Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: wtF4FeuS04Cq0ord2VU8QXa0bbC4lYFWVQzF8BloUhg=
Subject key identifier: 42:F7:3D:14:73:69:E0:81:0D:E6:E0:B7:54:2A:4E:95:BB:17:ED:A4
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 01976EBE2FDCD06E7FD48FB00888ED7D8CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 04B0
Signing time: Sat 14 Jun 2025 14:00:47 +0000
Manifest this update: Sat 14 Jun 2025 14:00:47 +0000
Manifest next update: Sun 15 Jun 2025 14:00:47 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: IMNrijzZ36XbZ6UASk0kwcF3DRpPak+jdF2uJhWk5oY=)
2: NppGj-vB7qPIZEIjN2QiF53Di1w.roa (hash: /HZmGG+wWIrcuKRavKc6Cvy6ql5RNC9frBmMmRXn2ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:2f:dc:d0:6e:7f:d4:8f:b0:08:88:ed:7d:8c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Jun 14 14:00:47 2025 GMT
Not After : Jun 15 14:00:47 2025 GMT
Subject: CN=42f73d147369e0810de6e0b7542a4e95bb17eda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:90:52:69:1e:32:8c:56:cc:30:7b:25:61:
69:ff:bb:f3:6b:be:22:47:7b:d7:23:6c:d5:ef:99:
8c:ec:f0:41:35:b1:f7:08:30:24:58:4e:53:8a:c9:
5b:4f:7b:dd:c9:b4:dc:b5:92:5e:ea:2f:82:e2:74:
df:b7:42:52:2e:2d:22:d4:26:a2:21:b2:0c:91:a1:
b4:9d:9b:bf:4e:2c:11:5d:a6:f8:38:e9:98:51:54:
75:0c:1c:ae:52:79:88:d8:ab:1b:2c:26:05:c9:7a:
6e:f6:a8:52:1c:2f:3f:ef:e5:02:32:6d:8a:6c:f5:
0c:a1:0b:82:1e:bb:fc:ef:05:db:2e:63:bb:a0:cf:
66:dd:52:6e:81:a2:17:cf:e0:95:90:d0:a1:b3:b6:
51:f6:58:d5:dc:c9:ae:c6:aa:28:fc:87:b8:d7:87:
f4:40:79:bd:dd:ef:08:ac:f4:03:54:03:13:70:63:
93:ae:2c:5f:2f:58:cb:76:ec:cb:07:e6:17:ee:78:
d3:f9:33:b4:d2:4a:89:a5:81:4d:ef:c1:c5:b1:1f:
13:0a:f9:8c:8c:d6:b4:e4:98:bf:07:d6:c6:71:dd:
6c:45:68:10:a0:a8:ee:34:ae:66:8b:a9:b1:b5:09:
79:a6:90:9a:78:65:23:be:b1:ad:46:51:c9:40:0d:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F7:3D:14:73:69:E0:81:0D:E6:E0:B7:54:2A:4E:95:BB:17:ED:A4
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:07:eb:d8:bb:3c:3c:ab:29:85:54:9d:b4:60:e7:7c:3e:58:
c2:1e:96:7a:5e:16:ff:65:6a:3c:15:66:23:c8:13:ca:99:49:
ee:66:12:c8:f6:fe:5b:ec:98:29:df:16:95:e2:d9:07:3c:e3:
02:9a:9d:9b:34:78:a1:73:29:ee:22:cb:40:2c:67:27:a9:be:
72:5b:31:eb:29:81:10:25:cd:e8:3c:4d:26:04:76:6f:39:be:
d4:9c:b5:42:c3:1f:f4:88:fc:68:b9:a0:56:58:dc:ff:bf:75:
7b:56:f0:ef:e5:04:ed:36:cb:b1:5a:62:75:9c:5a:ab:86:74:
00:74:a7:d0:b0:6f:9d:8f:2a:58:0d:a2:ad:9a:32:38:59:37:
76:1d:bb:55:7f:16:32:40:6c:b6:ec:20:5b:a2:c0:96:d8:ab:
5d:d3:a7:07:94:a7:6f:40:a9:53:a2:9e:c7:ce:2d:2d:5d:0c:
27:30:49:b9:ad:5e:e8:8a:f3:55:1d:77:47:fb:27:1e:5e:e4:
06:2e:c4:a6:8b:53:5a:3b:bd:52:94:a8:04:0d:bb:da:5a:34:
85:ab:23:db:d5:e3:5f:d0:26:b9:a4:e7:13:b8:19:81:97:c6:
2b:68:85:70:ca:ba:dd:f9:61:ab:19:4c:37:e8:7e:5c:89:ef:
99:35:b4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:47:49 2025 by rpki-client