Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier: ps9s32q+qHA+ZtG6wM3+4G0E2Q2vcdSljQiLRM5jQZI=
Subject key identifier: 59:CF:34:03:3E:77:52:73:69:C5:18:32:08:25:BF:DA:DC:F9:B3:72
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 01974F32F62C397BDE8141AAECE18932D92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number: 133B
Signing time: Sun 08 Jun 2025 11:00:29 +0000
Manifest this update: Sun 08 Jun 2025 11:00:29 +0000
Manifest next update: Mon 09 Jun 2025 11:00:29 +0000
Files and hashes: 1: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: ESoY2ykhhZC04GhU6xKSAmjQqsmInPYxy5yR0ydjnDY=)
2: ZCDIooS_ImzZeN5QrbFaFhO5dyA.roa (hash: TP421izhVwKSZitQyZKTA1SgQgPy6vE7WxBJa4Db6y0=)
3: xOQ7AmZa9_C69z9KUz6w5PLIpQA.roa (hash: 8+VSRj7tw2mCh7Z/e6KhYhg5OTkoPLOgLEVa0Q5ZizM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:32:f6:2c:39:7b:de:81:41:aa:ec:e1:89:32:d9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: Jun 8 11:00:29 2025 GMT
Not After : Jun 9 11:00:29 2025 GMT
Subject: CN=59cf34033e77527369c518320825bfdadcf9b372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:22:cb:1b:b2:6c:dc:9a:94:ee:62:81:9a:
27:a5:cd:7f:bc:0f:a6:b1:cc:fe:d1:f3:9e:91:f0:
db:03:e5:8a:06:45:7c:d8:1c:c8:e4:be:89:5c:43:
9d:1e:7e:d2:9f:be:b5:ae:ca:ce:db:17:5c:a2:9e:
3c:02:81:1f:55:f1:0b:4c:67:8a:dd:de:3d:ed:e7:
18:29:12:9b:bc:a3:bc:a9:f9:ac:17:85:f8:a1:50:
d2:30:eb:ec:06:95:c9:2d:b2:42:ac:7a:a1:97:fc:
d5:9f:44:9c:52:25:a7:0c:00:9d:96:d3:3b:09:51:
65:f9:9a:43:dd:94:b8:49:ba:e1:31:c2:9e:6c:a7:
49:ef:6a:25:56:49:68:31:ea:e9:aa:77:16:c6:1a:
61:f9:5c:f1:91:f1:37:a9:ed:e7:ad:ab:b3:72:bf:
b6:32:11:0e:dd:f5:33:af:97:17:b3:e5:f6:63:37:
03:11:67:23:6e:65:d2:80:e9:00:01:c9:12:ed:7f:
51:9b:87:55:db:bf:fe:6d:33:11:a6:c2:6f:f6:8d:
ed:18:42:db:16:0c:28:33:bf:03:17:6e:3c:17:04:
fa:c8:83:45:c5:55:1d:7c:be:a4:9c:cb:f3:82:f9:
6c:8a:0a:9a:42:e9:1d:77:43:9d:d2:e0:ff:a2:39:
7f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CF:34:03:3E:77:52:73:69:C5:18:32:08:25:BF:DA:DC:F9:B3:72
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d7:ae:d1:f8:64:cf:8a:1d:57:7f:37:10:ec:6f:2e:f6:d2:
77:2f:e6:32:5f:8e:84:f8:a2:f5:18:3a:81:98:ac:5b:af:9c:
25:bb:e9:ed:05:c4:72:9a:31:df:1b:6b:ec:8e:0f:9a:ca:9a:
4c:5f:a6:c0:0a:02:69:fa:9d:4b:a6:db:9e:75:70:ac:77:e3:
7b:6c:42:c0:17:37:74:c5:05:1f:27:cc:7f:42:cc:3d:f6:12:
2d:2c:3f:89:52:c0:e4:8d:12:2a:e6:ff:09:29:4e:58:0d:52:
0d:d3:7d:0c:3e:35:79:8b:05:7f:65:42:06:28:91:e7:55:b0:
b3:d1:43:a9:d6:4a:09:4b:da:6f:b0:39:a2:84:95:04:f4:28:
14:1b:ed:03:00:77:2d:8d:e7:b9:c4:ab:13:e5:91:12:f9:e9:
36:ac:8e:e7:c4:ea:57:f5:17:70:41:61:bd:40:3f:75:88:a2:
2f:14:90:44:cc:89:39:19:4c:bc:a8:96:df:4a:b2:e0:79:b2:
5d:31:54:b3:58:d2:58:8a:25:0f:5c:e8:c5:86:c8:00:b8:a7:
20:f6:89:1e:3d:a9:61:84:16:27:55:2e:96:a7:c0:79:2d:21:
cd:48:1d:3a:50:91:df:bc:c9:86:d1:f3:b5:0a:1c:50:d3:2d:
ba:9e:af:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:48:25 2025 by rpki-client