Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: qtnzccCaftfzxysJkcg8op9oWBE1B/6ysIE2j8q41MU=
Subject key identifier: C7:D8:EB:47:8C:0E:E5:8A:44:3D:40:50:EE:40:71:9F:4E:A5:40:08
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 01974AE8A264C0CD847D964998C6652ED936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0976
Signing time: Sat 07 Jun 2025 15:00:49 +0000
Manifest this update: Sat 07 Jun 2025 15:00:49 +0000
Manifest next update: Sun 08 Jun 2025 15:00:49 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: ehjC1vYmM9bLgjAdVB0nuIX4Ce1OK1q9XKXXpvadvA0=)
2: mXq5imVatjJhnnG6SsoqA-p0UNQ.roa (hash: 8CJwggTE1PoL2jvcGBTOZHCwbyGaj586VEqXhjgdUvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:a2:64:c0:cd:84:7d:96:49:98:c6:65:2e:d9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Jun 7 15:00:49 2025 GMT
Not After : Jun 8 15:00:49 2025 GMT
Subject: CN=c7d8eb478c0ee58a443d4050ee40719f4ea54008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:84:09:67:2e:e7:97:db:ee:ac:dd:db:ab:
b0:a3:ce:90:20:5b:a6:9a:19:30:d4:c5:11:9c:7c:
5a:43:5e:37:2e:73:c2:70:56:82:37:c4:88:44:16:
bd:53:4b:5e:87:1c:f4:7c:47:78:7a:94:fd:04:ee:
b2:ea:ba:04:08:98:82:8e:39:59:0e:98:55:39:32:
01:06:1e:5c:27:be:15:9d:09:e5:03:6f:21:20:10:
d3:24:18:09:98:49:c6:f4:a3:ab:e2:95:0e:aa:aa:
a6:9b:17:a7:8f:31:db:f6:a3:25:8b:bf:dc:39:47:
c7:3c:65:6f:c1:ea:16:05:ff:f7:de:52:25:49:bf:
b2:6b:f8:ac:3d:09:fc:f8:34:1d:f4:17:97:c9:a2:
e2:73:96:72:98:b4:6f:7c:2a:33:32:fe:74:3b:fa:
b3:bd:dc:49:a4:20:84:8d:66:15:ff:46:8f:12:31:
b7:00:9e:49:14:13:c6:c8:87:b3:29:16:53:18:2d:
a1:18:41:36:5b:95:db:29:30:6c:b9:43:25:3b:2e:
1c:5a:19:ac:07:ad:09:97:71:07:c2:76:03:52:20:
49:33:4e:93:af:34:1b:35:02:16:e0:47:f0:a7:43:
10:0f:d2:c0:7d:1e:26:82:1d:a4:ff:75:3a:6a:fe:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D8:EB:47:8C:0E:E5:8A:44:3D:40:50:EE:40:71:9F:4E:A5:40:08
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:03:a3:a7:e5:c8:59:66:09:e3:73:58:4b:88:1b:1c:08:1a:
01:09:07:75:c4:8f:d5:01:86:3e:fe:d4:2e:e4:9b:dd:fb:58:
19:50:c9:ed:be:22:40:58:e1:92:d6:3c:53:2c:d0:6e:be:78:
b3:4a:db:0f:16:84:86:e0:27:b5:a5:97:1a:04:c8:a9:58:b8:
12:ad:1b:d9:46:3d:2c:db:35:35:10:44:b0:e8:d0:fb:54:07:
6f:4a:9d:84:ff:43:d8:52:37:eb:12:7d:88:54:b3:10:d7:02:
14:ee:0e:7a:dd:92:8e:ac:6c:b4:36:b4:3e:83:36:67:a5:ae:
ea:e1:48:e4:c4:51:39:b2:c9:e4:00:86:f1:02:8d:48:78:41:
9c:da:ce:4e:ac:ed:ba:e9:02:0a:e5:7b:2a:5b:ec:13:cf:9a:
9f:10:97:63:07:84:20:e0:f6:5e:a8:5c:8d:7d:6d:a0:16:cb:
15:0c:df:47:ef:93:da:b7:25:b1:e1:22:72:ad:78:3b:3c:d8:
59:e4:05:01:54:6b:06:74:1d:ba:8e:80:71:11:2f:95:74:32:
08:c9:43:e6:7b:43:3c:29:27:dc:43:e3:7d:24:7a:ce:51:ab:
10:ac:2d:8a:46:a5:62:ae:41:bb:3f:d8:c4:17:b7:f5:6b:1e:
31:aa:4a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:29:26 2025 by rpki-client