Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
File: I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json)
Hash identifier: ReGV1THaQEjHm9PNRLpY7vAgZTF16ABpTnUyfFR1Soo=
Subject key identifier: B2:A8:AD:16:26:5C:EC:ED:CB:1B:BE:6C:B9:83:55:2C:46:9B:A6:78
Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Certificate serial: 019769CEFEB90CEDC8C3FB787A500BD71297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
Manifest number: 0286
Signing time: Fri 13 Jun 2025 15:01:02 +0000
Manifest this update: Fri 13 Jun 2025 15:01:02 +0000
Manifest next update: Sat 14 Jun 2025 15:01:02 +0000
Files and hashes: 1: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: TbtrfrQRyowmFX91uqtOUWKgsqHKv4mqPlnjocEDHm4=)
2: j4EIa7tKAt7zUJqXstTzU7rzvAM.roa (hash: KBhYqMx9SY3f4s8BMjZo/0KJeCGNnKyC4D8ert+K2y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:fe:b9:0c:ed:c8:c3:fb:78:7a:50:0b:d7:12:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Validity
Not Before: Jun 13 15:01:02 2025 GMT
Not After : Jun 14 15:01:02 2025 GMT
Subject: CN=b2a8ad16265cecedcb1bbe6cb983552c469ba678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:85:b9:24:f0:56:20:1a:af:64:80:36:fd:
8c:33:a3:d3:18:0e:9c:4a:07:0a:4d:0f:06:b5:e7:
bf:2b:d0:a4:9b:15:1e:3e:64:06:1e:34:79:78:81:
17:60:c1:8e:4a:18:5a:cb:17:45:9c:57:d1:03:b6:
99:0e:c7:4f:82:fa:eb:bc:87:f0:a7:e1:a7:51:4f:
c8:ff:1c:9f:c7:12:bd:fe:17:44:ff:0d:e5:89:25:
1c:d3:4a:72:79:b1:f6:72:ba:58:ab:46:0b:aa:36:
52:1b:02:07:a8:69:cd:fd:06:c0:80:49:89:11:71:
0a:97:c4:25:95:7b:5e:20:57:99:43:ff:15:ed:7b:
27:50:0f:58:6e:0b:f7:90:01:70:d5:6f:cf:35:0d:
05:ee:d9:36:b2:2d:8e:8d:4c:1c:c6:83:c2:45:bc:
2d:50:0c:54:00:21:1c:3b:6c:16:c2:34:83:f6:18:
16:15:1c:1e:eb:e4:c0:8b:22:79:93:0b:76:71:7f:
76:a0:09:5c:57:ec:a4:78:2a:d9:44:84:73:62:01:
51:49:79:b3:4e:91:c5:8f:a3:13:54:ba:41:06:07:
e3:89:58:66:e8:f4:10:fe:32:7c:b7:bc:80:7c:cf:
f6:cc:89:a5:64:dd:95:82:83:52:cc:0a:9f:d6:9d:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A8:AD:16:26:5C:EC:ED:CB:1B:BE:6C:B9:83:55:2C:46:9B:A6:78
X509v3 Authority Key Identifier:
keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6e:c9:3e:90:0d:75:43:80:06:d3:c5:a4:c1:e4:84:ab:64:
26:b8:ad:3e:21:ca:0c:de:a7:28:04:93:09:35:6b:7b:52:61:
fe:50:f7:60:42:45:72:eb:f8:fd:75:c0:d0:75:e9:48:ec:ff:
57:bb:97:dc:19:88:97:0e:f5:4a:2e:83:00:e2:2b:e5:75:25:
ea:1c:b1:03:8b:79:b8:08:28:1c:46:aa:b5:c5:f8:17:6d:a7:
f3:87:56:62:19:27:01:7c:d4:5e:61:b4:0c:0d:b5:70:cc:0f:
54:e3:ee:66:c0:df:69:07:37:fb:96:e9:71:d9:31:13:53:03:
28:ed:e8:27:4e:90:2f:27:f5:26:59:52:1c:b8:95:c8:55:8f:
15:c1:c2:d8:0b:a1:4d:39:42:7d:87:e9:fe:7d:30:ad:da:78:
5f:a0:b0:cc:55:42:d6:26:06:50:1e:ca:5e:c2:0e:8c:37:a7:
1d:69:1c:3d:37:de:6d:c3:ce:ed:52:e8:9f:aa:21:aa:c5:42:
21:e7:3b:97:84:f0:c5:79:fe:e0:35:64:cf:de:ce:c8:54:6a:
52:7f:57:ec:08:8d:82:8b:45:46:11:3f:0b:b1:f1:d2:84:a0:
e0:5f:ad:8c:ad:44:48:01:90:1b:c6:f9:9e:ff:78:98:01:5e:
ad:a9:d8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:36:34 2025 by rpki-client