Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
File: i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft (raw, json)
Hash identifier: anhFbdYflhD6t/IGIzJyz4Dxo0QaEuEbPouIFTnSDYY=
Subject key identifier: 72:2B:7B:29:B6:E0:8C:F3:1E:92:F8:B5:6B:A2:8C:91:88:2B:90:19
Authority key identifier: 8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
Certificate issuer: /CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Certificate serial: 01977007BF3DA0678AA245F8D65901D1D6B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 20:00:45 +0000
Manifest this update: Sat 14 Jun 2025 20:00:45 +0000
Manifest next update: Sun 15 Jun 2025 20:00:45 +0000
Files and hashes: 1: i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl (hash: qR8oGG/wfihYNe+Dw5ywbvwrykxqtCWJ6B4LhOWGQP4=)
2: rZl7il51Qi4Gx_nmvEJg-3TLGKk.roa (hash: IPdBuWhuBJNo3ThX3cWTYn6XuZdtQY1uz610IBEtgfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:bf:3d:a0:67:8a:a2:45:f8:d6:59:01:d1:d6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Validity
Not Before: Jun 14 20:00:45 2025 GMT
Not After : Jun 15 20:00:45 2025 GMT
Subject: CN=722b7b29b6e08cf31e92f8b56ba28c91882b9019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:fe:d5:41:06:01:14:79:7f:fe:15:8e:af:
cd:95:ea:60:c1:02:41:01:32:75:b9:16:13:37:cf:
f8:d2:42:c6:a1:93:e0:d4:ec:fd:2e:1f:04:c9:ce:
e0:da:4e:23:65:00:08:68:64:e9:4b:8d:d9:42:ee:
b2:51:04:1d:c9:92:b1:8f:97:5b:88:b3:b4:74:cb:
0f:a2:50:f0:04:bc:ee:b4:38:e1:aa:ff:5b:16:a5:
ce:a2:74:e9:93:05:99:83:75:22:7e:37:7e:8b:b5:
c4:94:15:ad:b6:77:ed:ee:bd:40:e3:d3:36:70:e4:
39:78:f2:cd:26:c7:21:65:fb:00:75:f4:69:0d:a8:
b9:f5:61:92:4d:f0:5c:f2:a0:c0:41:e0:e8:66:6b:
31:b4:6b:f3:b4:78:52:eb:9b:3c:20:11:78:b8:d6:
0a:f0:38:9d:78:13:3b:1c:88:b3:b3:15:3a:a1:2a:
86:73:2f:e4:f2:63:21:b9:0a:df:2c:da:e7:ed:a2:
f1:f4:35:9b:5c:12:d8:c8:ae:8f:ae:0e:31:40:fd:
ec:8e:9b:23:df:5a:77:3c:76:0c:13:14:82:33:0f:
98:90:fe:ba:68:5f:c5:e2:8f:15:a3:32:21:e9:a9:
77:54:13:cd:fe:6e:9e:a3:81:b7:5d:95:ec:53:fb:
8b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2B:7B:29:B6:E0:8C:F3:1E:92:F8:B5:6B:A2:8C:91:88:2B:90:19
X509v3 Authority Key Identifier:
keyid:8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:42:70:77:5f:1a:2f:4f:69:a6:ac:8d:29:9c:ca:a4:92:a7:
b3:51:32:4b:e0:08:3b:22:31:cc:68:bf:48:8b:6b:90:90:7a:
ed:13:40:f6:c8:86:46:09:6b:a0:18:29:93:5b:a2:ed:38:b4:
d1:f7:7f:34:bd:62:3c:29:8e:64:72:b3:f2:5e:77:40:aa:9f:
ff:f6:a1:d0:99:77:44:73:30:05:03:8f:56:c5:ad:dc:c4:18:
03:4e:17:76:1f:e1:14:a6:0d:10:4a:61:a1:b2:ef:34:e0:3c:
6c:95:29:4b:55:14:f5:77:09:24:93:80:a4:b1:aa:77:ae:52:
80:91:b6:0e:5e:33:bb:22:77:c9:07:b8:c9:22:d9:18:ea:8b:
33:b7:80:09:dd:4f:0f:d6:ee:95:19:3b:15:26:de:e1:64:82:
dc:a0:8e:ac:ae:40:f5:4e:fe:28:02:e3:ac:24:b6:7e:d2:cf:
30:c8:df:24:bb:57:ff:5a:90:c9:be:c1:32:61:d3:51:89:ac:
14:94:93:9f:25:b7:27:9d:e9:a8:07:ad:fe:2f:22:a4:4b:9e:
89:32:84:63:93:d9:e5:eb:6d:45:cd:b8:a9:8e:3d:c5:ef:e9:
00:b8:d4:95:12:78:65:19:f0:1b:c0:21:06:66:bf:f5:7a:61:
0d:37:4e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:50:07 2025 by rpki-client