Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json)
Hash identifier: CUmdVPau0PfHINh5j7xcbquKdWNv1q3xCkNY1Ff4YsU=
Subject key identifier: B5:38:ED:41:E0:81:42:BC:09:6A:1A:1F:F5:09:D4:00:E7:E9:E2:38
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 019763955ADE3DF0C9DEA74E550EA35A8019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
Manifest number: 049D
Signing time: Thu 12 Jun 2025 10:00:21 +0000
Manifest this update: Thu 12 Jun 2025 10:00:21 +0000
Manifest next update: Fri 13 Jun 2025 10:00:21 +0000
Files and hashes: 1: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: qO7BoD4Y1qTCo9hZgqSVEVOcDiAK00Yp1Nkw1PkW3NA=)
2: bMgRIHfe9czZPsPUKpcmfdHESeA.roa (hash: xt+uVWCgpmniCKO9lfh4KPFwtigjOiclhRJVmau9h3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:95:5a:de:3d:f0:c9:de:a7:4e:55:0e:a3:5a:80:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Jun 12 10:00:21 2025 GMT
Not After : Jun 13 10:00:21 2025 GMT
Subject: CN=b538ed41e08142bc096a1a1ff509d400e7e9e238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:fe:e9:42:89:28:0a:56:29:2a:71:ba:63:
12:49:bc:f4:9f:88:66:a3:18:4b:7d:03:cd:a4:da:
7d:f2:ab:ce:f5:76:be:70:7f:54:ec:de:bf:a2:34:
a4:0e:c4:34:4f:96:1f:85:1a:09:8f:b4:82:a9:11:
db:76:25:e1:0f:53:66:03:59:d6:c0:fc:24:31:d6:
92:af:26:ab:16:b2:1a:fc:b5:56:1d:14:ea:7e:26:
c6:d8:fa:52:fb:23:7e:c2:40:42:9b:0b:f2:84:b9:
3d:ec:e8:ca:ed:12:90:e5:e5:39:08:f0:e9:4c:e1:
b1:a4:4e:b7:1f:0c:92:40:a6:95:6f:92:ee:94:56:
af:a9:68:73:e4:b8:a8:ea:78:1d:19:fd:6c:58:59:
db:17:43:47:7b:4d:34:5c:91:10:d7:28:05:df:7c:
71:28:fa:e1:a4:ef:1e:47:cc:08:f7:7b:63:f7:18:
9e:ad:e1:5e:18:86:47:db:c5:5a:d5:93:5f:24:a5:
8c:49:61:94:8c:61:b9:85:51:c2:ed:f6:71:13:7a:
cd:1a:58:b0:6f:02:5d:fe:df:96:ae:92:df:47:fe:
01:ed:9e:34:49:c5:69:1d:76:8c:f6:fd:65:16:20:
14:b6:56:63:8f:90:00:eb:f0:55:48:c6:2f:d3:19:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:38:ED:41:E0:81:42:BC:09:6A:1A:1F:F5:09:D4:00:E7:E9:E2:38
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:25:20:e8:13:21:a3:66:8b:cd:08:9e:9d:f1:92:54:97:5b:
74:db:62:d1:ab:61:21:13:f7:d1:cd:4b:f5:e6:c4:20:b7:b9:
c9:38:1e:98:bb:76:c4:a4:cc:a4:c2:53:a8:9d:7c:ba:9f:62:
60:03:5c:69:55:b1:1c:58:20:b3:da:2a:79:41:05:a7:6e:13:
03:7a:97:f0:28:2b:d9:33:15:fb:ab:b4:6b:9d:e3:15:fd:b6:
42:60:bc:03:e1:c6:3e:59:3c:9c:36:ec:ad:19:77:23:62:dd:
39:da:68:9c:17:0b:05:94:1b:03:c1:4e:c9:9a:76:a3:f5:83:
ea:6b:a0:aa:ad:cb:fc:f9:38:af:96:11:6c:ce:8b:d8:3c:7e:
6a:44:66:17:8d:f3:dd:28:7d:37:a9:8d:1f:fb:56:ac:03:c0:
7a:4d:b2:ef:e4:8c:55:60:99:44:68:dc:bc:ef:1e:84:91:14:
e2:3e:04:f1:cf:45:34:6c:aa:a6:c1:31:42:2b:90:9b:65:7f:
37:47:2c:b8:b1:04:a3:aa:98:39:bc:e0:f6:84:ab:e2:9d:ee:
2f:b0:aa:c2:4b:50:a7:24:56:83:64:20:25:48:2b:7c:f4:2f:
ff:ce:dd:d8:f7:96:4e:a4:b0:6c:e1:09:51:72:4a:28:5d:7f:
d8:76:4c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:44:26 2025 by rpki-client