Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
File: dIisPOfpHiQMr_IZy-OPzwI78rY.mft (raw, json)
Hash identifier: 8WCOfKB+nOiasWOvqevu2Spcei9qGWxdgSTGedyztc0=
Subject key identifier: BF:FA:FD:4F:01:CD:C0:8E:FB:05:4C:90:F3:85:65:9A:91:03:42:C7
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Certificate issuer: /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial: 0197499F39B536E43B291217D54B9756B481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
Manifest number: 0A99
Signing time: Sat 07 Jun 2025 09:01:01 +0000
Manifest this update: Sat 07 Jun 2025 09:01:01 +0000
Manifest next update: Sun 08 Jun 2025 09:01:01 +0000
Files and hashes: 1: WUxc8OaDvlLuIRaGhHw99-2pQV8.roa (hash: pHL2ka3zZ/EpxZTpD28h5nmQm9ygfk2G3CW5wJONDzE=)
2: dIisPOfpHiQMr_IZy-OPzwI78rY.crl (hash: x5OmrvqV7Ybv3xZP9ofHmP5lr5OPaZjG/1naExgmDgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:39:b5:36:e4:3b:29:12:17:d5:4b:97:56:b4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Validity
Not Before: Jun 7 09:01:01 2025 GMT
Not After : Jun 8 09:01:01 2025 GMT
Subject: CN=bffafd4f01cdc08efb054c90f385659a910342c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:55:90:b1:9c:d5:90:ac:f8:7a:ef:2a:45:
d9:7a:b8:8f:6f:a2:09:52:60:78:c6:24:a2:7c:74:
fb:c8:e2:27:62:11:4f:a8:d7:a6:9d:c4:3c:ff:a7:
79:47:ee:37:4d:4d:7c:a7:48:d8:4d:56:02:5c:54:
eb:13:53:5a:f8:fb:1c:61:73:8a:fc:84:4e:bd:be:
e8:ca:73:f8:d5:b4:de:17:1e:3d:e3:e8:99:e3:df:
50:7c:f9:d6:15:b3:a8:bd:a7:3a:ae:6a:d3:c8:d4:
4c:9b:81:f8:1e:98:21:a9:1e:0a:e3:d7:39:5b:1a:
b0:b5:70:57:e3:a7:42:c8:c4:07:51:8a:56:c3:cc:
56:ba:d8:a6:7a:e3:91:ce:3e:07:59:13:12:11:7e:
70:3e:28:80:5f:91:5a:14:de:f7:cb:83:2e:de:63:
28:20:48:3c:3c:49:81:29:74:ae:e2:33:c5:e6:fa:
c3:9e:4b:e7:ca:b0:3b:70:1f:ff:c0:9a:d4:52:44:
aa:8f:f0:b3:a6:d8:68:33:99:30:b9:ca:4c:bf:c4:
f8:c2:1d:08:e4:18:5d:a7:a0:1f:93:67:88:54:60:
25:51:80:f0:42:43:a6:2b:e5:08:67:68:c8:1e:ca:
78:32:35:cf:46:7e:9c:37:62:f5:61:f3:36:65:5d:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FA:FD:4F:01:CD:C0:8E:FB:05:4C:90:F3:85:65:9A:91:03:42:C7
X509v3 Authority Key Identifier:
keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b7:c6:9c:b0:f9:dc:8b:80:36:a5:21:8e:a0:ba:db:4c:db:
44:5f:0e:be:6d:a8:87:76:ed:44:9b:97:16:f2:9d:de:37:c9:
21:53:f2:84:d8:e1:73:41:ff:a7:dc:8a:0e:d4:83:24:76:ff:
87:ec:a6:41:6f:a1:87:c8:6a:c3:20:4a:68:f3:84:7c:78:18:
fd:06:3b:a4:7f:15:bc:af:5f:a3:63:9b:f1:fc:d7:02:6f:77:
e6:1a:d4:fe:a1:4c:78:18:e3:71:cb:f5:c1:c3:30:6e:10:51:
37:16:89:1b:50:c4:87:b8:69:68:36:d8:be:52:cf:a0:b9:c4:
44:e0:a7:e3:f1:51:e1:eb:df:e9:13:25:9a:99:f6:84:c4:05:
a6:39:33:c1:95:75:08:eb:43:d3:92:a3:99:14:f0:25:13:c7:
44:2a:f4:2e:c9:59:cc:90:90:b6:8f:fd:11:d9:2f:c6:bf:88:
8c:36:d0:0e:2c:f9:26:f5:1d:a7:9c:a3:c0:e8:32:73:60:6d:
aa:0e:b5:f3:1c:ec:39:a2:5d:0a:35:28:5d:a4:b3:ed:35:c7:
26:d5:f5:b1:50:b9:ef:1b:40:35:51:a0:70:e8:70:30:80:09:
7d:fb:c8:72:61:e9:f6:c2:40:75:28:59:97:df:74:72:6b:ba:
a9:37:eb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:48:24 2025 by rpki-client