Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: FF0AsV/DkoqgqC8UdvCo/suSF0NUn6GI7qwXz8b17O8=
Subject key identifier: C2:BE:61:5F:C5:0B:8D:BD:8A:82:D9:44:1B:91:49:BE:54:A0:AA:E5
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 0197789CB6DAEBC404AADBD5D88C06CD8D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 0D7A
Signing time: Mon 16 Jun 2025 12:00:25 +0000
Manifest this update: Mon 16 Jun 2025 12:00:25 +0000
Manifest next update: Tue 17 Jun 2025 12:00:25 +0000
Files and hashes: 1: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=)
2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: jHld9JiPmOBDC9xhLEWzi/aFEpcW4sXXstc/MJC3J3w=)
3: l9Ip7JI4fAFd10Cj77KHHSrnVWw.roa (hash: SkELgqgLspURpsKcvlJgINn6NNXlC7+9EjVyn8WnT2A=)
4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9c:b6:da:eb:c4:04:aa:db:d5:d8:8c:06:cd:8d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Jun 16 12:00:25 2025 GMT
Not After : Jun 17 12:00:25 2025 GMT
Subject: CN=c2be615fc50b8dbd8a82d9441b9149be54a0aae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:dd:04:68:7a:57:8e:50:fc:7f:77:07:88:
5b:b4:48:b3:a2:1f:ab:4c:a0:53:92:d3:1d:3c:3c:
1c:78:7a:e7:f7:d6:12:fe:7e:2b:ea:28:a8:5a:d1:
64:3a:67:3a:77:92:84:79:df:4d:00:f6:4c:01:79:
4d:45:84:5b:9c:66:ed:57:0e:67:76:da:8e:3c:ff:
ba:16:de:47:22:55:20:af:4d:95:b6:4d:a6:37:a6:
a1:65:5a:24:73:d8:f1:ed:ad:d6:91:b7:4c:d9:38:
aa:6a:2f:d9:d6:e4:27:98:5a:5d:66:b2:84:ff:3d:
9e:51:39:ce:a1:bf:bd:f5:07:a7:67:5e:3f:64:49:
1c:70:ab:96:3c:a1:e7:e7:88:37:3b:5c:ba:98:33:
0b:ac:8f:6d:83:d7:ad:01:66:1b:46:ba:e1:b5:61:
64:ca:e9:a1:9a:58:9c:a5:b2:d9:6e:18:bb:bf:f3:
87:2e:08:f8:54:2b:4b:44:d5:d5:27:21:fc:ee:20:
cb:95:dc:96:c1:1e:23:6e:39:33:9e:91:52:f3:39:
f7:dd:39:92:af:06:24:4d:8c:c0:06:39:89:fa:73:
96:05:ac:35:c5:96:32:fd:15:3a:d8:52:9f:2c:0a:
82:13:e3:1f:3f:3b:d0:34:0e:d8:6d:36:a0:61:e5:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BE:61:5F:C5:0B:8D:BD:8A:82:D9:44:1B:91:49:BE:54:A0:AA:E5
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c0:b8:5f:f1:1f:d2:16:fe:7f:ae:80:73:61:42:0c:a1:78:
cb:b1:08:94:39:0e:56:45:00:65:0d:2c:f6:8b:d8:ac:3c:8b:
e4:e0:a5:0f:22:47:f5:52:8e:99:52:9d:4b:57:f5:6c:05:3c:
28:0c:3b:d8:a6:3b:24:27:db:ba:cb:c4:c5:34:4b:94:9b:94:
30:b1:20:ac:47:3a:57:19:cc:d9:ea:8f:56:a4:bb:a7:fb:71:
63:7e:51:4e:3f:21:b8:6b:eb:3b:25:c8:bc:27:d4:be:41:b8:
4a:f2:9f:e2:c9:d1:5a:8b:7d:ae:f4:10:0d:9f:78:b0:9f:62:
56:82:df:38:58:29:d0:cb:a9:18:4d:a9:f9:ef:ca:8b:1c:c7:
4c:a1:80:fa:3a:6c:bf:8c:b0:9d:7d:99:5c:89:24:1e:74:cd:
fc:ae:59:12:15:86:a8:00:eb:e9:ba:f5:03:b8:10:83:e0:16:
bf:75:3f:72:41:dd:eb:05:4b:93:88:5a:4f:44:1c:4f:36:cf:
90:6a:60:73:32:0f:8b:70:19:90:44:58:06:75:6d:fa:28:c2:
ae:8a:8f:b6:05:10:53:44:72:e0:53:32:3f:37:25:b3:73:8a:
46:cd:51:e6:6b:ba:cc:1c:b8:04:47:bc:3d:ca:c7:08:66:3d:
ef:79:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:55:28 2025 by rpki-client