Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: t+QqPDSZf3OGX7Mhz1xH+o2p2jUAa6BOlul5tWHuMAU=
Subject key identifier: 48:E7:C1:5E:66:29:B1:4B:E9:EA:6C:64:02:73:83:F8:81:52:7D:15
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 01974B8D5B66F854D6EC9FCD547BA1859AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0BF9
Signing time: Sat 07 Jun 2025 18:00:44 +0000
Manifest this update: Sat 07 Jun 2025 18:00:44 +0000
Manifest next update: Sun 08 Jun 2025 18:00:44 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: K79ChodrKT9jftgVN7th2UUgEPuT9VErDJVj9dz1+LY=)
2: efjuARdCpmdiyPaUU3_AH5I4td0.roa (hash: 4c8sivagBq88/iXFQqILtQVXJqZtsZ5vEblRM7AxfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:5b:66:f8:54:d6:ec:9f:cd:54:7b:a1:85:9a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Jun 7 18:00:44 2025 GMT
Not After : Jun 8 18:00:44 2025 GMT
Subject: CN=48e7c15e6629b14be9ea6c64027383f881527d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:3c:8b:91:79:9e:0f:04:d0:a5:5d:4b:c8:
28:5d:f8:1c:f0:6d:cb:3f:8c:28:62:4f:0e:96:da:
32:4e:fa:df:64:95:c0:fd:75:e7:50:bf:1e:07:13:
3c:3b:2c:7f:1c:f0:da:b1:a7:00:d6:b7:e6:6e:8b:
93:ee:68:f8:d4:7d:c3:b0:34:1c:f9:fe:45:41:4f:
3f:2e:b1:48:39:98:57:47:b9:b2:f8:63:d2:e9:64:
01:4e:a4:98:ce:33:04:7f:62:fd:c2:eb:8d:34:fe:
1c:de:be:1d:aa:9a:3b:d3:d8:33:a3:11:5f:54:39:
4c:f0:e7:38:65:21:c7:0a:45:62:3e:61:d0:5d:26:
e6:4d:c3:a8:49:7f:03:de:f2:4a:66:e3:11:0d:1c:
83:8a:5d:4d:12:e7:30:41:29:97:13:45:57:5d:a8:
38:cd:e0:b3:da:ee:eb:86:8b:25:29:08:df:7e:89:
72:aa:98:b0:75:63:d8:b8:1a:09:52:e4:4e:21:23:
2b:20:08:fa:67:e6:97:e2:1d:d4:02:1e:8c:4f:b1:
a2:81:78:7f:33:98:3b:e9:59:b1:69:bc:ae:40:e8:
42:5c:38:29:f5:93:ea:6a:a5:12:22:d7:69:73:63:
d3:fb:ba:d3:e9:5d:17:76:a0:15:ea:8d:0a:1e:01:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E7:C1:5E:66:29:B1:4B:E9:EA:6C:64:02:73:83:F8:81:52:7D:15
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:30:86:e0:65:f6:d5:65:6c:9b:c5:fa:9f:48:67:5f:93:20:
43:08:36:24:e5:ad:0a:71:9f:0d:1a:45:58:73:2d:8e:70:ef:
d2:74:9b:92:35:ae:0d:77:b9:45:07:09:5c:97:8a:80:c8:ec:
6c:87:4b:3f:bc:6e:4c:00:7d:94:01:d1:eb:7b:0a:f9:61:6e:
ec:44:d9:71:10:2e:4b:84:f0:4f:c2:35:7a:2d:01:c8:69:97:
2b:97:e7:28:3c:12:54:9d:0a:e3:0a:25:62:34:4d:e4:03:8b:
3b:dc:05:c4:42:53:ce:e9:bc:9a:1c:31:96:2d:cc:57:08:db:
d6:83:e9:80:83:3c:ba:bb:89:47:2d:5b:ee:1b:97:08:e6:c0:
9f:9d:21:97:41:38:32:ac:da:06:f0:0d:4a:c4:7a:5a:02:73:
90:2e:44:f2:9f:b5:60:5a:29:0b:59:b7:1f:e2:19:c9:39:e4:
8e:cb:f6:66:dc:5c:04:b3:80:f5:1b:3d:af:fc:e5:75:01:60:
a9:aa:7b:80:29:e2:f9:5c:d6:2c:f5:5f:58:3b:98:ed:af:aa:
ab:6a:36:e6:61:bc:7e:28:8a:f6:5a:f3:ff:c9:04:0f:f2:f4:
76:14:b0:79:d2:84:7c:09:79:4d:9d:30:6b:7f:18:23:aa:3d:
e6:da:bb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:29:59 2025 by rpki-client