Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
File: IAs7I0VxCglvajTX8Im-seP8U4g.mft (raw, json)
Hash identifier: R9Qf/+rpjnMrxDKHbIZmLr00kirgqPss1Y4JW+Kh7Hk=
Subject key identifier: 52:04:18:2D:04:08:67:50:CA:E3:81:0F:2E:66:93:D5:B7:DA:70:00
Authority key identifier: 20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
Certificate issuer: /CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Certificate serial: 01976C98CFB2D91CDB005EDBCBE2F686D912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
Manifest number: 03B0
Signing time: Sat 14 Jun 2025 04:00:43 +0000
Manifest this update: Sat 14 Jun 2025 04:00:43 +0000
Manifest next update: Sun 15 Jun 2025 04:00:43 +0000
Files and hashes: 1: 3twUXXIP_KmiWrUBvyT5612yZdA.roa (hash: i8TOwD+JQVgsZynDBd1FE+mCLj4YL4GBf0bnlreCNh4=)
2: IAs7I0VxCglvajTX8Im-seP8U4g.crl (hash: iPNFnkMDbb8O/FEnMlVthgwhiuCVoDd4XaOYRB1SwGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:cf:b2:d9:1c:db:00:5e:db:cb:e2:f6:86:d9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Validity
Not Before: Jun 14 04:00:43 2025 GMT
Not After : Jun 15 04:00:43 2025 GMT
Subject: CN=5204182d04086750cae3810f2e6693d5b7da7000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:66:0d:e3:38:eb:86:3c:44:c1:83:7e:d2:55:
5a:0c:ee:b2:c4:d9:ab:f0:82:97:8d:e3:32:7f:df:
e7:b9:7d:c9:8f:8d:62:1d:bc:70:26:73:c1:f6:a5:
19:37:ae:2d:95:5a:69:29:b9:bd:60:8a:58:9f:ed:
00:67:fe:68:cd:f4:44:ff:ba:88:bb:7a:61:b6:06:
88:d2:fc:b1:ad:12:b2:69:e5:c1:54:89:7f:fa:92:
b3:a7:69:0b:bf:ad:59:15:14:71:29:9a:8a:02:07:
be:19:65:b4:67:db:ac:02:27:e8:be:0e:6e:a7:70:
66:4a:3c:31:34:fb:13:e8:8c:25:b6:ab:e6:48:a3:
d0:c9:d6:08:ce:ea:af:96:05:ef:4f:50:99:3a:16:
d4:37:b9:3f:8b:ef:50:f2:58:b2:7e:33:23:f1:6c:
39:4e:bd:16:6b:c9:c0:8a:7e:4f:8c:df:e6:4b:21:
47:5d:fe:35:35:a3:1b:a4:9f:73:be:e4:6e:c2:53:
fb:b5:28:24:6b:2d:94:d2:65:bc:bf:15:d8:9d:79:
96:ec:06:25:60:11:fe:8b:eb:30:78:f0:f5:68:26:
37:12:34:6a:9d:2a:5c:d6:9c:01:bf:e5:47:e7:17:
72:9c:47:49:f7:f3:d6:2b:7b:7e:1b:38:5f:2d:05:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:04:18:2D:04:08:67:50:CA:E3:81:0F:2E:66:93:D5:B7:DA:70:00
X509v3 Authority Key Identifier:
keyid:20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:eb:76:66:6b:a9:71:3d:4b:bf:88:e3:b9:0b:ce:09:5a:9d:
65:7c:f6:d1:6b:4a:6e:db:49:9e:db:6d:7f:dd:86:f9:a0:a8:
e5:f8:80:5a:c6:aa:ef:c3:01:0c:66:a0:44:e6:9a:c1:61:c8:
33:26:34:63:45:26:76:05:9d:10:b8:d1:1c:d2:3b:48:d6:8f:
5f:da:61:83:74:71:30:d2:8d:9d:6b:d4:5f:9e:ee:40:38:8b:
cd:f8:dd:19:d8:c1:2e:47:b0:68:31:13:bb:d9:41:5a:21:56:
de:67:18:ab:f5:03:dc:bc:d5:f4:5c:81:c4:60:7e:0d:11:94:
74:df:1f:55:49:06:36:aa:3b:bf:04:e0:1b:66:a5:1a:f8:0b:
98:f0:6b:b8:8b:89:e4:11:c7:aa:e3:bc:77:69:fe:7f:1c:3f:
35:5b:6a:92:0f:78:ce:d9:8c:70:d5:1c:51:de:01:41:67:9f:
18:0c:29:c3:81:6f:4b:2f:19:bf:d5:14:72:b1:fe:24:98:08:
e6:e7:c4:e4:04:65:7e:db:5f:f6:91:61:fe:8d:c9:c6:31:b2:
54:7d:ad:66:07:fd:10:89:71:5c:48:cf:9b:02:a9:c8:0d:9e:
a7:8e:8c:38:46:a0:4e:d5:e9:5e:c5:3b:cf:0e:7a:64:7a:e1:
1d:b5:aa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:30:54 2025 by rpki-client