9e:54:f5:ee:1d:f1:00:0c:89:01:70:b6:21:cf:
e3:50:f0:dd:55:e4:1b:2d:f8:7f:fe:ee:99:88:3e:
51:66:86:66:27:35:ec:c1:e9:cc:78:be:2b:a9:cc:
71:a6:d1:b7:38:5c:45:7d:6e:d6:e9:37:d1:5f:2b:
b9:90:8c:e8:e1:9c:47:6c:c7:12:1a:86:4c:8b:20:
fb:24:c0:78:78:21:2a:a0:31:0d:26:1a:d4:e7:5a:
08:96:dd:58:43:06:ce:ab:35:bf:2c:cd:b0:64:5e:
1f:ba:d3:f3:e7:c3:6c:41:55:95:e8:b4:a7:d1:7d:
7c:8e:7a:50:fa:ce:43:f7:47:75:43:fa:f3:8c:57:
ae:af:70:35:5c:13:82:56:57:32:1c:6a:d9:b6:a5:
9d:29:81:4e:7c:d8:a4:85:06:d6:5b:39:11:6c:8b:
da:85:a8:91:4c:4e:46:91:d0:f7:ed:15:5f:8e:43:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:21:E5:26:D6:88:F0:E1:A9:29:63:52:00:EA:AB:26:10:6D:8A:23
X509v3 Authority Key Identifier:
keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c5:ed:ac:8d:3e:ca:5d:bc:d3:1c:0f:c8:39:3f:fc:97:6b:
a2:ea:5b:86:4e:c4:9a:2e:95:f3:8e:85:8d:93:5e:a6:9d:c2:
db:8f:d6:3b:94:b7:e7:6a:95:5e:80:b4:c3:64:61:98:b2:62:
f5:39:ed:7c:18:79:4f:06:0c:f1:6c:33:fe:18:a8:bc:b7:d0:
52:69:51:48:72:9f:a1:be:97:af:8b:3c:88:d8:5e:bd:61:6e:
f0:38:19:b6:c8:29:98:b6:e4:f1:4e:4b:fc:1f:71:bd:57:62:
20:01:18:33:1e:e2:c2:d5:f3:72:98:66:63:90:e1:bf:76:6a:
94:d9:d7:9e:7b:7f:0c:78:66:52:22:7a:19:4e:8d:3a:07:d8:
eb:1a:05:43:d9:a9:56:d2:7d:41:bc:16:28:57:57:7c:3b:6e:
4f:9c:0e:33:1a:a9:b4:b8:70:cf:09:de:69:8a:e8:9e:a1:41:
e7:9e:c8:23:12:3e:d6:98:2f:03:bc:58:4d:79:5c:45:43:a3:
38:a3:03:eb:a0:79:0a:ac:3b:52:24:c1:77:e8:a1:1f:12:55:
37:ac:fd:4f:7f:bd:5b:46:1b:2c:16:ee:50:f2:6e:fc:8a:f1:
1d:1e:15:58:5b:8d:f2:56:4a:b6:b0:b5:f7:51:55:22:4d:82:
b7:76:02:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:01:32 2025 by rpki-client