Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
File: I_IQvBU0utwI_5R9mTUEcRk1MbM.mft (raw, json)
Hash identifier: H8k+MuD7zlFTd3fw/eDPnTKsXU8h6+yLZF2muXPHlg0=
Subject key identifier: 63:30:F7:08:A8:F9:EB:D4:DF:75:B2:25:46:A3:FF:BD:87:9C:35:EF
Authority key identifier: 23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
Certificate issuer: /CN=23f210bc1534badc08ff947d99350471193531b3
Certificate serial: 01974C9FD68EAA78AF3D0595116CB21344DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 23:00:32 +0000
Manifest this update: Sat 07 Jun 2025 23:00:32 +0000
Manifest next update: Sun 08 Jun 2025 23:00:32 +0000
Files and hashes: 1: IQl4HNXKSWovo0ppYzsGnJqwUZ0.roa (hash: I1ThZylWt52H2yyPu4akWSun+BojCZr3Y+wXTnrpft0=)
2: I_IQvBU0utwI_5R9mTUEcRk1MbM.crl (hash: 9Z/DehPZhscE/TUneCf2MLUxNrushrYwgO6+Kf1Ci9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:d6:8e:aa:78:af:3d:05:95:11:6c:b2:13:44:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f210bc1534badc08ff947d99350471193531b3
Validity
Not Before: Jun 7 23:00:32 2025 GMT
Not After : Jun 8 23:00:32 2025 GMT
Subject: CN=6330f708a8f9ebd4df75b22546a3ffbd879c35ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:68:bf:15:73:c2:cb:00:0d:c4:01:d3:54:
45:0f:40:40:2d:ae:8b:b9:85:3e:ab:73:63:f6:46:
83:1f:d2:59:a8:dd:ea:a6:17:e0:7a:1f:c6:49:76:
d7:11:5c:97:72:b5:d4:53:e9:22:21:78:75:04:90:
92:37:0a:a6:b4:91:c0:4c:25:15:d3:45:65:e4:2f:
25:c1:68:82:15:2c:59:23:70:40:9a:30:45:61:a2:
96:1e:4a:09:08:42:ce:61:7c:47:83:46:3f:ce:35:
43:36:88:5c:28:6d:8a:f8:c8:9e:9d:f4:fd:22:23:
10:25:ba:d1:ae:ab:0d:2d:c9:13:5d:ba:b0:93:23:
f5:2f:f9:f0:28:9b:31:f9:cd:da:b4:ae:0b:91:21:
6d:58:27:68:58:da:e0:a4:10:89:db:1b:50:fe:d4:
a1:e3:e7:b9:93:c5:30:7a:5b:b3:8c:96:1a:95:73:
b5:bd:0e:3a:e6:b2:34:8b:f3:1d:67:72:5e:c1:ec:
04:8b:11:9b:d7:42:64:fb:1b:9a:b1:8d:e7:58:f0:
d2:4f:3a:bd:ce:9b:d7:73:5d:ea:4d:67:54:a9:dc:
55:41:a2:3e:8c:77:e2:35:ab:e8:3c:ce:6b:57:8e:
2d:00:52:56:b3:ff:a1:4a:e4:b0:2e:be:be:24:ce:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:30:F7:08:A8:F9:EB:D4:DF:75:B2:25:46:A3:FF:BD:87:9C:35:EF
X509v3 Authority Key Identifier:
keyid:23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:54:9b:12:93:0c:8e:e2:09:48:b5:f1:b6:09:18:ae:b2:89:
c4:69:0d:3b:90:18:c7:14:ec:12:b4:32:e6:a6:96:58:8e:87:
62:96:b5:11:40:cf:86:8c:64:7e:ad:b0:5a:88:bd:d0:73:e1:
1d:51:c5:a0:8c:99:0e:36:71:6e:08:ef:d4:16:1a:e1:d7:72:
50:60:f4:4a:55:72:27:25:db:d5:4b:8c:f1:4c:34:08:9c:b0:
fb:85:99:2a:03:b2:2e:66:d4:65:d1:3d:f2:da:ec:c6:31:e1:
33:9a:e3:92:e5:27:dc:21:08:f2:c0:43:16:ae:ff:23:22:1c:
43:ec:7d:dc:06:4a:91:da:5d:fa:8e:de:29:24:7c:90:15:ce:
2c:9e:09:e5:ce:59:87:28:fa:82:ce:94:d6:4a:3d:6e:48:77:
1a:79:b6:8b:f9:36:4c:50:22:e4:8f:6d:7b:46:6f:4e:74:d0:
45:0a:9b:4b:a6:9e:fb:49:84:38:47:d2:c9:a0:5f:26:83:a6:
55:f1:13:92:25:63:54:74:b1:5f:3d:9f:70:52:ff:d0:99:f8:
4f:e7:67:cf:9e:f3:0b:92:4c:76:d2:5e:94:df:e8:bf:9d:ef:
18:8f:ef:fa:8f:8e:dc:76:f5:34:0e:f0:10:3c:c6:62:ec:f9:
5b:4b:21:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:27:25 2025 by rpki-client