Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: XmjKK6h8BJDn/oyb50SLLO/hyfE3N9mRSjx/TRGNQd8=
Subject key identifier: 71:6E:DB:FD:7C:07:3E:23:71:86:58:66:F5:5F:B6:7B:60:54:A0:5D
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 019748C34A4010E9AE323E37367939EC9438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 05:00:47 +0000
Manifest this update: Sat 07 Jun 2025 05:00:47 +0000
Manifest next update: Sun 08 Jun 2025 05:00:47 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: 8mdthCIY8x5mHolCCuPc5WoWGfoq3GCTe/72ZKtXKho=)
2: UsxT3pcVojJYP9Cu4db5XHBOA_A.roa (hash: IuC4o8xqUNTxh+TkbcEBFveFUP/SyyaXqWJ5U0z84Vw=)
3: uCJs3VfOd9XlMzz8RlxYwm6JR8g.roa (hash: aQ8GGeLzceXoLXJ/X0KURkE7J4DP5Ck+ioxtdgiJTwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:4a:40:10:e9:ae:32:3e:37:36:79:39:ec:94:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Jun 7 05:00:47 2025 GMT
Not After : Jun 8 05:00:47 2025 GMT
Subject: CN=716edbfd7c073e2371865866f55fb67b6054a05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:24:6e:9b:df:87:80:14:4b:35:62:f2:53:
c3:31:b7:e0:33:22:93:07:33:1f:eb:af:11:a7:87:
6e:3e:28:87:59:37:a9:ca:ae:5a:f7:69:85:35:40:
c2:97:23:ac:a5:99:08:39:98:03:77:07:dc:10:ce:
0a:36:ba:0e:b7:0e:a5:b9:5c:b1:0d:d0:cb:09:e8:
fe:69:88:6e:41:41:33:4a:4b:08:de:d8:83:d2:8a:
66:99:93:ad:ad:24:ba:32:60:d6:59:40:e8:72:09:
6d:cd:5e:21:5a:56:df:33:4e:87:99:7c:95:6b:ae:
36:8f:fc:03:fe:78:fd:d5:c4:78:a9:94:45:55:0c:
cd:a0:e1:8e:85:c2:51:da:f8:6a:d8:ff:df:62:5e:
de:02:0b:dc:ae:b5:40:3d:36:be:32:69:1e:22:fa:
36:64:f0:de:cf:99:b9:b0:73:1e:84:cc:1f:f2:59:
cd:1b:1d:30:77:94:db:a1:d3:ac:1e:3a:da:e2:51:
d3:7f:02:e7:21:a5:a6:22:c3:89:ec:4a:14:49:f6:
b9:50:dd:42:99:b1:54:97:64:5d:ef:6e:0f:d2:04:
f3:47:fa:62:47:f9:de:b2:07:e0:4b:24:e1:87:68:
02:ae:b4:09:a4:da:b1:49:8f:e6:d6:5e:e1:7f:99:
51:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6E:DB:FD:7C:07:3E:23:71:86:58:66:F5:5F:B6:7B:60:54:A0:5D
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:66:51:55:a1:ff:24:36:35:9a:e9:74:28:02:61:e1:8a:7e:
f2:dc:f6:aa:47:14:d9:11:4a:70:76:3e:73:06:d8:e2:d3:f2:
7d:7d:33:e2:ae:7e:3e:87:c4:93:7f:35:40:3b:85:4f:07:93:
9d:f6:9d:c1:5d:f7:9c:76:71:e7:67:bb:cb:55:26:bc:cd:b4:
91:9a:56:d5:a0:29:1c:bd:4e:99:35:73:db:82:ad:db:b0:e0:
41:b6:84:ee:0e:99:fd:ff:1b:47:89:e1:83:84:e9:59:a9:96:
7a:f5:be:ab:73:18:38:56:f8:ed:57:ed:3a:71:b3:68:65:d1:
d6:9b:ab:f0:de:a2:01:a5:f2:07:59:d3:d0:7d:2b:0c:73:29:
df:e9:29:5c:2f:fa:c7:2a:d3:f7:b4:17:3c:2d:9a:27:2b:55:
c3:e2:eb:7d:92:c5:00:2d:76:5d:b2:e1:80:a0:0e:22:4b:83:
d8:60:87:af:1f:72:a5:47:02:87:b5:7c:c5:fb:2c:48:97:61:
a5:2e:2a:6b:af:17:c5:6e:22:04:69:dd:61:b6:2f:aa:a1:16:
6f:f1:8d:04:9d:6c:1f:84:23:56:9f:90:8f:12:fc:0b:de:ab:
73:0b:ff:24:f8:2d:82:cd:03:7e:fd:29:03:ac:53:e4:ab:50:
8e:d9:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:20:48 2025 by rpki-client