Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
File: IqyN_06Z0-IomvY7FdVdJFDIQsM.mft (raw, json)
Hash identifier: /ofIdua2mqm5mecE+cPXkKFNeodECrz/kNJf03EpEPw=
Subject key identifier: C4:8D:95:F8:19:D5:A6:10:70:23:46:A4:61:0B:75:38:88:4E:AF:BF
Authority key identifier: 22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3
Certificate issuer: /CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3
Certificate serial: 01974D0DDB33C76CB63333BB775D6F29A402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
Manifest number: 049F
Signing time: Sun 08 Jun 2025 01:00:42 +0000
Manifest this update: Sun 08 Jun 2025 01:00:42 +0000
Manifest next update: Mon 09 Jun 2025 01:00:42 +0000
Files and hashes: 1: 1YFZUWeFsFFhNH6pH-z6oTf7e1M.roa (hash: N3xo7g5jGJQoS/qFHbtXSlXVpbFrX6/YoQPrJBEqRCc=)
2: IqyN_06Z0-IomvY7FdVdJFDIQsM.crl (hash: wpgK9oFjZdob7roc78SPMNl/Nseqcmfy96NnLTGFvlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:db:33:c7:6c:b6:33:33:bb:77:5d:6f:29:a4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3
Validity
Not Before: Jun 8 01:00:42 2025 GMT
Not After : Jun 9 01:00:42 2025 GMT
Subject: CN=c48d95f819d5a610702346a4610b7538884eafbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:81:0f:cc:00:94:61:33:5a:39:78:20:78:
ae:c7:0a:50:9a:85:93:e9:d8:18:74:a7:d0:77:56:
1c:b0:97:77:4d:99:bd:f6:7d:e8:84:8c:38:1f:e1:
3f:46:22:19:da:4d:82:31:d4:4b:50:98:90:44:06:
53:52:85:a5:0c:73:26:f0:6b:15:6e:ac:66:56:15:
04:27:79:af:bf:a4:64:5d:43:d5:9e:f0:93:2b:14:
34:e1:83:07:33:9e:5e:e0:fa:5a:33:d3:42:74:f6:
f9:af:d4:5a:8f:af:3d:d8:a6:0c:11:37:01:9c:c7:
f0:4c:48:ed:ee:e5:d6:2b:54:12:7e:4b:54:41:d4:
a1:06:8f:c3:70:67:08:c9:c8:0e:cf:a3:ed:be:61:
67:40:53:06:91:b2:84:6b:6e:a0:ca:e1:e2:30:4b:
2d:dc:8c:03:97:15:ef:ac:28:f8:0f:67:73:8d:c6:
0b:eb:6e:45:d8:33:9b:b7:7e:32:52:38:5e:5b:8e:
64:9f:f3:15:70:9a:68:09:52:2c:b3:6f:5b:2e:b2:
ee:a1:41:6e:a7:dd:a5:33:76:bb:73:99:d2:6c:5e:
4a:01:38:fe:45:62:1a:52:14:72:28:bb:f6:a7:bd:
d4:08:b9:b0:d6:08:2c:01:90:b8:cb:f5:4c:3f:01:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8D:95:F8:19:D5:A6:10:70:23:46:A4:61:0B:75:38:88:4E:AF:BF
X509v3 Authority Key Identifier:
keyid:22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5d:b0:e9:ad:df:37:fe:b5:91:85:b4:79:18:db:c3:fd:a1:
d0:ac:b4:2a:08:da:2e:3a:5f:65:82:c5:5a:c0:f9:4b:ff:cd:
45:ff:1a:84:80:99:1c:ad:8b:a8:04:24:2f:4e:ce:16:b1:40:
4f:52:c3:a5:6d:18:0e:5e:0f:02:48:9e:b4:0a:76:d5:7a:21:
39:f1:92:12:16:d7:60:9b:97:eb:50:da:6d:05:95:9b:a4:da:
fc:09:d8:2b:84:53:96:f2:7c:44:3e:49:5e:7a:13:be:90:ed:
77:6d:2d:4f:8d:15:b0:ee:f8:03:ab:08:56:bc:a9:15:42:4b:
77:8a:c7:0d:e4:17:4c:ee:5a:c6:e6:14:6f:d1:29:a7:86:63:
0f:61:4e:68:82:2f:c6:6e:1e:f7:df:c8:63:78:c4:c0:83:6f:
c0:ac:bb:9d:24:f8:1b:45:83:70:53:8b:12:d1:8e:7e:ed:c3:
8b:9d:36:14:ed:60:3c:ab:49:95:cb:7e:dd:4f:a7:d1:d1:22:
c8:be:f9:91:56:cc:89:99:96:06:b3:90:8d:ea:98:d0:94:9d:
8e:b5:7f:7e:d1:29:98:97:6b:d5:9f:a5:64:c8:f3:5f:61:2e:
0e:4b:0f:38:5c:b9:2c:fa:32:10:ac:f9:92:76:c4:db:4c:d8:
50:06:e4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:25:17 2025 by rpki-client