Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: 2KfutyrbVsPoRYrEtl0O+//aDpCoy/khdtyxJ6Z2Pro=
Subject key identifier: 34:F8:FB:AE:77:98:47:48:B8:D3:2F:CC:41:6A:7E:6A:00:CE:16:44
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 01976997F9086F96CF277EDFA8B16945D429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 14:00:56 +0000
Manifest this update: Fri 13 Jun 2025 14:00:56 +0000
Manifest next update: Sat 14 Jun 2025 14:00:56 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: ah94W20ysv3B90mI5vIgocBS2DR6Kcd2TXfe4sAFB3k=)
2: UsxT3pcVojJYP9Cu4db5XHBOA_A.roa (hash: IuC4o8xqUNTxh+TkbcEBFveFUP/SyyaXqWJ5U0z84Vw=)
3: uCJs3VfOd9XlMzz8RlxYwm6JR8g.roa (hash: aQ8GGeLzceXoLXJ/X0KURkE7J4DP5Ck+ioxtdgiJTwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:f9:08:6f:96:cf:27:7e:df:a8:b1:69:45:d4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Jun 13 14:00:56 2025 GMT
Not After : Jun 14 14:00:56 2025 GMT
Subject: CN=34f8fbae77984748b8d32fcc416a7e6a00ce1644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:c5:91:17:2c:c5:2e:aa:8a:5b:aa:3b:09:
f3:fc:f2:53:f8:77:8b:32:a0:d5:1e:5c:ce:e2:af:
2e:f3:61:81:48:1e:a1:cd:e2:d1:ba:c7:fb:29:ac:
dc:5d:9f:8b:00:e0:8b:26:a6:9b:8d:3e:66:01:7f:
e7:0a:e4:2d:e5:69:55:c0:24:64:91:65:19:77:19:
9d:2d:ea:a7:64:bf:b6:98:b6:19:c1:76:74:ef:45:
52:a6:6d:2f:3d:f6:46:a2:7d:3f:bc:da:8a:ea:f1:
2c:74:4e:56:aa:ba:69:5f:6e:ff:f7:6c:99:5d:fa:
86:cb:7a:55:1d:c2:c5:29:07:3d:84:11:11:e9:9f:
20:ca:d1:27:11:b9:91:ff:1c:5c:18:23:66:9f:b4:
2e:36:05:63:84:33:86:2b:0b:e9:3e:cd:cf:7c:8a:
39:d8:61:5d:2e:e1:d1:01:42:99:62:86:07:da:99:
3a:36:11:e4:13:0d:f7:2f:d6:17:f2:4b:e6:11:5c:
02:60:20:5b:e0:17:58:bf:41:06:d4:e9:80:ef:dc:
c4:9d:49:ef:e6:58:99:64:89:51:7e:15:0b:aa:f8:
6c:ea:5d:47:af:61:a4:2f:28:40:0c:7e:78:27:28:
2a:4f:e9:37:ae:0f:fc:a7:87:dc:8c:67:aa:83:aa:
84:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F8:FB:AE:77:98:47:48:B8:D3:2F:CC:41:6A:7E:6A:00:CE:16:44
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0f:0b:d9:6e:13:2e:71:6a:e7:e2:30:ae:b8:bd:ca:db:a5:
aa:db:2e:73:55:5a:54:b9:eb:91:9e:46:1d:fe:07:61:6b:95:
0b:10:c4:9f:52:f9:5b:bd:5d:53:48:a0:5b:81:01:06:e2:ca:
3a:82:9a:92:b0:4c:68:c7:f3:a4:8a:81:e6:d5:fe:1d:39:6a:
0f:71:25:59:f0:d3:df:0e:c4:d0:c7:1d:2f:89:0c:fc:66:f1:
dc:cc:79:ba:ed:e8:c1:dc:f1:d9:de:95:8b:37:f7:7b:ea:6b:
68:50:9a:7c:f5:15:bc:a6:6b:06:e2:23:37:c9:91:d1:b3:72:
27:7b:cf:c8:fa:2c:31:0b:6d:34:d3:3d:3c:03:53:13:b5:41:
6c:99:21:48:0f:93:b1:0e:f2:0f:bb:6b:a2:d9:91:07:5e:88:
d9:b0:35:e4:8f:9d:23:9d:43:55:ca:58:2d:9e:12:5f:2f:50:
e6:7d:98:1d:25:c1:16:20:ae:ea:e4:ad:3d:4a:69:9e:9b:4e:
70:31:2b:fa:73:65:5e:64:cb:0c:1c:8c:ec:6b:15:b1:85:18:
39:d0:53:37:b7:3a:b5:00:77:c2:9e:8e:d5:12:b1:8b:53:22:
06:3c:fe:36:d8:72:89:ee:32:f5:78:6d:d1:b2:59:84:15:98:
99:47:7e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:45 2025 by rpki-client