Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: I5a9RdrrF7BSdPExepSykd/Y2s84OipOZIQ8J9TwKp8=
Subject key identifier: EE:30:7A:86:13:3F:BA:B6:4E:50:49:F4:A8:1A:4D:F5:E7:28:99:6F
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 01974DE9B34D6A920C1BF0A0A9E1181DF09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 12F0
Signing time: Sun 08 Jun 2025 05:00:50 +0000
Manifest this update: Sun 08 Jun 2025 05:00:50 +0000
Manifest next update: Mon 09 Jun 2025 05:00:50 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: ECv24IP5cPtsYBN1ijy5aQhIghw6dxYT2pTz4VQ48NU=)
2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=)
3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:b3:4d:6a:92:0c:1b:f0:a0:a9:e1:18:1d:f0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Jun 8 05:00:50 2025 GMT
Not After : Jun 9 05:00:50 2025 GMT
Subject: CN=ee307a86133fbab64e5049f4a81a4df5e728996f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:81:ee:40:a8:a5:b1:8a:1d:f5:6e:7d:7e:e5:
b6:8f:b1:6e:e4:6e:e1:af:09:4c:3e:ae:f1:1b:82:
c6:e2:80:cc:0d:bf:e1:8a:61:54:e2:5c:45:00:88:
9d:a5:bb:36:94:7e:79:01:c1:7a:c4:b0:2f:2f:48:
80:29:d5:ff:b8:8b:a2:67:38:16:44:92:ac:da:e2:
01:a7:2f:91:db:97:e4:11:30:bf:f1:4a:81:1d:48:
6c:e0:a9:a5:66:23:ef:75:aa:c6:b9:4d:3c:1a:6e:
83:e7:86:c6:92:88:88:de:7a:8a:2a:c5:4a:ef:6f:
f7:29:97:2e:71:54:0e:97:14:60:21:b6:14:2b:68:
d1:4d:2e:54:3b:4e:27:d4:0b:25:69:80:03:25:b4:
25:d7:21:f3:73:55:71:fa:39:7a:a4:6a:af:42:55:
5e:95:9f:e5:f7:ba:38:d0:4d:6c:f5:b9:00:e7:99:
13:eb:b9:7a:b9:19:ee:27:49:ea:97:ee:aa:26:0b:
4e:7b:9d:a9:e7:f8:0e:71:63:fa:83:b5:e2:b7:83:
45:e5:32:d5:ec:cc:b2:5e:dc:76:19:8a:2a:f5:17:
0e:23:15:27:68:fb:e9:8e:61:91:a4:05:ad:c8:9c:
28:31:84:56:83:51:63:76:0f:13:6b:33:ec:7b:ca:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:30:7A:86:13:3F:BA:B6:4E:50:49:F4:A8:1A:4D:F5:E7:28:99:6F
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ad:e4:cd:b5:15:3a:9a:28:e8:bb:a7:6d:2b:40:9c:ee:43:
d3:47:f3:5b:05:c6:39:af:0c:05:ea:19:32:9b:d1:d3:42:4f:
5b:65:56:68:e2:d5:7c:1e:ff:4a:2b:c4:76:a3:4e:5b:d9:40:
34:8c:ce:04:22:aa:4c:1c:08:a7:a2:82:98:87:37:30:c8:86:
5d:58:9f:f8:d4:f8:53:75:9d:06:ef:c1:de:af:0a:3a:1b:0f:
e2:10:72:cd:93:39:1d:a7:68:47:a8:68:cd:d0:ab:2e:4c:fc:
cf:8e:73:7a:c8:4f:a6:93:95:d8:16:aa:60:cb:0f:4a:8b:da:
45:ab:0f:8f:ea:6e:6b:66:03:ec:22:a7:29:44:73:b2:d4:44:
72:62:78:3b:f1:9b:52:2b:e4:5c:ae:22:9c:c7:02:fa:8c:7e:
06:18:32:a4:8a:98:73:fb:db:54:ce:59:69:48:94:37:68:a5:
9d:30:5a:72:53:da:7d:bc:f4:50:59:97:bc:25:96:e5:fb:5b:
93:5a:5f:dd:74:01:f1:ce:2d:50:cb:e8:5e:ae:89:c5:9b:54:
80:95:c3:da:0e:31:d5:d4:9e:f2:f9:db:7a:27:0a:62:15:9a:
0d:56:f5:d9:b6:f5:6d:4b:87:ba:a7:91:59:f7:88:3a:60:d0:
f9:fa:9e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:30:41 2025 by rpki-client