Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
File: IAs7I0VxCglvajTX8Im-seP8U4g.mft (raw, json)
Hash identifier: Xhu/Rt89hfmAuaydUw/7cDVJe0hYslwDLSvwJENQu2k=
Subject key identifier: D5:EC:25:AB:23:39:9B:BE:D6:D4:44:5D:7B:77:11:A6:9B:D6:CF:81
Authority key identifier: 20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
Certificate issuer: /CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Certificate serial: 019749D604FCAF4B7FA11190F28C2C7922A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
Manifest number: 039E
Signing time: Sat 07 Jun 2025 10:00:51 +0000
Manifest this update: Sat 07 Jun 2025 10:00:51 +0000
Manifest next update: Sun 08 Jun 2025 10:00:51 +0000
Files and hashes: 1: 3twUXXIP_KmiWrUBvyT5612yZdA.roa (hash: i8TOwD+JQVgsZynDBd1FE+mCLj4YL4GBf0bnlreCNh4=)
2: IAs7I0VxCglvajTX8Im-seP8U4g.crl (hash: 8rgH0wz+TXZahthE9U1JFVpR7LwT9nW5EloMI50kayQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:04:fc:af:4b:7f:a1:11:90:f2:8c:2c:79:22:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Validity
Not Before: Jun 7 10:00:51 2025 GMT
Not After : Jun 8 10:00:51 2025 GMT
Subject: CN=d5ec25ab23399bbed6d4445d7b7711a69bd6cf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:a5:60:75:91:f1:58:a1:8a:3f:62:9c:64:
8e:11:68:86:b0:61:62:4e:39:ae:95:d5:40:1b:5d:
4d:44:f4:ee:f8:12:e1:20:8f:ba:36:ab:fd:3c:01:
51:6b:8b:42:df:d6:30:60:82:48:3b:84:2e:77:06:
4c:7f:61:99:b0:f1:0c:9f:ec:03:39:5e:ae:a5:bf:
31:e2:d3:ac:89:15:5f:8a:dd:ee:7b:75:7e:14:e2:
f5:1c:47:ff:86:ce:f1:51:d3:3f:89:9f:44:d6:6e:
99:ab:04:fd:eb:53:57:05:77:6a:3e:32:53:1c:14:
e5:f6:ab:b9:78:35:23:cc:8e:75:a4:4d:d6:bc:c9:
12:ac:a9:88:e2:33:05:b4:95:3a:ef:13:2f:1a:c0:
0f:c7:7d:06:eb:07:10:ca:02:51:9a:e2:cc:c7:e7:
9a:16:34:24:ae:1b:b5:86:f7:5b:0b:7b:53:d7:29:
fb:2e:3d:38:99:33:99:5b:8e:dd:c0:91:f1:9c:ae:
7b:58:82:d1:68:82:35:17:33:4a:7a:35:b3:e5:53:
a3:45:03:85:2b:12:06:ee:8c:6a:dc:be:21:c8:af:
26:09:d4:70:83:2f:ee:2b:7e:4b:1e:0d:cd:61:fa:
1c:6e:35:36:d2:f1:dd:b5:22:a0:c0:b2:ca:87:75:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EC:25:AB:23:39:9B:BE:D6:D4:44:5D:7B:77:11:A6:9B:D6:CF:81
X509v3 Authority Key Identifier:
keyid:20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:65:d5:d7:b4:d6:d3:75:7d:f9:43:1c:a8:13:83:8f:48:6d:
81:75:7a:53:f5:0e:34:92:38:c1:97:f0:c1:e1:17:bc:21:26:
0d:e2:6f:24:46:db:55:46:a0:b8:ea:a8:63:60:37:c1:b8:ba:
22:24:de:23:d6:da:f1:be:43:9f:b2:a7:43:eb:6f:1f:f3:71:
04:07:ed:82:1d:a7:4e:2b:87:df:5c:d8:3e:5b:d8:2e:ed:b2:
39:7e:37:8e:b5:fe:67:5d:a1:4e:49:21:ed:e3:d9:4c:ac:03:
f7:7d:51:2e:ce:47:ef:26:e0:41:0a:a4:ae:ef:9c:a3:ee:30:
73:29:29:e3:72:76:73:61:72:58:47:27:80:d4:06:82:7a:71:
18:f7:ff:3a:15:56:76:f7:04:1f:ce:dc:7a:d9:7e:e1:b0:0b:
00:0a:09:bf:63:ee:6a:36:d9:1c:bb:60:b1:0b:dc:a7:62:e2:
fd:46:f3:9a:9e:72:d5:a8:69:0e:56:da:ec:b9:a4:7a:28:e9:
48:8e:7b:e9:eb:6e:da:4a:89:b4:c1:85:27:ad:69:bf:b1:8d:
73:0f:41:ed:7b:0c:43:c8:3a:1c:89:42:e0:91:69:a2:85:6a:
d9:95:87:bf:23:60:6a:71:34:65:c0:71:0e:72:f0:85:3c:6d:
2f:f0:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:13:12 2025 by rpki-client