Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
File: ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft (raw, json)
Hash identifier: 1wxtbnlnJbmhFm7gzaVH20XdVBtaRkCIPCLfIWCNeqo=
Subject key identifier: 41:84:9C:2E:DE:CE:6F:04:01:16:E5:B3:78:05:F8:DA:E8:AB:EF:08
Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
Certificate issuer: /CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Certificate serial: 019770756F63227D1DE6B6B673D31FE5A758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
Manifest number: 0712
Signing time: Sat 14 Jun 2025 22:00:33 +0000
Manifest this update: Sat 14 Jun 2025 22:00:33 +0000
Manifest next update: Sun 15 Jun 2025 22:00:33 +0000
Files and hashes: 1: DLubGHoQGgvM_j186blmZIGyLZM.roa (hash: TEMPnE8yGqVWn4gW4EZOnV9emzYVMGQtqJpNZOLj0Yc=)
2: ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl (hash: Rnqxror2r9ZTZ0OkKSi2JmGuXoFylAHmj0PfuCgtiqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:6f:63:22:7d:1d:e6:b6:b6:73:d3:1f:e5:a7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Validity
Not Before: Jun 14 22:00:33 2025 GMT
Not After : Jun 15 22:00:33 2025 GMT
Subject: CN=41849c2edece6f040116e5b37805f8dae8abef08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:6e:38:8e:64:d0:7a:be:a6:ec:82:ae:ed:
a7:01:49:5a:15:ae:ec:1e:88:09:26:c2:1c:81:bb:
a4:16:03:8c:ad:87:1d:a7:54:d6:29:d3:d5:8a:80:
76:42:df:bd:97:dc:fd:36:be:d1:13:91:86:fb:ed:
2d:28:10:da:b7:6b:a0:cf:70:3a:cf:29:dc:62:78:
ca:39:c9:40:37:ff:a0:93:1b:13:c8:6b:a1:e5:6a:
79:d6:ad:dc:62:35:7c:87:6d:aa:d8:7d:d7:d7:25:
76:c8:c5:43:27:21:83:c3:5f:95:26:67:a3:96:93:
e3:ae:b0:55:62:6e:88:ec:3f:53:fb:8e:a0:cd:27:
0f:09:ca:e5:46:12:36:f4:ff:3f:1a:2f:63:c8:60:
a7:36:15:ec:92:39:47:cb:30:05:b9:92:be:84:3c:
fc:f0:5d:53:8c:6e:64:ba:1f:d5:05:5f:7e:ae:7c:
a5:8b:1b:11:e6:0d:83:94:f7:88:c2:88:51:71:ad:
c0:4e:b0:00:10:ba:66:b0:1e:37:28:52:61:7d:8d:
35:c9:d9:07:65:b9:63:16:45:ba:4c:ce:0f:a2:01:
fa:36:93:85:78:91:9b:26:59:96:89:b9:ac:82:90:
a6:bb:7d:93:24:67:b0:4b:93:d6:49:28:9a:9a:f1:
5e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:84:9C:2E:DE:CE:6F:04:01:16:E5:B3:78:05:F8:DA:E8:AB:EF:08
X509v3 Authority Key Identifier:
keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:61:19:6b:18:89:3f:be:3f:4b:af:a1:c1:61:65:fa:29:6d:
46:98:b5:ed:9b:88:c3:9d:82:20:a7:7b:9c:b0:e9:95:e3:ce:
c7:b3:5f:76:9d:c8:7d:df:cc:61:ce:d1:26:5d:0b:20:ab:00:
b2:ae:44:73:35:b1:bd:2b:a8:ec:cc:78:0e:2b:02:2f:01:58:
bc:82:e1:cb:11:cb:e4:79:8f:bc:fb:78:1f:21:56:cc:4d:58:
03:3b:f7:3e:72:9a:c3:2e:94:bb:bb:60:0b:ff:aa:e1:9c:1e:
31:98:9b:2f:0f:54:f5:c3:5e:48:6f:90:e7:7e:2d:48:dd:7f:
04:02:0f:7a:48:48:7b:06:3c:4c:ad:21:9c:8b:98:89:81:00:
65:dd:2e:ef:51:39:4d:85:d2:46:eb:a2:66:27:9d:76:a9:2d:
d4:a7:4c:87:97:5b:89:a0:29:9e:06:88:b8:6e:a5:5e:23:ea:
2b:d1:9c:77:e7:bf:48:74:03:11:27:85:30:a3:51:c0:36:4c:
57:c9:a8:1e:4f:4b:c6:21:07:c1:51:91:44:2c:cc:a3:0f:7f:
89:79:03:2b:d6:1e:e4:2f:1e:c5:1c:ee:48:17:73:a2:34:f0:
ea:89:f5:49:6d:62:0a:08:ec:99:a8:f6:4c:62:f5:d6:3b:36:
12:b9:11:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:54 2025 by rpki-client