Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
File: IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft (raw, json)
Hash identifier: EWF31hBF6yFRDs+ixpmHbjKA2retxEP4eYBL2uEMGkM=
Subject key identifier: 71:B4:B6:94:04:B1:BF:98:34:77:CD:C4:70:B3:50:C8:79:E8:39:62
Authority key identifier: 21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
Certificate issuer: /CN=219885ea020e65006314ee9480def3b3efc039e3
Certificate serial: 01974CD7388E83F7765B0B64DA57699CAA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 00:01:02 +0000
Manifest this update: Sun 08 Jun 2025 00:01:02 +0000
Manifest next update: Mon 09 Jun 2025 00:01:02 +0000
Files and hashes: 1: IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl (hash: bejAbZYWCemIJyB7t8t2OttYdxq42SNxytsnQggkWPM=)
2: mcM8_9lyrTG-MMDFjvFoLzh0EcU.roa (hash: wA7gawHVSiIwq+RZjpXudHmsZpXyv8YQLjD76SZRvpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:38:8e:83:f7:76:5b:0b:64:da:57:69:9c:aa:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219885ea020e65006314ee9480def3b3efc039e3
Validity
Not Before: Jun 8 00:01:02 2025 GMT
Not After : Jun 9 00:01:02 2025 GMT
Subject: CN=71b4b69404b1bf983477cdc470b350c879e83962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fb:dc:30:98:69:00:c7:ad:14:8e:15:25:c8:
fa:3f:ec:dc:e7:eb:ee:10:2a:6b:16:82:a1:c1:c8:
c0:3e:65:99:87:81:a3:a5:ad:8d:36:10:41:6e:fe:
5b:05:ff:9a:a3:c2:9f:05:da:79:8a:df:2c:0d:00:
dd:10:e5:a5:d6:90:f2:3b:2b:5e:3c:8a:2d:d8:f3:
f8:dc:13:75:bd:9b:a2:0f:63:d1:9d:9c:28:5a:2b:
41:06:98:b9:7a:5c:b3:02:c1:56:29:2e:5f:6c:17:
55:aa:87:b2:55:9e:19:be:4c:71:b9:da:21:1d:51:
85:12:6e:a1:74:86:5a:f1:d5:fc:d3:3e:1c:d2:00:
81:e3:5a:55:dd:a5:e4:92:2c:a2:f5:7b:74:60:71:
57:69:fc:68:7a:35:fe:a7:9c:0b:a7:c6:95:8c:2f:
62:ab:06:6b:b5:26:a8:e5:e7:8d:8e:ea:70:79:e9:
4e:b3:2b:07:ed:e8:32:2f:a0:9e:16:89:af:04:9d:
0b:3d:95:9f:ec:a0:ae:ea:61:ab:d2:e7:8c:6b:c1:
79:6e:9a:af:e8:97:ee:6d:fe:8e:3f:f7:82:81:7f:
69:2c:db:a4:6d:48:0b:a3:d7:d2:1e:5a:d3:1c:d3:
65:68:1c:64:46:a1:8c:f0:bc:db:dc:ce:05:83:2b:
34:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B4:B6:94:04:B1:BF:98:34:77:CD:C4:70:B3:50:C8:79:E8:39:62
X509v3 Authority Key Identifier:
keyid:21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:08:90:61:f8:a2:40:ed:7f:26:84:db:2a:8a:e1:4a:c7:6c:
5e:96:91:81:fd:28:62:d1:85:a6:5d:af:79:fe:f2:0f:23:bd:
4e:b3:d1:e3:ed:89:8f:de:90:bb:87:8f:d3:b0:3f:52:c5:e0:
75:fd:df:8e:c1:9b:86:16:98:69:40:ee:e0:6c:0b:a8:d8:93:
a1:48:f5:0a:bc:80:9c:fa:e9:39:db:9b:fd:7f:47:1b:d7:24:
1c:ec:36:ab:93:23:66:a9:1f:b3:7e:30:f5:58:af:b5:c3:a6:
1b:40:c0:c8:80:95:21:14:25:08:bd:65:0b:a5:be:e3:1a:46:
87:5b:26:d7:3f:69:71:7f:70:db:28:b5:d6:e3:e2:9b:b7:cd:
49:c7:fe:17:2c:98:2e:cd:d8:3f:1c:0c:e0:32:58:bb:c8:38:
44:89:c9:02:84:5b:63:d2:64:05:0b:4b:b1:85:9b:a4:b2:52:
85:78:e8:97:ba:5f:3f:cc:dd:5e:a3:2f:ee:cb:82:3f:a7:2e:
f2:80:4a:07:da:29:c3:3c:90:67:16:18:9d:88:2d:0d:4d:d5:
d3:fc:4b:56:c4:f9:33:84:4f:23:2d:45:18:ba:8f:dc:14:07:
d3:3c:cd:14:2e:29:98:d4:e1:c7:c0:2a:74:b6:3e:17:59:ce:
0d:b7:5e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:13:31 2025 by rpki-client