
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
File: IATWKTJ0OW9ajWkUhdaHagogcdk.mft (raw, json)
Hash identifier: SOstA8OW1ZDlWChOf7JoI0dUTm8kJ6kkEuy+fagsm5o=
Subject key identifier: 00:10:A2:4C:FE:3D:16:B1:D2:70:F6:A8:36:AC:77:B3:6C:7E:74:94
Authority key identifier: 20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
Certificate issuer: /CN=2004d6293274396f5a8d691485d6876a0a2071d9
Certificate serial: 019771885F4AFB316B90D4BD74885D44F344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
Manifest number: 1232
Signing time: Sun 15 Jun 2025 03:00:51 +0000
Manifest this update: Sun 15 Jun 2025 03:00:51 +0000
Manifest next update: Mon 16 Jun 2025 03:00:51 +0000
Files and hashes: 1: IATWKTJ0OW9ajWkUhdaHagogcdk.crl (hash: StClDZW+0TjiHHAYBkDMoOuAaOC40iIQWMwUckckxRg=)
2: aEJUX-P3iWzm8iZ2YmNhX1BUm-w.roa (hash: UCW6fp2JBu8X3L8wVEatff2uZp8yn3edNh91K1NyH88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:5f:4a:fb:31:6b:90:d4:bd:74:88:5d:44:f3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2004d6293274396f5a8d691485d6876a0a2071d9
Validity
Not Before: Jun 15 03:00:51 2025 GMT
Not After : Jun 16 03:00:51 2025 GMT
Subject: CN=0010a24cfe3d16b1d270f6a836ac77b36c7e7494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:22:99:85:ad:33:3a:1a:20:9e:89:b9:1d:ea:
e7:da:9d:7f:77:b2:13:d1:fd:e4:9e:78:d1:6a:cf:
26:47:61:d7:26:8d:ec:fc:1c:39:ad:cc:4f:c5:5d:
6a:58:22:53:bc:c1:71:03:70:7a:53:68:f9:c3:fe:
b2:86:36:da:5b:29:15:95:b9:53:2c:1d:f6:94:27:
df:eb:66:56:55:68:53:55:77:95:5c:e5:87:ba:fc:
b0:87:38:10:4f:65:d7:6c:f8:0c:ee:58:b5:33:db:
41:7d:d9:c9:ca:d7:3b:94:1c:fb:f9:88:9b:fd:12:
35:f9:b5:26:0c:cf:b0:e0:90:7f:f5:6b:bb:2b:8c:
29:69:b8:88:74:95:5f:58:e8:93:c7:98:0b:dc:2c:
e7:f8:5d:f4:2d:29:21:ea:6d:31:07:79:09:73:77:
ae:2f:08:77:34:5d:8e:0e:23:c1:f5:f5:f3:d7:22:
93:54:30:f8:90:f2:0a:4c:08:af:dc:0e:10:3a:53:
be:ce:b3:27:e6:a6:51:fb:9e:51:41:f1:0e:64:2c:
7e:01:72:77:61:35:39:28:41:4b:98:8e:8f:b4:60:
2e:73:72:be:88:90:43:d6:86:14:84:80:1c:1f:4b:
a2:46:3e:04:36:04:05:e0:2b:bb:c3:81:4e:b6:8c:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:10:A2:4C:FE:3D:16:B1:D2:70:F6:A8:36:AC:77:B3:6C:7E:74:94
X509v3 Authority Key Identifier:
keyid:20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:11:4b:3d:0f:16:ab:94:cd:da:4e:ed:d3:fd:6c:bd:6c:3d:
2d:70:ef:05:85:6e:34:b9:44:9f:84:32:d4:57:1c:e3:2c:27:
9c:05:77:3a:18:7f:5b:99:55:c0:d7:3e:56:18:15:36:a5:c1:
34:6e:1c:b9:8c:83:0b:83:49:32:9e:69:84:24:be:c6:7f:e3:
45:e2:30:d3:54:a9:72:fe:64:90:b7:f8:6d:f7:9e:67:02:e5:
05:6c:47:d6:56:ac:88:df:9b:c4:de:0a:8d:28:5a:64:3d:ec:
9e:ea:14:da:87:11:0d:3f:f8:fb:c0:8f:37:de:02:98:a9:5f:
d4:6f:43:22:db:f6:75:d2:63:f5:93:d1:a9:21:0b:91:ee:ce:
1b:ac:32:d5:b3:87:8b:cc:a7:68:45:a9:9d:62:69:14:4e:7a:
d3:be:78:36:df:5c:ea:ea:04:c6:8e:16:f1:30:02:8b:d7:4a:
6f:f1:54:7b:5e:5a:f9:ad:9d:3f:4a:ca:9c:d1:0d:11:4c:59:
56:c4:bb:4c:97:11:7d:4a:d2:c5:16:a4:30:2e:ec:9d:8e:be:
f9:ce:63:d6:06:a7:57:94:59:89:85:19:56:b4:6d:88:be:c5:
8c:ae:31:c1:e7:4b:a4:54:06:4e:40:94:a7:38:86:6d:72:db:
4a:93:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:00:31 2025 by rpki-client