Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
File: IS7ROxq32gkK7kL2rt3f27FWpfg.mft (raw, json)
Hash identifier: fQzLHW7hp6+cDAj4kFARoKRVQ8RnaDb7N9xIuAWrqzA=
Subject key identifier: 91:3A:EB:FE:5B:53:26:D6:C8:CA:16:30:1E:7E:CB:B1:B1:20:76:58
Authority key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
Certificate issuer: /CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Certificate serial: 01974D44CC20ED37F7BAFDEED050E8E14BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
Manifest number: 0D96
Signing time: Sun 08 Jun 2025 02:00:43 +0000
Manifest this update: Sun 08 Jun 2025 02:00:43 +0000
Manifest next update: Mon 09 Jun 2025 02:00:43 +0000
Files and hashes: 1: IS7ROxq32gkK7kL2rt3f27FWpfg.crl (hash: bO0sfFjsiaSDjkwDYFZj7qJ+jm0AEgav+3cq1Z3yyLY=)
2: pYYF24wF2qUQt0FJlZ3YB5wUYkU.roa (hash: zEnazzlJdeIGpPAdwwnulmZqiWyOGMOyiwVZOjKNgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:cc:20:ed:37:f7:ba:fd:ee:d0:50:e8:e1:4b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Validity
Not Before: Jun 8 02:00:43 2025 GMT
Not After : Jun 9 02:00:43 2025 GMT
Subject: CN=913aebfe5b5326d6c8ca16301e7ecbb1b1207658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:42:a6:70:7e:2e:ed:5e:37:04:e8:31:67:
e6:a2:63:9c:8c:3e:72:36:4a:01:c5:1e:d9:a9:a3:
da:21:2c:32:f9:5c:70:5a:74:5f:b1:60:d6:bd:b3:
3c:bc:0b:7d:36:23:98:f2:af:7c:be:eb:91:f3:20:
37:d6:96:08:dc:0a:c2:35:42:03:81:78:44:72:53:
93:72:db:9d:f8:02:b8:73:2b:8e:74:de:14:c1:fa:
92:80:69:f9:bc:e7:86:7d:90:ac:64:91:cf:ec:b9:
00:84:5f:d2:68:58:49:ba:ad:19:60:53:d9:13:34:
09:00:30:6d:44:1e:56:c5:32:5e:fa:24:b0:84:f7:
ad:6b:be:85:f1:1f:e4:78:a2:83:9a:44:87:b1:71:
6d:03:98:e1:aa:6d:5b:3d:26:ca:23:0d:09:58:a0:
08:8f:9d:61:1e:b3:28:05:e9:d2:a9:c6:4c:7e:5b:
d2:71:dc:d7:96:57:83:8f:f5:b4:40:ca:9f:11:4e:
54:cb:0a:39:e8:dd:c0:ce:4a:da:5f:ce:a6:b6:95:
a2:78:df:53:7f:72:d5:92:fd:0b:17:70:2b:18:ea:
94:8b:b9:06:cd:83:b4:11:ab:ce:9c:f6:37:1e:18:
d0:33:45:81:7a:2b:6f:1e:c5:20:ef:ca:b2:e4:d7:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3A:EB:FE:5B:53:26:D6:C8:CA:16:30:1E:7E:CB:B1:B1:20:76:58
X509v3 Authority Key Identifier:
keyid:21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:74:7b:62:6a:d8:0a:8b:be:6d:95:f2:81:b0:2e:c1:2f:9b:
1c:34:7c:55:39:c9:9b:a8:6d:02:c0:e8:b3:45:02:ed:3c:8b:
43:20:78:0f:ad:b1:8e:ea:3b:de:7f:20:5b:5e:65:cc:37:24:
08:87:07:d7:dd:fc:17:65:dc:54:fd:05:a5:db:76:65:eb:d1:
35:4e:0d:76:54:34:70:82:b1:96:84:35:50:28:7a:fc:e8:9d:
2e:38:2d:c8:e8:17:16:8e:73:e4:90:e2:a8:ff:32:43:cb:1f:
34:62:4c:ad:6d:f1:cf:5e:51:d4:c1:81:32:f0:59:56:41:f7:
82:c5:e7:77:73:7d:86:75:da:85:47:80:30:c9:b5:94:6e:cb:
b5:73:53:08:be:5d:d4:99:cb:6a:47:23:af:8a:00:93:53:f2:
87:c5:d7:9a:01:35:f6:33:b8:64:43:d1:da:57:fe:2f:3d:03:
c7:3a:2d:b1:c2:b0:08:85:45:03:82:63:da:d5:96:cf:e4:ff:
bb:f4:08:ad:e6:fd:7a:fd:21:fa:78:e6:56:fc:16:a7:76:02:
5f:c6:74:d3:08:f6:32:27:8f:0f:15:12:93:46:a9:13:78:3c:
91:4d:d3:64:b2:2a:8d:a3:e2:c1:fa:fb:8f:67:6c:40:db:21:
a0:ad:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:49:44 2025 by rpki-client