Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier: 5y/GnVcCzgdRuth2vSi/IjzWGhn1H+QiCufWqkZsE44=
Subject key identifier: 80:BB:2F:30:2E:EF:0B:18:CD:E1:FA:09:E6:8F:99:22:6D:DD:1D:9B
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 0197699777AA251C73FEA4AE10E1122FB181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number: 0A02
Signing time: Fri 13 Jun 2025 14:00:23 +0000
Manifest this update: Fri 13 Jun 2025 14:00:23 +0000
Manifest next update: Sat 14 Jun 2025 14:00:23 +0000
Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: OdngCapgSJ1gtAJnmb4ySpo56plvdQvPAJUvQaE7Mj0=)
2: l-HFEGYP57VmF8aDDh7--ZbJBDw.roa (hash: z6foBKVqU7T5Yu/Dwks8ZalWU/MYlRsXoQCU7GPCUOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:77:aa:25:1c:73:fe:a4:ae:10:e1:12:2f:b1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Jun 13 14:00:23 2025 GMT
Not After : Jun 14 14:00:23 2025 GMT
Subject: CN=80bb2f302eef0b18cde1fa09e68f99226ddd1d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:88:0d:a8:f4:0f:f4:cb:28:2b:c6:c4:0a:b7:
fe:58:d3:9e:44:a5:8e:ec:ec:9f:47:09:91:50:5c:
da:d9:87:e2:7c:90:e0:75:7f:0b:6a:d7:f0:81:69:
38:81:d2:8a:9e:af:a5:c9:85:ca:00:f2:0d:61:3c:
94:0b:61:b0:09:d0:12:77:61:8b:2b:c8:7b:55:da:
01:38:78:58:83:4d:4f:07:e5:36:71:18:cb:2f:9c:
b7:d1:e1:52:c7:0d:f5:54:9b:5f:43:e6:f0:ff:83:
49:25:18:47:f7:b0:f9:09:c9:d9:af:a4:a6:af:8f:
27:bf:5f:9e:96:80:eb:25:5c:be:b6:76:b5:00:de:
66:f4:89:9a:52:04:03:18:9c:72:5e:4c:24:86:c1:
92:a0:59:78:9a:6d:19:3b:e5:f6:92:96:cd:9c:7d:
30:f4:a4:b8:24:c6:05:d3:1f:97:7c:2a:4e:89:c0:
ad:00:2e:91:ee:f2:1d:e5:36:b5:b2:8c:1a:ea:eb:
ae:cd:ac:41:2d:55:f1:91:74:8f:1e:37:79:42:ad:
fb:ca:d2:16:67:12:ed:03:7c:40:5d:ef:4d:7e:12:
07:24:3f:fb:a6:a0:7b:14:a9:eb:d8:0d:75:e1:01:
e9:27:2b:90:a1:db:9f:9a:33:54:2d:dc:45:c4:45:
dd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BB:2F:30:2E:EF:0B:18:CD:E1:FA:09:E6:8F:99:22:6D:DD:1D:9B
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:91:5f:c1:65:2f:e1:79:61:32:28:8d:39:b2:0c:87:da:e3:
dc:59:ca:32:18:43:74:56:61:a0:d7:19:bd:5a:56:1c:30:7e:
4c:53:d9:9c:d1:d3:29:94:82:6b:3d:44:cd:85:36:c3:4b:bf:
c6:6c:45:1b:70:66:92:af:6c:3b:43:f9:c9:3d:50:59:a3:91:
b1:7f:a0:0b:10:9c:3d:4f:b7:a2:bf:1b:ae:f3:ac:52:61:51:
e4:e8:e9:92:1e:a6:1f:0e:bd:52:30:1e:5a:72:f6:ab:c8:c8:
e0:72:db:9f:32:89:32:3c:32:85:4b:ab:67:11:33:5c:33:ea:
71:99:47:11:32:24:27:24:82:9d:69:d0:3a:a0:7e:fb:e4:ee:
c6:99:6a:f5:b9:06:61:87:81:6e:d1:86:aa:d6:2c:af:16:09:
73:57:bb:c5:db:c7:88:d4:aa:ab:45:19:01:b5:77:c5:51:08:
60:20:ce:82:e5:7e:3b:6b:98:45:35:8f:aa:b1:74:ed:93:27:
79:75:32:d1:90:a4:04:d8:db:73:95:c0:bc:13:1b:84:70:4d:
e2:08:be:32:f5:c1:33:86:5f:9f:38:57:61:0c:ba:0e:58:4f:
08:3f:1a:7a:52:12:f8:72:6d:1f:9c:cf:e1:39:0d:3e:77:bc:
d6:62:1c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:54 2025 by rpki-client