
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
File: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft (raw, json)
Hash identifier: 1xO2DLdITBGBki4TleaavLC0V/dRuw/591Ls88tEQeU=
Subject key identifier: 83:CC:A8:58:E2:7A:F6:7F:F6:45:EE:48:B8:47:8D:7F:5F:D7:68:ED
Authority key identifier: 21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
Certificate issuer: /CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Certificate serial: 01974F337542BEE1EE6C96B5BA42488A3978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 11:01:01 +0000
Manifest this update: Sun 08 Jun 2025 11:01:01 +0000
Manifest next update: Mon 09 Jun 2025 11:01:01 +0000
Files and hashes: 1: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl (hash: wYfyMHssdvLpnWbEdHfYppXtyNFTQjBhGddxtb3UiPU=)
2: ZUnY6DcgMFOkn5YPuY63h16XVew.roa (hash: j75VTgwm6ax4o8jG9UYWYEtlaoF5sYfNI7iKEcRNxJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:75:42:be:e1:ee:6c:96:b5:ba:42:48:8a:39:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Validity
Not Before: Jun 8 11:01:01 2025 GMT
Not After : Jun 9 11:01:01 2025 GMT
Subject: CN=83cca858e27af67ff645ee48b8478d7f5fd768ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:96:d7:fa:1e:d9:88:8f:1a:6a:39:95:6a:
1f:76:90:ba:9d:e4:56:1a:af:f6:9c:a1:51:24:03:
fb:2c:e9:a4:bb:7e:1b:8e:34:7c:da:56:58:cb:92:
58:e1:52:75:64:65:92:e5:00:74:2e:a6:b9:45:df:
3a:f7:e5:c9:a0:3a:2e:9f:de:dd:dd:90:cb:4e:3e:
99:ba:ec:1b:1f:1b:80:a8:44:f8:f0:00:15:54:04:
93:5d:79:ba:48:69:44:ab:53:9e:e6:52:cd:41:2a:
37:c5:b5:16:fc:48:8c:e0:af:4d:9e:bf:24:fe:cc:
80:c7:04:24:07:f0:dd:e6:94:1d:2a:ed:2c:bf:c3:
a1:86:af:13:4f:13:44:f2:f5:b4:f7:66:0b:02:08:
2f:4b:b2:e2:95:e6:04:30:cc:10:72:ec:98:a5:dd:
b9:8d:63:02:4d:43:b0:8e:9c:d5:6d:a9:70:31:94:
a5:2b:44:30:ff:d1:64:7a:1f:eb:23:64:54:ab:61:
80:38:ed:24:1a:c7:d9:33:8d:11:5b:de:fe:b4:ce:
57:63:a7:57:d7:cf:23:ae:9f:c6:06:31:d6:fd:07:
1f:66:fa:cb:07:c2:1a:c1:dd:e0:0e:fd:e1:f8:6f:
15:9a:b8:84:d3:e5:e8:65:b1:22:32:00:4c:65:74:
a1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CC:A8:58:E2:7A:F6:7F:F6:45:EE:48:B8:47:8D:7F:5F:D7:68:ED
X509v3 Authority Key Identifier:
keyid:21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4e:ea:aa:9f:56:ef:79:f3:b8:92:2d:7d:6e:6e:58:f0:70:
61:e5:97:11:31:e2:23:98:99:0b:1f:83:d5:d2:00:2b:bf:27:
e9:5e:f5:06:f7:b0:35:b9:8a:ef:14:d3:10:5c:09:15:68:07:
61:54:60:c3:c7:75:76:28:b7:fe:d3:23:ea:47:26:7e:fe:87:
25:60:e5:0c:4d:8b:4f:c2:71:61:71:5b:38:7f:ed:d7:e8:b2:
9e:2e:15:12:98:75:dd:fb:78:97:3c:89:65:6b:2c:04:d3:85:
2a:f7:3a:83:86:6f:e8:99:ed:55:45:f4:93:13:36:2e:6e:52:
6f:f9:66:65:e4:04:1f:10:a5:c3:87:1d:11:c6:92:ba:0e:52:
19:30:1b:31:6d:2d:7f:64:40:5e:b4:69:3d:10:88:2a:e0:c5:
85:57:07:db:d6:03:cb:6d:ad:83:b1:24:61:7f:c1:61:b9:67:
80:b4:2f:c5:0c:26:0a:a7:42:12:19:e2:e2:17:fe:00:80:0e:
50:e6:c9:69:99:fc:de:d9:aa:8f:8f:09:97:90:1a:4a:89:a3:
86:db:3d:c5:fb:31:d0:76:85:18:a2:97:8e:a4:f0:2a:a1:05:
03:0a:ac:10:96:7a:8b:ee:90:22:1c:f5:64:c0:bb:1e:a0:a4:
44:67:ba:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:41:06 2025 by rpki-client