Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
File: IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json)
Hash identifier: 0ghNhfwpczZXOfmebfOW1QX/3BzRyec2E6KYbC/fHug=
Subject key identifier: 40:70:5D:D5:B3:75:7F:BD:53:50:A1:E3:12:08:53:6E:55:4B:45:A8
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 01976F62CB781D8B8039D908FD0F2362830F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 17:00:34 +0000
Manifest this update: Sat 14 Jun 2025 17:00:34 +0000
Manifest next update: Sun 15 Jun 2025 17:00:34 +0000
Files and hashes: 1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: b/gqdfXZtzHiSDyQp5DlSAJkvg4llBkiF91iPq0npdE=)
2: JEagz34AmrWJSl5tWfv6gEtsLGA.roa (hash: 6ThacyL41jFB75SwEJNS97B98Umjv7cIvZNxvFFSXfI=)
3: spimqMKhC9PB1IAAapTxgzK4qRM.roa (hash: Uoz42yC9AHKp3g+1i18MCMkNcCBemOpgqQDvUXFhvIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:cb:78:1d:8b:80:39:d9:08:fd:0f:23:62:83:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Jun 14 17:00:34 2025 GMT
Not After : Jun 15 17:00:34 2025 GMT
Subject: CN=40705dd5b3757fbd5350a1e31208536e554b45a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:18:c8:71:37:00:d6:ae:c2:7c:c2:f0:9f:00:
2a:d8:34:3a:44:46:be:1b:54:d7:c4:1e:23:f7:42:
ad:59:69:47:cc:6a:6e:57:a0:63:cd:d6:e2:54:ed:
27:e2:00:34:bf:c2:a6:22:2b:5e:48:c8:85:bd:f8:
e3:9b:27:57:b1:de:fd:3b:8e:d3:1d:6b:33:7e:51:
be:8e:cd:8b:23:67:0a:23:ab:60:d4:22:44:10:b2:
73:14:90:b0:fc:3b:09:5f:c4:44:94:1d:06:de:47:
35:e7:85:ad:88:29:61:ad:65:09:c0:51:f6:ce:2b:
d6:e5:1e:39:82:b0:a3:20:47:13:e5:fa:00:32:09:
6b:ac:af:ad:4a:bc:71:58:8e:4d:99:98:a8:79:ac:
a7:ec:a8:83:04:dc:1c:b9:fc:3e:34:6b:be:e9:44:
a3:3d:65:5e:f9:8f:f5:04:0f:6d:c7:a5:f5:12:fc:
1d:d2:07:ba:a1:7c:eb:ed:63:b6:bf:da:f3:8b:fc:
2c:9c:7c:2b:a1:7c:d7:b0:a9:e1:29:2d:cf:59:47:
0f:32:e5:c0:97:01:aa:04:a0:26:78:f2:9a:dd:35:
3a:6d:f1:fa:68:3a:28:df:f5:28:eb:3c:ab:7f:8b:
80:51:b9:a7:8e:4f:c1:6f:00:9e:f3:de:38:76:bd:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:70:5D:D5:B3:75:7F:BD:53:50:A1:E3:12:08:53:6E:55:4B:45:A8
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d5:2c:f1:67:55:c6:e7:5f:1b:73:55:cd:ae:e2:ee:3e:7a:
f8:e4:c1:99:75:49:58:8e:27:46:08:3c:2a:da:9c:11:11:ad:
1b:62:3b:13:4c:ea:16:12:cf:3c:e4:56:c5:11:50:69:c5:14:
73:44:56:5e:83:73:81:8a:59:48:d1:e3:6a:a5:a3:f6:42:91:
10:e9:bf:71:8e:a7:74:1a:35:9c:c5:af:23:ae:e6:ef:50:c0:
a7:62:c5:62:fa:e2:61:f0:86:99:31:d2:58:b9:4d:8b:96:a0:
1c:76:5b:1e:3e:ef:6c:dd:81:da:87:fb:c8:1d:35:fa:00:d0:
57:fb:5e:e4:5c:a6:03:f5:4d:7c:9a:ed:4c:bc:be:ed:6a:c3:
74:7f:f3:a5:e4:e6:b0:ef:c4:90:c4:e8:cf:8b:f3:2e:9b:6a:
2e:56:dd:18:89:1a:54:55:dc:3e:7b:27:93:e8:68:5c:65:56:
41:ae:c7:ed:49:08:93:a3:d6:70:c2:df:6c:ad:56:ac:b1:3b:
43:7a:67:33:12:26:d4:69:d0:a9:ee:5a:55:4f:dd:d9:e4:3e:
4a:72:4e:e8:9c:b5:d3:a0:27:71:d4:20:4c:eb:0c:1a:d2:5e:
b3:8a:f7:08:42:0b:fa:18:0f:fe:dd:a6:e1:a5:83:36:6e:d8:
de:27:de:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:49:41 2025 by rpki-client