Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
File: IS6vWaK_88qxGHEYlEeLue_5O4U.mft (raw, json)
Hash identifier: +8u2m40lFH62CZGTbRhbmUPgiP6l7+t4yKg3wVtBu9Y=
Subject key identifier: B7:B0:18:E7:0C:1A:37:CE:12:9E:E7:FB:93:71:65:AB:1C:70:6B:2A
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Certificate issuer: /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial: 01975121EA5B9EDC15274B1C63E625E6B11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 20:01:06 +0000
Manifest this update: Sun 08 Jun 2025 20:01:06 +0000
Manifest next update: Mon 09 Jun 2025 20:01:06 +0000
Files and hashes: 1: 9ACkzxrIX1FcdAcP7vGEcSMswwg.roa (hash: 5NgCoOKEw6pjVDqABbTS2aQr1tInYVR2kf/DOaxnI6o=)
2: IS6vWaK_88qxGHEYlEeLue_5O4U.crl (hash: ngwjOqtWsPJBaWHWvOB2XZZEMEKyuRC4gLZMkrB2JyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:ea:5b:9e:dc:15:27:4b:1c:63:e6:25:e6:b1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
Validity
Not Before: Jun 8 20:01:06 2025 GMT
Not After : Jun 9 20:01:06 2025 GMT
Subject: CN=b7b018e70c1a37ce129ee7fb937165ab1c706b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:4f:0e:3a:cd:01:ed:49:bd:11:94:75:5e:
88:5d:3a:7e:9f:ba:28:f1:59:b8:85:4b:2b:19:af:
c1:95:7b:44:ed:20:0c:08:44:97:86:1c:7a:1f:cb:
48:5c:f0:c2:8f:73:d3:9d:ff:95:00:23:3b:d8:78:
11:45:36:58:8b:96:79:b8:91:e8:d7:56:1c:64:d4:
0d:13:0d:bb:cf:0d:96:48:98:e0:a2:db:6d:ce:7f:
44:db:34:c6:32:d7:d7:b6:6f:61:6f:ca:86:d3:72:
4e:6a:de:39:4e:87:1e:52:ed:01:d7:4a:eb:45:91:
77:9e:46:2c:20:32:79:c4:81:95:8f:95:04:4c:0a:
77:58:37:0d:7a:af:4d:32:ca:f7:8c:76:8f:f8:d4:
e5:01:fc:7f:19:0a:17:63:3f:6d:5b:f5:f9:d4:2e:
4f:b2:3e:59:88:aa:ae:68:52:d0:fc:ee:77:74:aa:
e0:6b:ae:fd:2d:50:b6:d2:6c:d0:95:7b:16:1b:8d:
2a:88:ff:7b:92:5e:ad:bf:e5:25:dd:56:ce:d0:0f:
94:ee:43:4a:86:d9:4a:16:d9:2b:67:fe:1e:83:8f:
ce:30:47:f0:8f:8d:cf:c7:51:51:1c:52:29:a0:ad:
8e:38:5a:1f:b1:f7:3f:ef:65:b9:fb:1e:1b:99:a1:
60:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B0:18:E7:0C:1A:37:CE:12:9E:E7:FB:93:71:65:AB:1C:70:6B:2A
X509v3 Authority Key Identifier:
keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:98:f9:30:df:69:c8:04:fc:08:f3:f7:cd:2a:f9:76:06:22:
99:e1:d9:a6:f6:d7:bb:aa:e8:93:27:8a:87:d5:72:4f:b3:e0:
80:a3:b8:04:23:47:17:73:29:46:7c:4b:b8:cb:05:73:b8:f6:
ce:29:9c:88:cc:8f:69:39:b6:c5:63:8f:df:25:be:52:d8:2a:
a0:6d:cd:70:c0:d5:07:4e:30:6c:a3:bc:18:f5:bd:6c:de:3a:
a7:a7:a5:4c:12:8d:04:b5:05:ec:a2:7d:de:af:56:60:5c:e1:
83:ab:df:20:00:d6:93:08:a0:12:e4:6c:c6:fc:6c:ef:0d:ed:
6a:41:c7:69:ca:cd:4f:13:6b:92:2d:ad:95:f5:a3:5d:e8:80:
b8:2b:4d:21:22:c0:f6:a6:a3:33:73:c0:17:70:86:ff:e8:78:
46:04:a4:ed:82:78:59:95:af:9e:cd:53:63:6e:64:0f:34:f2:
24:84:fb:86:82:0e:08:9c:23:a2:3f:20:cc:00:03:ec:d6:80:
2f:89:c9:fc:2c:d3:e9:de:b6:80:23:18:a1:60:cd:0d:ee:76:
09:2c:a8:b9:cd:e2:af:24:fa:b1:dd:8f:7b:a2:7e:d4:e6:f0:
07:79:ca:28:00:4e:5e:41:4c:2c:d7:a9:cb:a0:da:e2:10:e7:
bf:de:5b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:31 2025 by rpki-client