Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: 6ZxqryqYTqnA///DXuDIqWYccwSorNLDfuLBzeTjHvM=
Subject key identifier: 10:E4:CB:6B:06:B3:CF:14:EB:0B:77:91:D9:94:F1:53:62:35:09:61
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 01976BF3F998AAD6E6A0A680FB608C1B9740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 128A
Signing time: Sat 14 Jun 2025 01:00:40 +0000
Manifest this update: Sat 14 Jun 2025 01:00:40 +0000
Manifest next update: Sun 15 Jun 2025 01:00:40 +0000
Files and hashes: 1: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: La3tRG5ee34OzykA1pzxpytp1Ci7dIpCViY5jKVTcXg=)
2: pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa (hash: 8ccg9QKMd308GM+mOMPhnrelb3Ldijvww8dEm02A/EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:f9:98:aa:d6:e6:a0:a6:80:fb:60:8c:1b:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Jun 14 01:00:40 2025 GMT
Not After : Jun 15 01:00:40 2025 GMT
Subject: CN=10e4cb6b06b3cf14eb0b7791d994f15362350961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e1:13:83:77:db:10:a3:7d:8e:02:88:94:02:
49:ee:28:71:9a:f1:f8:ba:28:c5:20:a5:39:f7:94:
7a:df:f3:f3:34:c4:9a:6a:d8:a5:65:30:f4:98:94:
df:50:ce:8c:52:25:79:3d:80:60:9d:66:c3:e7:a2:
4e:ff:1a:c2:d5:af:06:be:7e:3d:89:2a:39:da:9b:
1d:c2:ca:1c:cd:e7:cf:72:fc:bf:86:f4:78:88:1c:
6c:ae:98:f1:1a:2b:c7:7d:20:09:37:85:ab:90:c8:
96:30:d7:a9:cc:fe:e3:1d:4a:a9:e2:d3:ca:85:6d:
f0:4a:f3:56:06:87:b2:48:8e:1b:1d:56:32:53:c0:
03:cb:fc:8f:51:9c:91:17:e9:44:96:e6:49:ba:36:
66:9c:28:31:ee:67:c7:98:ac:5d:76:11:34:9c:24:
5a:b8:95:4f:3e:33:d4:b0:de:28:4d:9a:61:0e:9a:
80:5d:92:f4:ca:78:8a:7d:06:4a:bd:67:0c:f6:89:
b7:ec:c8:c4:06:ec:57:5f:bb:75:73:75:28:fa:8f:
28:3a:c7:b9:f5:b5:b8:c4:ce:ca:11:ec:0f:57:8a:
fb:6e:64:7b:7f:27:aa:65:cc:66:c0:a3:0a:e9:41:
dc:01:e1:e5:b4:98:4c:17:49:a0:0d:d2:b0:7e:3b:
77:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:CB:6B:06:B3:CF:14:EB:0B:77:91:D9:94:F1:53:62:35:09:61
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:88:06:7f:4e:16:e6:b3:72:db:fc:fa:3c:5d:e3:06:2d:91:
38:44:26:eb:05:fc:c8:91:6f:41:f8:0b:c3:4f:6c:05:2b:a8:
ba:64:6b:ba:4f:3b:78:5b:20:74:dc:57:b7:f7:6f:e4:6e:45:
b4:31:62:5c:12:da:98:3a:e0:d0:bd:22:bd:9a:c7:6e:d7:e2:
ac:14:bc:98:ba:7c:71:ae:ce:d5:22:56:82:20:7a:cd:f8:9c:
51:b7:e2:8a:9d:53:bb:5f:41:df:4c:a3:01:5f:bb:b8:8b:4e:
d1:74:ad:6d:9e:bd:a5:c3:6c:f8:6c:ef:d2:13:96:9f:b0:02:
3f:7a:53:91:ad:f1:a5:69:ee:9f:18:7d:f4:af:02:04:d0:46:
a5:f1:9d:24:07:bd:8e:2a:4d:e3:58:df:06:22:42:f7:0a:76:
ed:48:ac:e7:fb:39:80:72:28:3f:3c:10:8b:c2:62:d8:0a:14:
5b:d3:0d:7b:d7:21:24:4b:43:1e:7c:66:9a:5c:e4:d3:05:29:
4f:2f:1d:b8:5d:8a:4f:3f:70:67:02:c1:cc:83:05:46:fe:c2:
99:d3:ab:d1:87:16:d6:c1:9a:2e:d8:bf:f8:46:23:75:b0:60:
2b:95:92:b8:d4:d1:d3:f4:fc:71:68:95:d1:4d:6c:5a:b3:6e:
f3:27:de:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:16:10 2025 by rpki-client