Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
File: izTw-SddmAZir7tsr__k25ycnUc.mft (raw, json)
Hash identifier: hv2S5xJAGNMnTSjOIW5JShFA8Xr6DVnJBoNHzlX3/nY=
Subject key identifier: 8C:E6:06:A4:37:DD:40:E2:9C:EF:3A:E7:1E:EE:21:7F:05:F4:05:00
Authority key identifier: 8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
Certificate issuer: /CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Certificate serial: 0197499F164C3996D3DDAD62391CF7CBB43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
Manifest number: 09E9
Signing time: Sat 07 Jun 2025 09:00:52 +0000
Manifest this update: Sat 07 Jun 2025 09:00:52 +0000
Manifest next update: Sun 08 Jun 2025 09:00:52 +0000
Files and hashes: 1: hJAJ_2fxLLSusp_yruUvCu2AhDE.roa (hash: 9Kpyn4uPgVd5tG1Jy8HfdjJb9f0PP8lWG2o85Fi6t4g=)
2: izTw-SddmAZir7tsr__k25ycnUc.crl (hash: Lmp4N4EnW+tpG4+iQ188HUQ09CNi0tDUvmPq30cOmN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:16:4c:39:96:d3:dd:ad:62:39:1c:f7:cb:b4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Validity
Not Before: Jun 7 09:00:52 2025 GMT
Not After : Jun 8 09:00:52 2025 GMT
Subject: CN=8ce606a437dd40e29cef3ae71eee217f05f40500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:af:a0:6f:b6:42:3e:9c:5e:df:65:0b:36:bc:
c2:be:08:fb:1b:83:c1:05:9d:38:64:07:d4:a4:80:
03:d4:8e:85:7a:fc:f1:59:ee:b1:8e:13:ce:e7:23:
e9:f9:96:a1:0d:9f:e8:4a:01:8e:dc:c1:d9:80:a5:
a2:b2:9a:d1:dc:80:c7:23:de:37:08:83:13:e5:e2:
8d:2b:f2:95:39:17:b4:66:f7:2a:ad:c9:82:40:b9:
73:c6:d9:ea:89:0b:87:ce:4e:af:15:b3:52:4e:64:
e0:72:10:4c:39:1e:8f:d3:13:43:fc:80:86:bb:a5:
45:3f:c4:48:95:b4:2a:fd:94:37:74:db:1b:eb:73:
6a:ac:38:c9:5e:1a:d0:02:52:6c:89:c6:cb:af:48:
1d:a7:32:3d:be:30:79:7e:72:92:bf:ab:a4:c3:b6:
9e:97:52:4f:64:89:95:40:c2:1a:cb:37:c0:d4:5b:
4a:6a:c6:43:e0:58:48:f7:7a:ea:56:42:e4:86:dd:
db:19:30:5a:7a:1f:9a:db:b7:16:13:09:2b:be:65:
da:82:0e:83:01:ed:3d:c7:c0:6e:7d:f9:5c:3e:6b:
a8:33:ab:25:a9:17:bf:85:06:40:eb:81:d4:be:95:
f5:79:c0:b0:a4:a7:c0:a8:44:f5:fb:c0:a6:a0:2c:
63:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E6:06:A4:37:DD:40:E2:9C:EF:3A:E7:1E:EE:21:7F:05:F4:05:00
X509v3 Authority Key Identifier:
keyid:8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ed:ce:3c:ad:0e:68:7f:e0:84:c4:75:cb:82:fe:82:0f:2b:
22:57:63:a2:b3:48:04:15:90:c7:38:40:e4:30:29:7a:d2:a0:
9c:01:3f:c5:6a:73:47:da:44:e8:dd:e3:c7:2e:56:83:03:c6:
98:75:31:fe:7d:3e:9f:85:a3:7f:23:89:32:6e:2e:12:ae:5e:
c4:18:d1:3a:de:65:25:aa:7a:55:e8:cf:92:4e:0c:86:4f:05:
72:09:7b:89:46:b7:7b:23:40:dc:ec:33:72:69:cb:02:ea:2f:
fb:ef:c3:18:67:7e:31:21:c4:ca:3f:a0:6f:d5:b0:f7:63:64:
22:4f:2d:ce:89:48:93:64:31:d8:52:dd:0d:80:d2:cc:be:4c:
78:23:f3:1e:40:f9:61:75:4b:48:13:de:69:88:4b:41:d3:8b:
09:fe:75:9f:c6:19:61:d1:f4:44:30:a5:18:4b:cf:77:2e:e9:
f0:54:b8:fd:03:26:22:78:89:2a:8a:d7:df:f0:52:05:18:7e:
9b:4f:1a:aa:2c:62:93:3b:c3:98:f6:5b:5b:1c:9b:09:30:5e:
ad:09:c2:33:eb:ec:2f:5e:da:ee:51:78:5a:09:14:29:ba:14:
0f:ce:0e:67:c8:70:a1:ee:30:c2:84:81:5c:fa:78:00:a9:5b:
d0:b7:eb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:23 2025 by rpki-client