Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
File: IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft (raw, json)
Hash identifier: sIuVU/QIt2kLY2ONsvtAxYAqt9klThjUzTP3Lsen6/A=
Subject key identifier: 64:E5:A6:EE:4C:77:E2:2E:F3:16:B2:33:87:78:CC:C7:54:78:18:BE
Authority key identifier: 21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
Certificate issuer: /CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Certificate serial: 01974A7B2822A48ABC98A703153532752B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
Manifest number: 056D
Signing time: Sat 07 Jun 2025 13:01:14 +0000
Manifest this update: Sat 07 Jun 2025 13:01:14 +0000
Manifest next update: Sun 08 Jun 2025 13:01:14 +0000
Files and hashes: 1: IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl (hash: GXe1axqUkm1ACVgaJsMyLuN7R4to+5yNwRc7aPZsJjI=)
2: ZXtK8i0ZkTBxTFkF4gT8SCIZTmw.roa (hash: KikSjMlfZMQPJYB8hmRvlc00FrgqM6UWZDTUG/QEicY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:28:22:a4:8a:bc:98:a7:03:15:35:32:75:2b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Validity
Not Before: Jun 7 13:01:14 2025 GMT
Not After : Jun 8 13:01:14 2025 GMT
Subject: CN=64e5a6ee4c77e22ef316b2338778ccc7547818be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:b6:42:b0:b6:b8:96:c9:b7:e5:f8:01:1d:
30:10:79:a3:df:46:fd:ed:90:8a:ef:05:b9:af:ac:
b0:33:09:e1:76:a9:26:b3:e8:3d:1f:7a:f5:9a:d3:
c8:bc:68:4a:48:e6:a1:10:78:e1:cb:8c:d5:6a:40:
4b:2f:8e:54:fe:98:d8:23:6d:77:7f:64:90:45:78:
cf:41:84:7e:e8:79:10:16:ec:36:48:a4:f9:2d:45:
0a:3c:9c:81:57:9d:a6:63:71:67:6d:db:13:b6:08:
7f:9e:f8:36:ae:5a:9e:92:83:ae:88:59:8b:f4:3c:
37:48:21:a2:0a:b0:5e:d1:aa:c6:92:56:d6:71:2f:
9c:7d:4d:17:6b:df:20:a0:b6:df:cb:0d:e8:86:93:
1d:15:48:2e:04:d2:0a:41:e8:b7:7e:f3:27:b8:0c:
6e:8f:0d:0b:9b:52:ee:38:a8:12:7b:03:85:00:3a:
64:34:06:53:b9:06:0a:a9:f2:20:4b:dd:6d:7b:6a:
e1:34:b9:cb:3a:90:10:49:06:72:82:27:e1:50:0b:
d3:91:a1:a6:8b:6e:7b:63:94:7c:52:1b:68:66:2c:
e4:65:f8:5d:18:fc:4d:0d:11:b1:1d:5f:fd:e7:7d:
15:09:e9:fb:85:4e:91:64:84:ce:2b:b6:cf:e2:ab:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E5:A6:EE:4C:77:E2:2E:F3:16:B2:33:87:78:CC:C7:54:78:18:BE
X509v3 Authority Key Identifier:
keyid:21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a0:47:65:b7:4b:be:23:53:0d:63:3d:b0:02:27:db:4d:5a:
12:db:a6:7e:ec:d9:2a:59:65:55:04:03:e9:d4:26:c3:03:91:
68:da:bd:8c:2b:51:9e:d7:c4:63:f0:34:7b:f6:59:8c:a4:eb:
78:34:48:d8:bc:74:1e:10:04:14:a1:dc:2b:0c:50:c8:cd:e7:
64:5c:b7:32:2e:ba:90:e0:42:ba:82:ce:5b:60:e2:7f:4d:42:
b2:4b:ac:c8:d7:46:6c:e4:0f:7a:09:2b:97:3c:e1:50:ad:a3:
1a:b6:d4:49:f6:01:33:87:12:c0:4d:cf:9c:d0:7f:02:e0:64:
65:75:35:20:3f:59:cd:7d:a1:d4:3d:62:d2:02:57:42:12:82:
f8:6f:e8:98:92:ef:d8:16:fa:dc:fd:b6:05:fa:3d:47:e5:0f:
4c:77:97:9e:62:a8:0f:a5:b4:ed:1d:09:a3:96:f7:71:0e:41:
07:b9:83:5d:0a:58:4c:8d:f3:27:27:04:60:e7:55:25:26:8c:
94:8c:e8:7e:1d:33:86:f8:05:44:5a:7f:31:0c:17:17:51:db:
6b:87:f0:02:fc:b3:b3:13:e6:07:c9:57:18:0a:34:81:1e:f6:
3c:45:1e:df:10:e9:ac:31:f1:97:f4:f4:7e:dc:06:0d:e2:28:
41:e6:21:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:23:21 2025 by rpki-client