Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: +2A41PEf5lQZcs2nAjUmW8P8Rm3gLN4gOCCYpWuYQHs=
Subject key identifier: FD:C3:38:80:CB:12:7A:23:D8:D4:26:3F:88:EC:4E:76:DB:A8:72:C3
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 01974A7B13617594CA2FFC3B72EBA12DF046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 13:01:09 +0000
Manifest this update: Sat 07 Jun 2025 13:01:09 +0000
Manifest next update: Sun 08 Jun 2025 13:01:09 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: 7XQWI4tbyxLmmQGkbzkONqa/nHAeSxbBl7TAsteukhU=)
2: OUi5qBFFBiQ3EGmTWiGmad22xM4.roa (hash: KwdKSyLAfkRw0QNUdiy6X/wiXk2JmvHy0XAz3/ojAhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:13:61:75:94:ca:2f:fc:3b:72:eb:a1:2d:f0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Jun 7 13:01:09 2025 GMT
Not After : Jun 8 13:01:09 2025 GMT
Subject: CN=fdc33880cb127a23d8d4263f88ec4e76dba872c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e9:d0:4d:e1:c2:58:92:5b:1a:c0:99:19:d0:
1b:a4:39:d3:a7:09:ce:01:26:84:b2:6a:65:a0:b6:
58:78:57:ba:b9:05:6e:fd:9d:55:bc:c7:7f:a6:f5:
d3:80:0e:d1:85:05:8d:1a:b2:e1:ff:02:33:75:f6:
9a:ad:b4:db:8f:c7:ab:4a:3e:0c:7c:90:d8:bf:ef:
d1:22:f3:a2:51:38:f3:27:d7:6d:15:77:16:eb:82:
4b:76:fc:f3:c0:60:c0:c7:06:f7:ec:38:52:5a:d8:
3b:29:0a:a4:34:c5:50:83:aa:b0:be:13:ea:b8:1c:
21:64:cc:1a:88:1e:46:e0:be:cb:c5:f7:7b:dd:af:
a5:41:f4:98:9a:ac:4c:99:9e:c3:f4:19:c7:3f:92:
7c:ca:43:37:ea:f0:30:85:c2:14:81:09:6e:cc:36:
e8:8c:9c:fd:7c:3f:56:8f:56:ba:08:56:38:8c:7d:
b5:86:6c:65:df:da:2f:be:0e:4d:9f:b2:17:02:10:
ff:82:e1:6b:0f:e3:f7:c1:b4:9e:d8:4c:b3:81:e2:
bd:98:f2:ed:8f:b6:50:a2:99:90:d5:08:dd:64:09:
81:cd:b4:d4:cb:04:32:09:a0:84:1d:f1:e6:39:d3:
0f:e7:c6:e8:cf:c9:0d:c4:bc:27:a5:54:fa:dc:99:
50:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C3:38:80:CB:12:7A:23:D8:D4:26:3F:88:EC:4E:76:DB:A8:72:C3
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:06:42:5e:ba:22:5d:2a:98:46:da:ff:34:11:ca:81:81:60:
a2:72:8f:c1:47:12:ac:db:50:f8:f8:a7:f8:79:d1:57:ca:32:
63:5d:14:8f:b0:f5:cc:a8:8c:21:5d:78:52:c2:eb:16:ee:da:
88:9d:71:a2:d5:1e:88:e7:67:32:98:1f:f0:f5:5f:f1:6d:10:
26:25:13:65:65:46:90:5b:32:bf:8d:ac:cd:c3:7b:e6:fb:f1:
80:01:f6:28:d7:f7:ac:67:23:7b:f9:29:1c:98:9d:b6:c9:1e:
87:07:39:06:a7:a1:53:dc:8f:8e:f8:f3:a1:c6:b1:df:80:7a:
9b:2f:89:76:e7:a0:eb:44:fd:fe:f6:fc:05:11:2f:20:fb:f9:
17:86:06:ca:72:9e:9e:42:61:d2:c8:74:2a:78:ba:db:11:af:
dd:aa:42:b5:f6:5a:67:d1:42:ed:ca:78:c8:b3:00:ee:b9:5b:
b0:d4:de:2f:a7:c3:46:dd:a3:1b:89:8b:7c:36:34:d5:58:f4:
da:05:65:21:dc:00:92:b2:1d:e1:61:df:3d:f5:f3:cb:8d:db:
db:e0:10:51:36:2a:79:7c:9f:2d:2d:8d:9b:a0:91:d6:73:17:
35:fe:46:21:b2:dc:c1:e1:1c:9a:27:5c:95:4c:b7:cb:3c:ec:
81:b4:9b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:13 2025 by rpki-client