Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: DVpVxidWPcWjbhaNabmVSFJqF0z+ZUDWrf2csN5Bh9s=
Subject key identifier: F5:8D:43:E2:40:01:54:CF:40:ED:C8:57:44:7B:25:93:C4:9D:9A:9C
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 019746303918BD53DBB3CF4B44B790DD693E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 17:00:54 +0000
Manifest this update: Fri 06 Jun 2025 17:00:54 +0000
Manifest next update: Sat 07 Jun 2025 17:00:54 +0000
Files and hashes: 1: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: sPR64/hu0zusXVOWo/iKwqs2p0U8adt1ygcVVGZ96mg=)
2: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (hash: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:39:18:bd:53:db:b3:cf:4b:44:b7:90:dd:69:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Jun 6 17:00:54 2025 GMT
Not After : Jun 7 17:00:54 2025 GMT
Subject: CN=f58d43e2400154cf40edc857447b2593c49d9a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:8b:a6:24:d8:c3:e3:54:fb:65:ca:6c:d3:
78:c0:4d:23:9b:71:19:15:91:01:ae:64:63:c0:c6:
5f:1b:64:6c:e5:c4:f9:45:1c:5e:28:a6:49:fc:1e:
d0:3c:a8:4f:6e:0f:a2:88:c1:1f:a6:5b:4e:fe:36:
ea:35:f2:fb:3f:5f:f6:00:fa:ef:52:22:fc:7d:79:
bf:8a:cd:c8:4c:81:26:64:1a:70:58:9b:77:0f:6b:
b8:e2:0c:de:20:e5:da:8b:d2:b1:b7:f8:84:f9:a0:
57:e8:f8:0e:84:ed:44:77:eb:37:77:f9:53:53:87:
ff:cd:6d:aa:2b:72:fe:52:23:90:35:3b:61:4f:74:
02:25:07:ef:9b:67:c5:19:f1:cb:da:96:24:2e:a2:
8d:26:6c:10:14:20:18:c9:3b:5f:bf:6b:c6:36:db:
0b:87:90:69:63:b5:2c:d3:9d:a7:99:34:ed:73:94:
45:9e:f6:e3:08:03:9e:91:6e:60:bb:ff:c9:d2:02:
61:f6:c4:af:22:52:eb:70:23:f0:7a:93:6b:c3:ff:
c0:dc:49:15:75:76:e5:a2:79:0c:2e:c0:28:d4:14:
7b:bd:40:d9:58:49:87:4b:21:a5:f1:53:16:e4:a5:
c1:0a:4b:57:67:8b:e5:8a:9e:76:13:62:e5:c1:3f:
55:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8D:43:E2:40:01:54:CF:40:ED:C8:57:44:7B:25:93:C4:9D:9A:9C
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e2:a1:c3:b2:ab:ca:f6:5e:4b:30:62:ed:f3:41:ed:1b:15:
88:df:ad:46:5d:d1:10:f5:1a:bc:b9:27:0f:d9:a4:11:6e:52:
a0:c2:1b:52:eb:da:32:b0:a2:f8:b2:26:bf:aa:1f:c9:d5:8b:
77:b4:3c:d3:bf:47:68:a1:ff:e5:6d:8d:18:d6:08:f3:d5:72:
8a:23:9a:7b:7a:9b:1b:24:8a:92:0e:5c:66:f6:3d:69:fd:fd:
cb:2c:81:5e:7b:9e:e6:c9:2a:4a:68:b5:39:c9:80:44:e6:c4:
9d:a7:c1:4f:86:ca:13:e3:12:e2:d4:00:46:3d:e2:2b:38:41:
22:ae:0f:54:fe:b2:08:e7:9b:81:99:44:e3:29:74:7a:3d:b3:
01:32:03:d2:e0:ca:34:57:08:c1:6d:13:66:85:b6:23:89:a9:
d9:3e:66:ce:f2:1b:42:8c:80:b4:c9:97:d5:dc:72:a6:a9:db:
ac:60:23:9f:8e:ac:1f:bb:dc:a3:3c:67:b0:82:25:c5:7b:d9:
7d:00:b3:0a:2a:99:7d:fc:cb:f5:0f:bd:44:62:10:dc:8d:b4:
a7:3b:87:8d:46:17:34:ca:cb:26:28:3a:01:76:31:db:12:be:
fa:f3:d2:86:40:e7:88:81:49:2c:fb:ff:56:d7:db:f8:b1:03:
87:4c:a6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:41 2025 by rpki-client