Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: EYvvGGrYvSMY/xu9KM579i+kBISk4RYVXKAweR6J2hg=
Subject key identifier: 22:89:5C:CF:AA:03:54:EE:19:EE:C9:CB:D9:67:78:ED:DF:E7:16:74
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 0197488C411CF83017512D615C0C947B0866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 150D
Signing time: Sat 07 Jun 2025 04:00:40 +0000
Manifest this update: Sat 07 Jun 2025 04:00:40 +0000
Manifest next update: Sun 08 Jun 2025 04:00:40 +0000
Files and hashes: 1: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: 5phMgXYuizxvobsGalpi84nSXCqfqFx4xGEW89XRbVQ=)
2: TD7HLl_luzmut4r9NWbAxbYIOuQ.roa (hash: aVFt60b7VcIpMgon0pjcdJ2lnay9KPMEHvhOesbUmv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:41:1c:f8:30:17:51:2d:61:5c:0c:94:7b:08:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Jun 7 04:00:40 2025 GMT
Not After : Jun 8 04:00:40 2025 GMT
Subject: CN=22895ccfaa0354ee19eec9cbd96778eddfe71674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:6c:b0:ad:8c:ee:7f:6b:c2:23:12:af:99:
b3:8c:05:c6:cf:51:ad:f5:88:bc:3b:0d:c9:e6:35:
d0:e1:f5:80:da:26:86:3a:94:55:58:20:87:bd:61:
f6:2b:fc:a0:c5:c9:af:7f:12:26:6b:10:43:55:cb:
f5:88:bf:3b:96:89:c0:36:8d:d7:24:ba:09:da:10:
ac:17:18:67:08:46:5e:4a:a4:59:ae:0d:4c:dd:2c:
29:84:61:93:ef:6e:f2:44:43:51:65:a5:17:51:a6:
9a:21:67:c4:08:ca:71:06:b4:16:e9:58:74:04:1e:
46:ba:b9:ec:91:4c:de:35:9d:84:36:c1:08:7e:14:
89:ea:8c:10:b0:fe:f0:59:37:16:12:0c:07:86:e0:
47:00:57:e3:7d:a5:00:1b:4c:af:03:2b:4e:bd:4e:
0b:93:04:c6:4b:e5:0c:05:dc:52:36:20:04:41:4f:
39:d7:a8:e1:e1:c4:b5:29:f7:f1:1a:6a:89:78:5f:
77:54:44:b3:0a:52:81:bd:10:1f:e8:d3:21:80:34:
9d:92:b3:2b:ab:1d:af:a4:c7:8a:da:10:d5:91:9b:
4d:1f:49:9b:a9:a6:c1:6f:78:74:14:bf:0c:5c:1a:
e7:45:1a:44:89:eb:62:8c:4b:1e:93:dd:4c:2e:33:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:89:5C:CF:AA:03:54:EE:19:EE:C9:CB:D9:67:78:ED:DF:E7:16:74
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:70:bb:4a:d8:3a:47:af:f9:c8:79:96:39:c8:a5:3d:df:71:
a2:d2:02:1a:dd:6a:6a:21:de:6f:79:f3:d0:09:26:6e:9d:e4:
87:9d:18:46:6c:ed:e5:4b:f6:f6:de:43:aa:f2:2d:dc:88:84:
2f:13:a5:ef:16:71:34:d6:f0:96:97:53:48:31:b1:06:55:72:
22:a4:50:e2:85:c4:9a:fb:26:01:02:5d:74:d0:69:57:ae:19:
16:c8:26:ee:e8:ba:07:27:88:53:75:39:8c:80:40:b0:31:ec:
00:25:95:da:69:99:f0:20:d6:b6:0d:91:de:28:4e:ad:0a:30:
4b:d2:36:71:fc:1e:ba:39:1e:5a:d5:84:ca:fd:5c:ac:1c:70:
ca:62:d6:ce:90:00:d4:14:94:9a:b0:42:8e:21:88:f4:6c:16:
a6:31:c0:65:aa:94:09:52:15:0b:e5:3c:c3:15:5b:b8:2d:54:
cf:63:46:14:35:1a:3f:09:1b:7a:f9:c1:82:5d:4a:7d:ca:76:
c4:78:1a:23:1a:e7:33:fa:05:0d:67:b0:45:ea:18:99:49:c9:
b0:18:9f:df:77:e6:2b:66:54:47:89:13:fb:8d:c8:79:45:41:
4f:b3:ea:a9:a2:37:e3:04:9c:24:4d:ca:1f:98:da:89:b3:44:
c9:cc:2f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:29:03 2025 by rpki-client