Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
File: IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json)
Hash identifier: YZVvAEyLdWUTzGHUOK5rKLM5zbsKlHkwn7MHZrA2Vlk=
Subject key identifier: 6B:5B:CB:41:45:86:E0:88:C6:B0:5A:74:D6:09:F5:9A:1C:A0:53:AC
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 01987306804BAEDADDD69AC06BF349C6786A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 03:01:02 +0000
Manifest this update: Mon 04 Aug 2025 03:01:02 +0000
Manifest next update: Tue 05 Aug 2025 03:01:02 +0000
Files and hashes: 1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: BbzcxW/2tfbcpDhRB0JFOsLQ1TIfl5qcw7c0QnyU+nQ=)
2: b2NrS79baNCWt7CG0X8Vv_sUMl8.roa (hash: Q1DMA/fao+0mavfnJZ9O2x4iQmJQmqUT84da1WRhc7E=)
3: spimqMKhC9PB1IAAapTxgzK4qRM.roa (hash: Uoz42yC9AHKp3g+1i18MCMkNcCBemOpgqQDvUXFhvIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:80:4b:ae:da:dd:d6:9a:c0:6b:f3:49:c6:78:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Aug 4 03:01:02 2025 GMT
Not After : Aug 5 03:01:02 2025 GMT
Subject: CN=6b5bcb414586e088c6b05a74d609f59a1ca053ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:c6:d0:0e:70:c8:b9:2d:54:fc:a8:b1:93:
5d:17:8c:38:4f:0a:d8:81:cd:29:fd:70:1b:60:36:
c2:6c:76:a6:7b:2b:b7:b0:3c:79:11:33:9b:89:7c:
b7:aa:d5:1f:dc:e0:55:7c:48:ec:ca:f2:db:c7:88:
d3:54:1c:19:e5:d7:fb:a5:c0:b4:c0:a9:95:f0:f9:
7c:47:b9:d9:c9:53:d9:9e:bf:1a:73:8b:07:53:61:
77:d2:a6:7f:49:5a:f1:cd:11:b1:d4:bd:c2:4f:12:
8d:54:ab:8e:fa:f9:30:bd:eb:8f:28:73:2e:47:ff:
0f:ac:52:aa:40:95:d2:44:4a:5d:c2:7b:d4:24:b6:
a1:0c:f5:7f:14:4a:19:b7:c4:cc:7c:10:33:4c:c5:
2f:27:94:0d:7a:88:57:4a:c0:85:f2:f2:61:a4:e9:
f3:af:50:0c:49:bb:d5:39:16:eb:f5:ff:26:a1:b9:
e2:ee:23:fd:15:3c:92:94:a0:4d:93:00:08:10:e4:
ec:71:c6:95:4b:1c:78:b2:ad:0c:bc:fc:32:12:db:
db:8f:7c:3c:c4:36:b5:a4:79:49:d9:95:5a:0d:b3:
8d:69:f4:8b:00:1a:4f:d4:1f:70:b2:11:fa:eb:32:
8d:1c:bc:a1:b6:5d:77:3e:8e:53:95:a5:a4:ea:53:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5B:CB:41:45:86:E0:88:C6:B0:5A:74:D6:09:F5:9A:1C:A0:53:AC
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:20:a0:6e:26:84:5d:8b:d2:d7:0b:14:28:2a:54:06:8e:e1:
5e:e9:25:d1:09:63:f4:d6:39:e9:b4:9b:25:f2:53:13:96:e8:
d2:cd:34:2a:29:c0:c6:eb:4f:4e:f5:79:13:a6:18:84:2b:c0:
2b:ba:4d:8d:81:0c:84:c6:30:5e:53:4c:bf:e3:8f:07:92:58:
36:50:0f:88:f5:b1:48:06:ef:e8:16:d4:54:7c:6f:4b:66:57:
73:30:bf:fd:41:f6:c0:49:3c:2a:65:d5:a9:71:70:0d:23:c2:
13:0e:ae:c1:66:b7:92:67:46:71:c9:04:3f:19:e7:b9:3a:2d:
bc:01:fd:d6:da:15:b5:e6:a1:8e:87:c6:f8:0a:4a:19:e2:9f:
58:80:d7:c7:41:ee:af:3f:a0:9d:9b:cc:51:05:b4:4a:b0:0c:
a6:59:51:7e:c7:b7:cb:15:29:29:df:0f:1a:ea:fd:fa:60:7b:
0b:1e:58:16:f2:7c:ff:cb:2f:00:b1:0e:d0:81:f5:4f:39:03:
2a:24:07:bf:6c:eb:79:25:ca:89:5f:36:9e:6f:d0:0b:d2:90:
20:1b:bc:7e:48:43:17:b1:75:60:0f:c6:40:87:a6:7c:42:d3:
e6:87:f7:32:b4:f4:d3:df:3a:85:c9:ac:0a:8f:a4:dd:bf:09:
36:a1:71:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:49 2025 by rpki-client