Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
File: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft (raw, json)
Hash identifier: txg0fHFuwLwmE3tRVnlIoyY3rYnpNirXZ0/5wxiEb+E=
Subject key identifier: 2E:15:40:C7:5C:E1:A9:1A:9E:4F:DD:AB:76:0E:0D:EB:B0:37:4C:2A
Authority key identifier: 22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
Certificate issuer: /CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Certificate serial: 0197470BD0182737A6BB211FA2421BBBBAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
Manifest number: 0C65
Signing time: Fri 06 Jun 2025 21:00:45 +0000
Manifest this update: Fri 06 Jun 2025 21:00:45 +0000
Manifest next update: Sat 07 Jun 2025 21:00:45 +0000
Files and hashes: 1: 5h9N95WR6G3ZttKnfAaRL_2XfKs.roa (hash: Wu3zPxSXCsayNSHW7YvNoHAYtN3gQjTl9ho9qfJB69k=)
2: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl (hash: C2AaMWYdlHBk93+jg8x2XeVCOhqwo45s5BjvsPKn6/U=)
3: mWDbGVVpCQ84rC7Zv5fGnlAS0IM.roa (hash: p+WC5acLc9Vp8ZBrdZrqWpaCEJthWpQv4NHUQY+p8+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:d0:18:27:37:a6:bb:21:1f:a2:42:1b:bb:ba:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Validity
Not Before: Jun 6 21:00:45 2025 GMT
Not After : Jun 7 21:00:45 2025 GMT
Subject: CN=2e1540c75ce1a91a9e4fddab760e0debb0374c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:35:f0:f5:ea:cd:c1:94:96:5b:2d:47:c7:
cc:21:08:97:9e:4e:e1:f9:d9:e8:81:fd:a7:87:db:
13:51:c0:2f:b4:15:a6:6e:d2:4a:30:76:24:28:b7:
e9:77:63:07:97:01:65:2f:99:be:35:5e:34:21:a6:
df:cc:e5:6f:0d:9d:44:35:50:11:52:77:85:00:2e:
f2:0a:29:0b:2c:da:57:1c:48:c2:4c:ba:10:8b:7d:
5d:09:0a:e3:29:d3:15:c9:b4:b5:e1:cb:0b:c0:cd:
d8:52:b0:30:8a:6e:4b:67:6b:4a:f4:b5:10:8f:2a:
ca:98:dc:73:96:5f:a1:23:83:7e:e0:43:ee:0e:32:
0d:57:09:71:bf:30:8c:67:14:71:b1:ac:4c:9f:ac:
ac:5c:1b:26:d2:2b:a4:ac:e2:1c:d1:a2:4e:da:cd:
a2:17:f5:d3:98:b4:9a:80:f0:75:ae:f2:9f:ab:e8:
04:6f:8f:02:93:da:f9:6d:db:1a:e0:1e:bb:0e:e2:
c4:07:4a:5a:2c:18:e4:b1:5d:13:66:5a:9a:84:6d:
1e:d5:99:41:81:93:7a:e1:90:20:af:ea:08:03:70:
01:7b:55:24:7d:76:ed:df:72:83:30:68:b9:1c:d7:
6e:f0:a0:39:85:5d:4b:b4:20:27:52:10:c0:a5:df:
01:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:15:40:C7:5C:E1:A9:1A:9E:4F:DD:AB:76:0E:0D:EB:B0:37:4C:2A
X509v3 Authority Key Identifier:
keyid:22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6d:84:db:14:93:54:69:d9:e8:8e:db:d2:4b:91:8c:e5:7d:
2b:fe:e6:07:ca:ca:44:1c:3e:1a:0f:75:20:dd:4f:4b:24:dc:
9b:52:cc:26:c1:4f:8f:dd:ab:8e:16:ca:11:f2:7d:23:ff:06:
5e:69:af:03:87:3e:cb:4b:3f:ba:16:ef:d9:92:f1:0d:d3:39:
08:b8:c6:26:23:02:6b:10:ab:dd:6c:ea:e5:ce:e9:cd:01:ba:
27:e1:cc:39:fd:4d:de:2e:f3:c9:ac:76:6b:71:52:2f:03:6e:
4f:9f:38:7c:3d:8b:f4:1b:fe:c0:0c:a2:a5:7e:77:4a:40:d2:
30:bf:fc:11:d9:5f:2d:4f:12:1b:6c:63:3d:4c:8f:5f:bf:c9:
42:13:b5:ce:0d:dc:1a:3f:0b:49:5a:c1:32:26:09:31:99:a8:
ec:09:9b:d5:f0:6a:a5:7a:75:c9:f1:12:d7:ef:77:04:cf:3a:
51:ef:b4:7a:83:05:42:19:7a:27:01:17:df:00:e3:c6:ef:bb:
ae:5f:2b:2d:21:5a:a4:6b:e1:77:ff:8c:9c:fa:cf:a1:5e:58:
75:8e:aa:46:de:37:72:45:f4:6a:7f:ee:8b:c6:3a:d5:ee:03:
cf:61:91:8e:9e:8f:52:e2:4f:dd:e6:e0:1e:94:b1:21:1c:62:
4f:90:39:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:04 2025 by rpki-client