Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
File: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft (raw, json)
Hash identifier: 115vr85Tv34Nf5dQeX0sIfkdB+Z5Klinn+2jxikup+4=
Subject key identifier: 90:59:8A:0A:1F:E0:6E:90:D8:E5:52:7A:5A:6A:F9:C9:18:81:E6:1A
Authority key identifier: 21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
Certificate issuer: /CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Certificate serial: 019770AC21CD17C425F43E4B8A56FFD29232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
Manifest number: 0DF8
Signing time: Sat 14 Jun 2025 23:00:18 +0000
Manifest this update: Sat 14 Jun 2025 23:00:18 +0000
Manifest next update: Sun 15 Jun 2025 23:00:18 +0000
Files and hashes: 1: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl (hash: yEOgzCZACe0MH4IFvRf7FcaQ4ODvxPtwYDjlyua5x+A=)
2: OmRgq5feW-kx9jvx4AAFdyevf30.roa (hash: AB8XLVSpCXGmgkqlgUf55sAgLfrFZhXp5WrR9S6Xa20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:21:cd:17:c4:25:f4:3e:4b:8a:56:ff:d2:92:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Validity
Not Before: Jun 14 23:00:18 2025 GMT
Not After : Jun 15 23:00:18 2025 GMT
Subject: CN=90598a0a1fe06e90d8e5527a5a6af9c91881e61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:76:5e:6f:85:55:40:8d:f0:9f:d5:13:21:
d8:0a:34:17:23:c3:c3:68:ad:4f:d6:02:19:2b:8b:
23:cf:07:3e:98:01:95:80:de:c9:02:c4:15:21:56:
20:00:26:2f:4b:ed:d5:fb:60:c1:d1:ea:f0:85:ce:
5e:9d:7c:f9:85:71:3b:48:cb:74:1d:11:02:a6:c2:
f9:b0:74:af:93:96:5a:aa:3c:5f:8a:ab:f5:78:04:
95:24:d1:6f:ad:f8:b6:8a:6b:c7:63:9a:f0:05:c8:
a7:d0:bc:95:5e:2f:79:23:f7:69:f8:58:f4:40:5c:
8f:bb:b1:24:c0:ff:84:78:35:28:b0:7e:a6:b0:4d:
4a:c4:70:31:27:e6:89:c4:0b:6a:65:05:cc:78:cc:
21:2b:07:55:cd:5c:03:6d:e8:93:0e:92:a7:1d:21:
b2:5c:06:8a:a0:12:27:9d:7b:06:06:fa:52:51:e4:
5e:92:9b:e3:bb:63:54:3d:85:32:22:3e:29:b8:20:
cb:f1:5b:8e:a5:45:95:86:f2:bf:f9:0c:00:6c:88:
f6:6d:2f:95:d8:fe:44:f3:c2:6a:6b:bf:36:fb:48:
4f:bc:c3:2d:a1:18:fc:b9:e4:ba:66:40:45:97:66:
77:7c:df:82:f6:82:8b:05:a7:ca:fa:91:e9:28:c1:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:59:8A:0A:1F:E0:6E:90:D8:E5:52:7A:5A:6A:F9:C9:18:81:E6:1A
X509v3 Authority Key Identifier:
keyid:21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6d:7d:11:de:84:80:fd:99:a7:8b:74:4e:ad:ec:27:20:a6:
a3:4e:ec:23:1e:6d:94:cb:a3:58:d1:c5:77:23:17:4b:b1:a1:
5a:03:52:fb:59:b9:67:b4:3f:5d:1d:e4:ca:6a:18:c6:fe:3a:
86:45:5d:96:05:50:8d:4a:52:23:42:62:5b:2f:ff:53:da:f6:
5c:73:59:ae:0b:9e:db:08:74:17:be:82:14:d2:7b:da:35:a0:
7a:72:b6:d5:c8:56:a3:fb:86:a8:c6:48:22:10:92:ad:5c:2b:
51:08:b1:5e:41:0d:4d:50:46:e8:c5:81:e5:b6:63:5d:0b:9e:
fe:f6:11:05:ea:71:3f:be:b3:89:3e:8c:ef:6a:9a:8b:ce:6a:
d4:8b:ef:c2:50:a8:5b:ba:d7:d4:5b:a7:87:b0:5a:37:ba:2d:
96:b8:56:d7:b5:41:e2:71:eb:77:46:aa:da:67:8c:2a:dc:dd:
35:bd:e0:0a:d9:c2:05:31:e4:81:3f:8c:57:d2:a9:f3:ec:0b:
ad:c0:b6:b6:4d:e8:55:dc:18:d6:89:a6:90:0b:b4:f1:bc:a9:
81:34:65:eb:bc:2e:2f:c5:18:9d:2a:ba:1d:b8:db:0c:db:8f:
56:d6:84:cb:b7:ca:d0:1e:09:b6:c5:be:af:84:42:cd:a7:6a:
fc:67:3d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:47:12 2025 by rpki-client