Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: xKqMTOfhkz2fExRfdHQYrDzvi8Z0LzO+j1CZIqkOPoc=
Subject key identifier: 52:E3:CA:43:A0:4F:BC:73:17:4C:F4:88:6A:D3:57:C5:5B:E1:1D:29
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 01974967EBBC5FC4B17AE26041B401183D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 08C5
Signing time: Sat 07 Jun 2025 08:00:36 +0000
Manifest this update: Sat 07 Jun 2025 08:00:36 +0000
Manifest next update: Sun 08 Jun 2025 08:00:36 +0000
Files and hashes: 1: 7LeNtT1Py-375udT6tgnEczdaA4.roa (hash: KcUWkl6MBuk85woap7zLa0rzE+sobb9Vo8npqesilrw=)
2: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: Gfzo8xunlMedDbaB69XeeZH9TKsC3toIhIQ8Lalj+MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:eb:bc:5f:c4:b1:7a:e2:60:41:b4:01:18:3d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Jun 7 08:00:36 2025 GMT
Not After : Jun 8 08:00:36 2025 GMT
Subject: CN=52e3ca43a04fbc73174cf4886ad357c55be11d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:c9:2e:e8:26:e6:3f:6c:3a:c1:3d:37:97:
8f:d1:2a:f4:f1:ab:54:86:4f:4c:fb:42:0a:dd:2c:
9c:50:61:7d:ff:8c:97:95:a1:8c:f4:be:83:95:25:
1d:77:49:23:6b:04:9d:26:ad:9d:34:d8:a0:37:bc:
a6:af:af:0d:da:db:a5:5c:71:bc:17:90:c2:e8:6c:
93:12:7f:8a:a9:22:44:bd:fd:61:46:b2:f6:2f:e7:
13:15:d2:0d:d1:a6:ba:36:cf:96:c7:cd:a9:a0:b5:
f2:f9:eb:fa:ca:b6:8b:2c:42:0b:b2:5c:a2:f0:13:
bf:58:64:b2:c2:06:6f:68:a1:2e:26:e2:bb:80:2c:
04:35:47:ab:b7:7a:7b:49:80:49:16:d1:35:78:62:
38:d2:3a:f4:ab:86:41:85:61:30:4f:d4:af:bc:30:
59:1c:f9:65:7b:f9:88:d1:5c:af:4b:a9:9c:87:95:
a4:b9:ca:e0:70:b7:98:e8:25:ac:e0:d1:da:ae:ed:
39:cc:3d:16:05:17:9f:a8:f7:af:a5:3f:f8:6b:2a:
e0:df:78:87:5b:17:77:cf:3e:b1:0e:79:b4:7c:6b:
99:2a:63:7c:b6:49:6e:a8:40:c3:55:d0:06:4b:07:
6a:51:98:6d:03:b8:53:86:ab:60:2b:91:83:d7:b6:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E3:CA:43:A0:4F:BC:73:17:4C:F4:88:6A:D3:57:C5:5B:E1:1D:29
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d7:19:db:03:44:43:7f:5c:6b:d5:eb:22:a8:aa:53:b0:eb:
6a:7f:3f:c1:d8:c4:cc:ed:76:87:e7:7e:1b:d3:ce:20:e8:4a:
35:34:b1:7e:71:79:e1:50:16:d6:a5:3e:4f:63:f7:c1:f6:16:
e4:4b:5f:a2:0b:20:31:8d:22:e4:cf:af:b6:3f:17:5c:4b:03:
2a:29:92:64:de:d1:f9:de:87:e7:0d:78:30:c0:5d:c9:6f:4a:
2d:6c:38:5f:2a:27:12:f6:0a:3c:e1:fd:b6:fe:36:8e:81:ba:
b2:32:c5:89:41:64:c7:e9:48:12:de:2e:d7:59:e1:09:4b:04:
02:1a:97:a3:49:20:fd:49:6c:11:65:b7:b8:04:93:21:0b:79:
37:9a:e5:61:d6:d1:bb:aa:1b:21:2d:e2:1f:a7:2d:be:ec:16:
1a:1e:ac:6a:d9:3a:af:fa:52:d1:35:35:1d:b2:b7:17:e7:89:
0c:42:8c:54:f8:3e:7b:7e:19:fb:4a:94:27:d0:8b:f8:09:6f:
6e:cd:f1:fa:0e:d5:c5:a4:e4:dd:47:e7:fc:f0:52:e1:6a:d7:
cd:8c:ad:d6:b3:6c:38:ec:0f:3b:2a:0c:12:81:e9:ec:fb:dc:
9b:0e:21:49:6a:93:3d:ed:83:44:0a:aa:b8:36:71:d3:14:00:
4c:cc:f0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:49:02 2025 by rpki-client