Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: ki9LtHrMnVLJ4orN9F97ieoGOxGgQVVr8q1cp/v7pqY=
Subject key identifier: D8:EC:0B:78:AA:AE:28:64:C0:BC:E9:85:5A:0E:C5:BF:01:E5:F5:E4
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 019768BC07D546015BF253E2714371EA5F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 138D
Signing time: Fri 13 Jun 2025 10:00:42 +0000
Manifest this update: Fri 13 Jun 2025 10:00:42 +0000
Manifest next update: Sat 14 Jun 2025 10:00:42 +0000
Files and hashes: 1: Dbw0YKXPol3saHGjQJtz9o_YK0E.roa (hash: SxzLeQKHeNdqB63pBhgkGBN/CeBMjvrLZxTWY/WlAKg=)
2: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: r4XPtOISuUbE+qJftfL/eaYff4xNR53OiFxsg+Z/aK4=)
3: UAWIgik98ovvIJWv4yjj5lBqzOo.roa (hash: jrAxhhr23FpKpzjy0AGBEFjJeK035eZKHkroGqfSgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:07:d5:46:01:5b:f2:53:e2:71:43:71:ea:5f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Jun 13 10:00:42 2025 GMT
Not After : Jun 14 10:00:42 2025 GMT
Subject: CN=d8ec0b78aaae2864c0bce9855a0ec5bf01e5f5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:0c:02:34:45:09:51:ec:1e:4b:58:ba:a5:
0f:3c:ed:03:8e:9c:d2:d8:ce:8a:f4:9b:dd:6f:b3:
ab:d9:b4:5c:82:12:2a:eb:39:6b:c1:5b:10:4d:7b:
df:bd:66:de:25:6b:fc:c4:e7:52:bd:83:29:57:cc:
c2:8d:38:83:6a:32:1d:20:9c:ff:1b:82:68:d2:f2:
8a:e2:f8:01:b0:89:e8:59:00:1b:b4:33:81:a2:8e:
24:33:26:7a:f3:a6:05:03:40:ad:90:41:13:d7:61:
c9:8a:0c:35:f8:75:9f:47:3d:8a:76:19:6b:f3:2d:
35:41:f8:6c:4c:a8:99:20:4d:a2:0c:ac:36:04:cd:
3a:18:97:3b:79:d1:32:1a:e3:fa:1d:d7:be:58:7d:
3b:ae:05:57:16:d5:0d:1d:3b:70:e2:49:d4:72:27:
8c:28:f9:59:44:6b:f9:01:e7:cd:53:a5:89:cb:54:
23:80:e6:fe:ba:b5:31:bc:e0:12:7d:c3:3f:f8:1f:
90:55:17:dc:52:79:a8:65:3b:02:88:1f:81:c3:1b:
aa:26:9c:66:49:aa:39:da:24:7f:a8:8e:54:08:e2:
1b:c8:56:71:56:ce:6d:3c:25:19:0c:23:26:6e:95:
ca:b5:7d:90:42:cd:93:c5:88:38:82:7c:58:b0:98:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EC:0B:78:AA:AE:28:64:C0:BC:E9:85:5A:0E:C5:BF:01:E5:F5:E4
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a9:3c:cb:e7:35:ab:32:57:48:da:2c:63:24:48:45:19:38:
0c:1c:56:72:fa:24:35:aa:96:3e:98:59:31:b6:57:14:4c:7d:
77:fa:44:38:98:a6:b6:e4:c3:52:2c:74:5d:e4:f0:84:72:77:
c4:95:a1:dd:fd:ab:16:ee:41:fc:e7:b6:91:04:49:b6:99:1f:
cd:64:2f:8c:70:74:22:5e:41:09:96:b0:be:5c:27:4d:bf:79:
e8:20:20:78:3d:f5:7c:ee:92:f3:d5:f5:d4:9d:fe:94:9c:50:
8e:a9:63:6c:f5:e5:3a:2b:d1:9e:bf:19:74:4c:1e:68:64:da:
58:15:25:12:ba:b3:34:73:7f:e4:b9:f4:00:4b:f2:ac:29:80:
f8:2a:b4:60:df:4d:c4:fe:33:85:80:ec:73:98:83:5c:ae:82:
bb:c9:e6:08:25:8b:7a:50:be:5e:70:27:5a:03:a7:4c:6c:40:
6c:d3:f9:fd:70:bf:a7:0b:1d:7f:cd:0e:8b:de:af:67:48:27:
c0:92:95:ae:c1:dc:5b:b1:ec:0f:b6:ef:67:d9:94:6d:fa:fa:
63:39:64:da:82:e5:93:91:5f:b6:f7:f8:6b:af:9b:2b:ae:10:
2b:28:1e:df:28:70:93:56:3a:37:c0:8b:ff:3a:23:8b:bd:41:
ac:ee:11:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:10 2025 by rpki-client