Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
File: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft (raw, json)
Hash identifier: qsE7tfQZXparaHoOVmHTW+USpannvVo/HkPRRgk0WxI=
Subject key identifier: 29:B1:83:73:96:5E:35:58:5C:56:E6:B3:F3:99:00:3C:81:CD:0D:68
Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
Certificate issuer: /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Certificate serial: 01975347033EAC6269303EC1B96D21D7590D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
Manifest number: 08A2
Signing time: Mon 09 Jun 2025 06:00:52 +0000
Manifest this update: Mon 09 Jun 2025 06:00:52 +0000
Manifest next update: Tue 10 Jun 2025 06:00:52 +0000
Files and hashes: 1: GE_VINn07eeSJYTvZIuo88WEV3U.roa (hash: 7RURCigC0zQY7NED6IrTycMVsCozhn/RUtlNFgdIpNw=)
2: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl (hash: 0t3P0oACLXY+NWoHSEWsDSEE+5OS+de7w5vQ9VqgFIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:47:03:3e:ac:62:69:30:3e:c1:b9:6d:21:d7:59:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Validity
Not Before: Jun 9 06:00:52 2025 GMT
Not After : Jun 10 06:00:52 2025 GMT
Subject: CN=29b18373965e35585c56e6b3f399003c81cd0d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:26:a8:20:62:12:e9:d1:56:3e:47:93:2e:
e3:53:4e:29:f2:6e:ef:33:41:9a:55:01:d2:55:6b:
30:fa:cf:17:f7:42:76:cd:49:56:86:0e:92:e4:63:
4e:ff:72:a9:3a:f9:70:bd:30:5a:37:9d:aa:7d:92:
5a:32:6b:e8:4f:9f:1d:bf:9f:ce:f7:2c:d1:a1:e4:
e8:b7:ce:c3:ae:3e:d0:51:ce:71:aa:a2:0e:57:fe:
2d:28:ee:a8:09:61:de:f9:dd:e6:55:a7:4c:12:8a:
b9:a8:cc:e5:a3:00:ec:4b:db:1c:f2:e8:27:14:28:
c5:92:ba:8c:b0:c6:a7:69:98:e2:36:32:d7:42:fc:
ca:dd:c4:cb:82:ea:17:9d:0b:7a:64:e3:0f:b3:f3:
65:b7:03:83:63:0f:77:7b:e0:95:6b:5f:88:9e:96:
41:15:c7:f1:25:6a:e7:ff:31:31:bc:a6:7c:b1:bb:
c9:64:40:d6:c4:f1:9d:2f:f3:73:6e:a6:48:e6:da:
67:f3:ba:59:a3:db:24:5d:71:56:59:32:08:6a:d2:
30:4c:a9:27:f4:c3:fa:f5:0a:6f:47:3d:40:7f:27:
1f:e5:fb:39:ba:b1:19:fa:46:53:c1:41:62:78:6f:
4f:0e:4e:d7:d9:2f:cc:a4:ba:95:a2:75:e4:f4:65:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B1:83:73:96:5E:35:58:5C:56:E6:B3:F3:99:00:3C:81:CD:0D:68
X509v3 Authority Key Identifier:
keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8e:4a:e4:93:10:01:06:4f:0e:43:60:74:d0:93:e7:93:08:
fc:af:6e:f7:23:41:c2:3d:75:93:0f:89:43:b6:4d:ac:06:92:
f2:11:43:f7:b3:c3:47:62:fa:65:04:36:ce:76:0a:ba:69:22:
36:17:80:94:78:e2:c1:9b:b0:6d:a8:d3:d7:11:9d:40:4d:e2:
44:00:0d:17:58:5b:e0:de:ad:58:6d:70:68:16:98:0a:68:dc:
1a:8b:5d:af:29:4e:72:df:7d:da:69:1d:e2:2d:2f:df:5c:d8:
11:0a:f6:7e:a0:aa:ec:8d:8a:42:cd:5d:45:8a:70:7b:40:a8:
24:fc:60:88:5b:20:7d:d5:42:e2:66:00:21:24:a1:75:a9:77:
8b:cd:13:fc:41:a2:63:e0:2e:a3:90:bb:49:4d:21:62:fc:d7:
6d:b7:63:35:63:4b:20:35:f0:51:69:60:c1:55:6a:61:3b:88:
f1:83:df:b5:c2:93:68:d8:b9:ba:20:88:8e:e5:64:3b:5f:37:
7c:8b:7c:bd:5f:72:ea:b8:1c:64:19:34:d2:dc:82:44:6c:2d:
a9:54:f2:14:71:78:30:5e:c0:5e:88:82:70:a6:4b:b0:ae:16:
74:81:41:95:96:04:d5:6e:dd:36:2b:59:5a:be:0b:5a:07:29:
1b:a7:05:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:23:32 2025 by rpki-client