Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
File: IEmVw2J_eqzf4jkV5ELj05AGMa8.mft (raw, json)
Hash identifier: WjUUhJOjZtZ2o05GxVEIW9ArL5PlTCVG3o3OBui5gp8=
Subject key identifier: D0:FF:C4:02:3E:E7:9D:2D:93:C3:70:D7:2F:D8:78:75:45:05:C0:E5
Authority key identifier: 20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
Certificate issuer: /CN=204995c3627f7aacdfe23915e442e3d3900631af
Certificate serial: 019758DB4E0D14FBE7DB708C6520400F0735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
Manifest number: 0632
Signing time: Tue 10 Jun 2025 08:00:56 +0000
Manifest this update: Tue 10 Jun 2025 08:00:56 +0000
Manifest next update: Wed 11 Jun 2025 08:00:56 +0000
Files and hashes: 1: 9-7PXLkycA5xYo3u8CzH5ezxMXA.roa (hash: LxSeuXbVik2u1NmfM2g79qr+/r9wrH4InvPIstg23Fs=)
2: IEmVw2J_eqzf4jkV5ELj05AGMa8.crl (hash: FAkPvpzX+7DnMCYmIzBeRMcM0n1iKQiQKl/CVbJlB4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:db:4e:0d:14:fb:e7:db:70:8c:65:20:40:0f:07:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204995c3627f7aacdfe23915e442e3d3900631af
Validity
Not Before: Jun 10 08:00:56 2025 GMT
Not After : Jun 11 08:00:56 2025 GMT
Subject: CN=d0ffc4023ee79d2d93c370d72fd878754505c0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:23:01:aa:26:1d:60:8a:36:0a:35:8b:be:
e7:5f:3c:92:e5:81:4c:58:7c:34:4f:6e:fc:9e:3d:
1b:c5:50:89:2e:ec:6a:56:69:b9:27:81:5a:e3:5b:
e2:6b:ae:8f:b6:7f:38:4f:ca:6a:26:b1:5e:0c:80:
8d:57:bf:4f:0b:48:05:21:0d:d8:43:44:80:82:db:
83:47:33:1f:51:75:39:3f:1e:a9:c7:47:69:d6:cc:
be:de:b6:d1:da:f6:61:31:07:8d:65:c6:79:2b:d0:
19:d8:f5:1a:63:7e:f5:07:a3:d1:ab:15:4e:e9:d6:
aa:8b:49:af:ca:4d:28:ef:9c:e6:47:21:a8:e8:54:
b2:57:d0:c8:0a:36:83:13:3a:22:b6:e9:f2:0c:ea:
24:ad:44:75:cf:86:52:d2:bd:d4:2a:9d:52:7e:18:
ce:36:fd:c8:e8:4c:06:28:68:2f:2c:92:97:32:2d:
a3:c8:a9:25:e7:7e:c9:26:ab:91:5f:16:54:e6:bc:
f0:d6:1b:69:9e:a0:14:b0:e3:ba:20:99:6e:1b:c3:
44:e1:63:5e:40:04:19:d8:4b:42:03:f0:be:6a:b8:
19:57:2a:80:2d:9d:c4:6c:2b:87:24:2e:5d:b0:63:
31:a6:4b:ed:5a:ad:52:98:09:d5:df:21:e1:2b:1a:
12:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FF:C4:02:3E:E7:9D:2D:93:C3:70:D7:2F:D8:78:75:45:05:C0:E5
X509v3 Authority Key Identifier:
keyid:20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d3:c6:44:de:00:f8:28:1b:0b:0d:b0:35:d8:eb:14:57:31:
42:ab:df:c9:dc:9e:c1:2a:3f:c2:9b:8b:19:c8:d9:fe:6b:6e:
c9:18:c8:d4:80:64:dc:3d:3c:23:a4:fc:d4:c7:d3:6d:d1:52:
48:60:13:5b:e2:80:fa:0a:64:22:49:77:cb:21:38:1e:51:2a:
61:53:7c:e0:6c:73:c5:c3:df:a6:76:67:b3:41:60:e8:15:1c:
f3:65:9a:63:3f:71:f6:4c:92:3e:bb:4d:0d:7c:6d:82:c2:f3:
ce:c8:c3:14:55:2c:9b:a0:04:6d:88:6f:b2:fd:6e:59:18:2d:
74:97:3f:09:36:be:1a:51:23:09:51:e5:f9:ac:f9:ae:e5:75:
6b:3f:ec:7d:05:f0:37:33:4c:dc:8c:a6:1d:da:72:ed:a0:73:
34:a6:53:dd:4e:a2:66:d8:e9:06:20:03:76:14:d4:45:93:f9:
64:f6:b1:8a:45:92:7b:57:e2:64:79:7f:46:f5:69:3e:42:da:
db:83:45:41:11:29:79:40:a8:a4:76:f6:88:40:64:e8:0b:c2:
ea:de:1e:85:72:0f:59:4d:e6:63:d7:fd:3d:33:ff:6b:bb:25:
1c:23:78:9e:0c:80:43:e8:72:db:df:88:8e:67:1d:6b:04:84:
e6:47:8a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:41:27 2025 by rpki-client