Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
File: Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json)
Hash identifier: hEqtgaWdbP+sVBy8GPO8LEJkgFzYnrwzLEOqT+V2dmQ=
Subject key identifier: 58:00:62:A6:A0:50:8C:5F:2A:0C:AA:5E:68:A9:00:0C:B3:61:41:00
Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Certificate serial: 01978A359F7A0D865F3EB48577FB9A1A3E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
Manifest number: 100E
Signing time: Thu 19 Jun 2025 22:00:59 +0000
Manifest this update: Thu 19 Jun 2025 22:00:59 +0000
Manifest next update: Fri 20 Jun 2025 22:00:59 +0000
Files and hashes: 1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: f/EX4a6aujsQ2ug0ve44SeKKUDm8vVY4jq9O6Y43y+U=)
2: uDx7Z1tuokndeydIySa8WuoqYoI.roa (hash: V+Jlh82Z7YVpAlrJMiPWI0QRjW3a+dx4x4YSGHlfjZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:35:9f:7a:0d:86:5f:3e:b4:85:77:fb:9a:1a:3e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Validity
Not Before: Jun 19 22:00:59 2025 GMT
Not After : Jun 20 22:00:59 2025 GMT
Subject: CN=580062a6a0508c5f2a0caa5e68a9000cb3614100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:a5:29:4b:75:a8:08:c0:d3:20:55:0b:99:
9d:fd:a0:f6:5b:de:5a:69:5c:47:94:52:95:e4:b8:
38:3f:eb:e4:8e:74:b8:e2:ad:a4:25:d2:29:07:67:
09:57:b1:a5:97:06:ff:c8:30:03:2f:8c:1a:ed:be:
7e:d9:bf:e2:0b:b9:d8:5d:a5:8c:c8:c7:dc:28:82:
59:f3:b8:51:46:fb:ef:7e:64:57:be:40:9f:8c:90:
0c:5f:85:bd:29:3c:8f:63:dc:57:fc:88:49:ad:b5:
94:f1:0a:ed:1d:e6:bf:9d:e0:0d:2a:51:a5:35:57:
d5:32:56:29:36:90:b4:2e:2c:06:16:c3:5e:77:c2:
1d:0a:44:f9:ba:22:d2:e0:20:43:d2:a7:72:dc:53:
9d:6a:3f:39:b4:24:a3:95:f0:65:4d:6a:20:34:71:
3d:da:f3:a2:e3:6f:ac:53:44:12:3d:e0:45:1a:68:
f6:ac:f3:4b:81:4b:e5:2a:40:31:68:42:ae:27:70:
a4:e6:78:1d:9e:a7:29:ca:ca:ef:20:e7:f2:a7:5a:
0c:da:73:f8:61:d0:8a:36:e5:cd:40:8d:56:c6:f7:
8d:1e:c5:f5:82:88:dc:f0:66:94:f8:6f:fa:11:98:
77:51:c7:e8:17:f7:42:1e:a0:bf:19:91:1e:85:e2:
9a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:00:62:A6:A0:50:8C:5F:2A:0C:AA:5E:68:A9:00:0C:B3:61:41:00
X509v3 Authority Key Identifier:
keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:49:ee:27:3f:00:59:1a:92:e1:4e:af:14:63:a7:f1:91:1c:
74:e0:7d:d2:a9:2a:0e:00:97:ef:c1:33:dd:81:ab:a4:bf:e9:
a4:59:c0:4e:eb:d3:2d:4c:29:83:9a:df:98:16:9e:91:84:f8:
f0:43:ac:80:31:2c:c5:64:f2:06:94:ed:d2:6c:b8:27:8b:c6:
73:3e:95:85:a5:bf:c4:de:33:61:ed:8d:45:cd:48:dd:82:fe:
56:5b:8d:d1:26:d4:c6:26:eb:93:cf:a8:70:c6:5a:93:3d:79:
2a:a0:6d:86:c4:3e:a4:92:a8:72:78:69:1f:de:34:03:37:34:
73:36:df:f8:1d:ae:12:9c:b8:57:59:e5:09:1d:69:1f:e9:47:
22:20:96:9e:76:89:7b:47:39:a4:fa:ad:70:78:eb:aa:54:56:
ed:99:d2:cd:41:7d:20:ae:65:e5:17:83:5b:61:70:5e:b2:1c:
8e:b5:42:01:84:e3:13:14:7d:25:ae:e5:81:b0:e6:ad:da:2d:
8f:2d:2f:e8:b6:14:70:d5:01:32:2b:f5:b8:86:76:c4:fb:30:
f1:b2:ba:83:de:37:8a:94:90:c5:26:97:fd:40:15:2d:a2:3e:
d5:23:e1:cc:15:22:8b:e7:22:bb:49:39:ac:14:68:09:d0:a6:
a9:27:1c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:16:10 2025 by rpki-client