Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
File: IW66tPRvJU2V9JZbhKjPJBlrnJU.mft (raw, json)
Hash identifier: by42q0PSSk75BYNmxMGQm8HbmH3ee1A/APa3FxtHLmo=
Subject key identifier: 8D:13:CA:31:22:A7:E2:65:DB:9D:0E:11:22:BE:12:AA:90:57:71:67
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Certificate issuer: /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial: 01974DE9A0C0803DC81C25E87897AB942951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
Manifest number: 0498
Signing time: Sun 08 Jun 2025 05:00:46 +0000
Manifest this update: Sun 08 Jun 2025 05:00:46 +0000
Manifest next update: Mon 09 Jun 2025 05:00:46 +0000
Files and hashes: 1: IW66tPRvJU2V9JZbhKjPJBlrnJU.crl (hash: XFZAhoS6zItXAHOl9Q8d1RLafAUwpeSYuYyU/15J7/c=)
2: jevuz_hOgaa6W3MBuj-Sool4n-A.roa (hash: US9acN1N+sUj9TGOZu9sAfJQOkLuvKlT0/RKaeqAgXI=)
3: luM_lJTE2hly8-J3vWjwvVwVcis.roa (hash: GZ+X8TMn7AtOBR08KIlVoGK4dcs2JQzhXXW1m64U66U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:a0:c0:80:3d:c8:1c:25:e8:78:97:ab:94:29:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Validity
Not Before: Jun 8 05:00:46 2025 GMT
Not After : Jun 9 05:00:46 2025 GMT
Subject: CN=8d13ca3122a7e265db9d0e1122be12aa90577167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:cd:24:93:8a:b6:bb:c7:9c:fb:88:31:46:
1a:f7:fd:a7:95:8e:12:0b:2d:0c:30:9d:66:81:f9:
58:93:31:69:59:6c:a2:31:a2:c3:96:8a:1b:fa:d5:
7e:e7:5f:e7:47:11:b2:ff:cc:76:bf:02:bd:ae:d6:
8f:51:5b:d0:6c:59:01:e7:11:5b:95:66:f6:71:a0:
63:d5:3c:71:ef:e5:55:c3:89:34:80:13:01:40:9b:
dd:ec:76:08:4d:fa:a6:d1:5c:a3:6c:28:99:19:28:
ff:1f:57:17:a6:be:f5:33:f6:8d:35:67:c1:85:69:
26:b8:cf:34:96:62:15:24:d7:00:4e:b5:a6:96:c5:
d1:bf:ff:62:42:36:96:55:38:2d:e0:c0:f3:f3:b5:
e7:43:1f:34:9d:2a:32:b7:0a:c5:5f:91:a1:99:ba:
f3:e3:6b:5e:ef:a3:d6:60:74:7d:7a:bf:76:79:65:
c0:15:75:f2:95:45:f1:65:17:ef:6e:e6:6d:1a:f5:
7b:19:c7:69:4d:20:99:9f:27:2d:5a:82:80:04:5d:
3f:6d:d7:eb:a7:82:dc:0a:90:ad:0c:f2:60:3b:6e:
da:02:25:8f:a8:90:f9:ff:a6:1b:6f:62:e2:7b:b5:
90:1c:4b:d9:c5:19:8b:ab:da:c5:83:34:be:c7:4f:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:13:CA:31:22:A7:E2:65:DB:9D:0E:11:22:BE:12:AA:90:57:71:67
X509v3 Authority Key Identifier:
keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:48:f8:d0:c2:69:66:00:90:90:eb:98:a0:77:48:9b:3c:40:
4c:ba:b8:69:26:b8:08:77:83:f3:03:e4:3c:6c:7e:18:6f:b0:
da:7f:8e:5c:f1:36:9f:11:1e:a2:d3:03:01:fd:d6:e8:67:1b:
37:68:57:12:28:2d:92:2e:ba:e8:b3:70:e3:cd:d3:05:58:71:
80:50:8c:96:58:32:d2:78:c1:dc:74:13:97:f3:64:bd:73:30:
4c:73:3f:68:9c:dd:2e:bd:b7:db:38:eb:e7:02:18:95:ae:7b:
94:bd:4d:95:8c:7c:98:7a:8f:c2:65:a3:ea:d4:8d:bf:b6:d7:
2f:fb:71:49:3e:0d:3b:42:81:1c:0f:dd:93:c5:95:18:17:7a:
19:ec:d7:a6:2f:e0:60:be:0d:0e:d6:61:ec:fc:21:ec:f9:56:
d7:6c:33:16:f2:e4:41:cc:e3:ff:8f:32:30:2c:5a:84:45:e9:
49:4b:5c:c4:80:c9:f1:01:66:e8:9d:8c:1d:00:42:6e:b6:fd:
c3:d9:a6:d7:c6:cf:59:8b:3e:f0:56:0d:a1:91:50:f3:43:8b:
1f:7f:dd:e4:61:60:64:24:2e:62:67:cd:e1:28:7f:82:6d:68:
7d:ae:7e:62:2f:4b:05:70:db:e1:21:24:8f:27:b0:72:dd:ae:
47:47:ce:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:22:39 2025 by rpki-client