Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json)
Hash identifier: vyXKqlxcyQSawwr5BKFT8fQmBtD11iznUF1t2cANRMQ=
Subject key identifier: 86:3C:23:32:28:74:1C:F9:7C:52:47:5E:0C:81:DF:C7:B7:4A:E4:92
Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Certificate serial: 01976FD138F6DFF2192D4C0280A2450F4165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 19:01:11 +0000
Manifest this update: Sat 14 Jun 2025 19:01:11 +0000
Manifest next update: Sun 15 Jun 2025 19:01:11 +0000
Files and hashes: 1: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: pFkW5Oyu52ftn2urrSMIAP35fZcwKKDqcb9OQ6C+Qo8=)
2: UipKreH4zZ-JKObDVFkMEdQTy8E.roa (hash: 2lFb7AbIOkpByp+mzj8V6olwzUC3cjME2INFe+siQFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:38:f6:df:f2:19:2d:4c:02:80:a2:45:0f:41:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Validity
Not Before: Jun 14 19:01:11 2025 GMT
Not After : Jun 15 19:01:11 2025 GMT
Subject: CN=863c233228741cf97c52475e0c81dfc7b74ae492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4d:61:a4:7a:65:8a:f7:ab:11:1f:4d:20:4d:
d1:86:14:c2:c5:75:03:ea:a3:32:42:e6:63:45:81:
b2:ec:59:d8:99:25:a9:ca:74:7d:5a:fa:7c:bb:98:
72:7f:58:1b:28:83:b6:1f:9d:62:92:3b:8b:2b:2f:
dd:c5:81:2b:97:9f:41:fb:8e:80:b5:55:42:06:8c:
49:a8:c6:fc:e0:f6:03:1c:d3:d2:61:ee:de:59:69:
ff:56:da:c8:02:26:18:2d:82:30:cc:82:24:7e:f5:
e3:48:5f:c8:97:60:ce:74:78:63:e1:6d:88:1d:75:
88:16:c0:47:e7:f7:41:80:2e:50:08:a0:69:54:d0:
d5:5f:19:b6:d2:45:88:de:e3:5c:f9:28:cc:e9:fb:
01:b3:e9:37:a0:fb:0e:0f:3d:7b:8a:82:23:7d:f6:
b8:5e:5b:7e:ea:c5:e7:93:29:89:58:97:9c:44:bd:
2d:8e:b4:0b:2c:eb:ea:a6:4e:de:d2:81:29:35:8a:
b2:71:a6:83:07:af:02:d1:f5:5c:fb:3f:51:c7:8f:
a9:89:ec:a5:10:cb:1a:bb:fd:43:8a:a0:1c:05:4d:
3f:82:6c:09:b3:63:47:d2:29:4a:0f:80:f5:81:f8:
c8:69:34:66:06:60:1c:b9:ad:18:1a:0c:02:61:f0:
4e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3C:23:32:28:74:1C:F9:7C:52:47:5E:0C:81:DF:C7:B7:4A:E4:92
X509v3 Authority Key Identifier:
keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:74:f5:a7:b6:e9:39:80:c9:c4:f7:02:61:b5:52:a7:37:95:
26:c3:12:bd:39:d7:4b:19:21:c9:8d:37:19:55:3b:0a:e5:12:
2b:db:60:1c:ad:7c:c0:68:ad:30:3f:0d:4e:f6:e5:e2:7c:82:
b4:95:bb:7e:cb:49:b3:60:8b:b3:9d:65:7d:d2:94:9d:98:87:
ec:ed:90:6f:f0:fb:91:25:f5:68:e7:00:75:10:00:0f:dd:16:
fa:63:c2:40:fd:83:10:8c:d3:1a:10:c0:ea:6c:46:f8:98:81:
aa:ee:eb:18:5b:cf:49:7b:42:95:7c:c7:07:ee:99:fb:6b:2b:
9e:87:b6:15:df:6e:96:96:e8:57:64:dc:fd:b4:79:ad:39:33:
8b:57:cd:b5:78:9f:66:c1:87:41:6f:2a:48:42:a7:09:d1:69:
54:5e:dc:8c:b4:c7:1e:bd:d6:6c:b5:b7:a9:8e:d6:1b:12:5c:
9c:67:33:74:75:00:9b:77:d0:c6:00:e2:c2:6b:df:6e:30:3e:
b0:22:e4:0d:a4:e9:8a:83:ca:48:17:a4:69:5b:d5:07:db:0f:
2d:0c:db:7a:12:1d:88:87:71:21:d4:ef:aa:1a:e3:c4:9e:a8:
82:5e:57:6c:6d:44:bd:4b:6a:e5:f6:1f:3d:df:4a:9e:4b:50:
00:eb:2a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:16:36 2025 by rpki-client