Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
File: IysXeNY2I3Q-2JyH3oDCpkCToGI.mft (raw, json)
Hash identifier: QlBpH2JSAjXyY4uET2VBTPXDW3cJuIBe/PiEvoRH8lQ=
Subject key identifier: 97:07:B9:7C:16:02:C5:13:9B:66:9D:45:B2:18:9E:AD:33:CE:5B:F5
Authority key identifier: 23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
Certificate issuer: /CN=232b1778d63623743ed89c87de80c2a64093a062
Certificate serial: 019745F9391BB01C636240F3665EEE015A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
Manifest number: 06B3
Signing time: Fri 06 Jun 2025 16:00:50 +0000
Manifest this update: Fri 06 Jun 2025 16:00:50 +0000
Manifest next update: Sat 07 Jun 2025 16:00:50 +0000
Files and hashes: 1: IysXeNY2I3Q-2JyH3oDCpkCToGI.crl (hash: QokLPnly2UtGTb7irFUyU74UuIQy5250dVOaTU9iR0g=)
2: Ljs9MQhWok74BFhLvX5tnc2erSo.roa (hash: +v8jaS8N6bSTt1OSxaSBvN/IEBx5vNtqPM0L9If78cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:39:1b:b0:1c:63:62:40:f3:66:5e:ee:01:5a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b1778d63623743ed89c87de80c2a64093a062
Validity
Not Before: Jun 6 16:00:50 2025 GMT
Not After : Jun 7 16:00:50 2025 GMT
Subject: CN=9707b97c1602c5139b669d45b2189ead33ce5bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:88:b6:e9:0f:27:0f:66:1f:73:16:f7:0d:a7:
fc:20:03:14:0f:6f:a3:ce:80:bf:4f:3b:cf:f6:aa:
c0:74:59:a1:11:29:0a:1f:59:1d:46:6d:45:1d:e1:
8c:72:d3:05:16:e8:a9:09:ae:91:0d:7a:a7:aa:f9:
6e:30:41:19:6c:a2:cf:98:ab:95:21:1f:e9:64:8d:
6b:c3:29:71:7f:cf:c3:58:be:56:7c:ad:81:96:5b:
85:ee:b3:fa:f5:4d:e2:9a:6a:fb:36:d4:f2:0c:e0:
b4:85:4a:19:19:75:ae:01:2d:e0:7e:f0:81:d3:94:
9c:5a:24:41:39:3a:71:8b:85:5d:d6:01:1c:3b:03:
7d:5c:2a:e1:1a:af:93:7f:ce:f6:a1:66:8c:f3:5a:
be:ef:20:69:03:b3:c3:8e:b8:15:30:39:9e:7a:8a:
5d:c3:f7:18:b1:e4:31:5d:8a:f8:98:05:38:e8:76:
bc:f8:cc:69:2c:c7:20:ee:e3:42:4c:ed:1a:a4:6e:
9d:e1:37:ca:89:30:75:4e:23:86:2a:d4:87:04:66:
67:7e:06:09:bd:26:dd:a5:16:6d:f7:19:65:68:c8:
e6:70:48:a3:8b:43:0c:c1:57:99:4d:7f:17:01:ed:
ba:ba:6e:07:42:aa:df:26:81:8c:06:12:0c:a4:20:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:07:B9:7C:16:02:C5:13:9B:66:9D:45:B2:18:9E:AD:33:CE:5B:F5
X509v3 Authority Key Identifier:
keyid:23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f6:76:b5:50:da:a7:32:c5:33:9f:2d:de:be:fe:e6:74:7e:
2c:aa:6f:be:38:38:ab:a9:3b:25:b1:90:d4:e5:ba:d9:5e:56:
48:c8:eb:af:60:4d:6b:72:97:18:21:be:12:0a:d8:88:d6:ae:
c8:7e:f7:3b:14:89:9f:04:fa:07:d5:a9:35:88:8e:67:e8:d6:
0d:77:a1:d4:51:41:03:e0:6a:23:fb:ba:45:c8:cd:13:2c:4a:
3f:a0:0b:9a:44:90:21:5c:31:4b:1f:8f:40:7d:6c:96:ce:47:
16:53:34:da:76:c8:b8:73:61:fd:5c:1c:bc:d6:82:c8:c7:a7:
46:2c:59:f8:18:50:56:c3:8c:90:59:36:94:51:0e:2a:82:9b:
9a:66:d0:3d:c3:d9:58:c6:a9:c8:96:24:3c:e8:1b:d0:0a:88:
83:f4:1c:c0:3f:72:64:00:74:bc:58:0d:a1:a0:41:cb:2c:5c:
b3:e0:3f:e4:41:e0:78:0f:05:42:45:ac:b0:ae:58:5f:1b:6f:
e1:d4:cd:ec:32:79:d3:5a:58:6d:f6:fe:b9:ef:06:58:7e:7b:
d6:41:4b:2f:91:e2:d5:71:a9:6e:f5:64:57:a2:60:e4:ba:23:
33:14:3f:9d:72:39:90:72:59:57:8d:51:30:fd:d2:8d:03:2f:
2d:c9:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:43 2025 by rpki-client