Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
File: IYssahphoXurfAMggKo78kR4tt0.mft (raw, json)
Hash identifier: /+dO24azpsHpO3TsrO4emjo7t/WsqKJCtSIhcHEqUfs=
Subject key identifier: 0B:09:16:FE:52:E5:C3:25:04:99:6C:1E:BB:67:06:27:8D:8E:14:B5
Authority key identifier: 21:8B:2C:6A:1A:61:A1:7B:AB:7C:03:20:80:AA:3B:F2:44:78:B6:DD
Certificate issuer: /CN=218b2c6a1a61a17bab7c032080aa3bf24478b6dd
Certificate serial: 019770E3365FF8BA375626EDCC979AD620E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYssahphoXurfAMggKo78kR4tt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
Manifest number: 0C4B
Signing time: Sun 15 Jun 2025 00:00:28 +0000
Manifest this update: Sun 15 Jun 2025 00:00:28 +0000
Manifest next update: Mon 16 Jun 2025 00:00:28 +0000
Files and hashes: 1: IYssahphoXurfAMggKo78kR4tt0.crl (hash: VNjWnP6+etdpfUYXjllRmrem4txREzsP7o9I0dWA8RY=)
2: wnACGaMKOrsg5i1-6PAAx8VKQ0Y.roa (hash: kxRyBHTXArEsk0qrBdKwIl2FB5x6O/p6TWut1bU4JRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYssahphoXurfAMggKo78kR4tt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:36:5f:f8:ba:37:56:26:ed:cc:97:9a:d6:20:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218b2c6a1a61a17bab7c032080aa3bf24478b6dd
Validity
Not Before: Jun 15 00:00:28 2025 GMT
Not After : Jun 16 00:00:28 2025 GMT
Subject: CN=0b0916fe52e5c32504996c1ebb6706278d8e14b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:2c:6c:32:7c:35:e7:13:d5:d2:3d:4c:7d:
70:cf:ab:9f:2c:c9:97:35:8b:eb:b8:76:f6:b9:07:
6b:f8:1e:93:19:f9:38:f9:7e:38:00:b1:29:a9:c7:
1d:64:44:45:3e:4b:92:cb:0f:d4:e5:fc:57:55:d0:
97:89:54:b2:3a:28:ed:b7:ac:7e:04:48:61:95:ca:
fd:ac:fa:40:82:29:ee:0a:f1:0a:b5:da:08:dd:c4:
0f:c8:ae:5d:ec:c9:43:a2:e1:42:ea:d9:ca:bb:16:
9a:4a:0a:61:ee:9d:6b:83:7c:a6:a1:4b:a1:1c:c3:
22:44:7e:fb:5b:6e:ba:00:71:d7:a9:32:76:70:54:
9c:12:aa:00:b7:ee:30:ac:ec:05:5f:9d:a4:5c:f3:
b5:4f:4a:96:a1:e3:1c:dd:72:d1:ce:35:f5:4e:0b:
d0:48:f2:ca:f8:79:40:66:2c:34:ab:79:97:cc:2c:
d6:9c:5f:68:26:0b:2b:76:fb:71:d9:88:96:65:4f:
c2:94:8f:01:88:5c:b4:fa:17:fc:03:4a:48:e6:4e:
3b:b7:60:b9:a7:1b:be:6f:e7:f0:20:98:7f:8c:16:
b4:5a:6d:d7:22:84:8a:39:b7:fc:66:97:20:bd:b9:
fb:df:17:7b:05:e7:41:aa:58:59:bb:75:7a:38:8c:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:09:16:FE:52:E5:C3:25:04:99:6C:1E:BB:67:06:27:8D:8E:14:B5
X509v3 Authority Key Identifier:
keyid:21:8B:2C:6A:1A:61:A1:7B:AB:7C:03:20:80:AA:3B:F2:44:78:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYssahphoXurfAMggKo78kR4tt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ae:f9:91:3a:d9:9e:f1:08:6e:51:62:29:22:8e:ee:2c:e7:
7d:29:07:80:d9:71:3b:b4:a2:7a:6f:af:20:e5:7a:1c:4c:67:
93:47:5b:cc:57:5c:f5:87:1d:03:71:35:2f:b6:fc:48:3d:77:
eb:8e:0e:19:47:74:eb:3b:e0:d8:5f:00:9e:d3:d4:5c:23:b2:
94:53:ce:70:41:2f:56:f4:45:f3:83:4f:fd:89:17:29:47:a2:
4d:76:26:d1:7b:30:15:97:ea:6f:de:44:20:5d:67:16:5d:60:
93:82:dd:10:a7:08:00:ff:6b:93:c9:34:bd:84:62:d5:02:00:
fe:fe:c7:cd:4d:10:f3:db:a8:6f:66:6a:77:65:29:f7:28:e6:
96:cb:b3:87:74:c7:37:15:40:3f:75:55:92:44:24:03:08:84:
28:6f:3e:8d:c8:f4:e6:c6:58:ef:a2:16:2f:ec:2b:24:8c:69:
90:4d:f6:68:6d:43:7f:d3:6d:f1:b6:5d:a0:7b:94:63:16:23:
b0:f5:d4:88:bf:df:7b:4d:d9:19:9a:ba:4a:5f:d9:73:ab:d6:
85:9d:09:ef:e5:52:bf:6f:96:e8:1e:fa:b4:25:06:06:ae:68:
58:32:a2:a0:1f:3e:2f:97:7c:90:28:7f:c0:0a:39:4b:4f:4b:
9c:e3:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:11:04 2025 by rpki-client