Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
File: IQm0ddOrXNHMHElnHnf_nbXOGfE.mft (raw, json)
Hash identifier: z575JfpPg60c+pMT26exfjlWQRLD+yYe9vw29ae58po=
Subject key identifier: 12:C5:87:8D:1A:B2:91:45:37:5B:B8:6F:75:9E:4A:9C:8A:CB:1D:77
Authority key identifier: 21:09:B4:75:D3:AB:5C:D1:CC:1C:49:67:1E:77:FF:9D:B5:CE:19:F1
Certificate issuer: /CN=2109b475d3ab5cd1cc1c49671e77ff9db5ce19f1
Certificate serial: 0197778A719490DAAB47F78D9B38397226D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
Manifest number: 0F8F
Signing time: Mon 16 Jun 2025 07:00:50 +0000
Manifest this update: Mon 16 Jun 2025 07:00:50 +0000
Manifest next update: Tue 17 Jun 2025 07:00:50 +0000
Files and hashes: 1: IQm0ddOrXNHMHElnHnf_nbXOGfE.crl (hash: OPYJkjCn/jRj2RWk/qxY5rl1oCbc2SI5zRhl2iPzYjI=)
2: gxfPyS5KakpFEwmfLQLrUMtzDuA.roa (hash: rxllc4raZ48lNaZN0VdX0i2mHb0wFctajLKxvoGGQes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:71:94:90:da:ab:47:f7:8d:9b:38:39:72:26:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2109b475d3ab5cd1cc1c49671e77ff9db5ce19f1
Validity
Not Before: Jun 16 07:00:50 2025 GMT
Not After : Jun 17 07:00:50 2025 GMT
Subject: CN=12c5878d1ab29145375bb86f759e4a9c8acb1d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5d:ae:b9:5f:a7:c9:7f:c0:b7:3b:35:a7:a2:
ad:80:5b:79:01:3e:c1:ac:26:8c:30:a0:1d:a0:cd:
51:f1:36:8a:b5:f6:a8:b2:d3:67:6e:ac:a2:20:62:
e3:e4:c2:34:33:55:be:11:54:39:ae:cb:86:2d:2d:
8f:c0:66:a4:3b:55:05:cc:ef:58:de:ca:ff:6a:90:
36:14:c7:53:62:a8:93:2c:ca:05:8f:38:57:0e:28:
7d:b9:f0:88:4e:2f:b8:2c:44:d1:56:2a:94:dd:55:
22:f3:3a:67:ec:19:e2:be:16:ee:38:6c:7e:3f:16:
cf:3f:0f:b7:e2:a3:95:04:4a:04:5a:52:bd:77:bd:
4f:9e:d1:a6:3c:57:64:2a:cb:2b:40:7c:f7:ac:6f:
a9:c3:3e:33:10:56:96:a4:d4:37:62:39:0e:e4:9a:
9f:8a:db:bd:54:1e:8f:0f:e6:c5:21:8c:bd:f9:30:
9c:d5:cc:59:63:84:75:64:3e:7f:95:b7:6a:86:b4:
e0:d2:4a:6d:e6:48:b8:a9:95:b3:53:b4:f4:6e:36:
48:eb:5d:84:a0:cc:ad:bf:a1:0f:29:46:92:fd:db:
c8:99:b5:b8:5e:b5:95:bc:32:cc:8e:b7:fd:cf:0c:
9b:c8:1c:a8:92:14:27:80:08:7a:c7:b6:3f:a1:92:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C5:87:8D:1A:B2:91:45:37:5B:B8:6F:75:9E:4A:9C:8A:CB:1D:77
X509v3 Authority Key Identifier:
keyid:21:09:B4:75:D3:AB:5C:D1:CC:1C:49:67:1E:77:FF:9D:B5:CE:19:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c8:2d:38:b8:bd:cb:39:99:7b:61:2d:f1:6d:30:73:9e:e4:
2f:f5:97:40:55:86:85:dd:14:7a:5f:72:4e:ac:42:e4:3c:98:
e1:5d:fe:7d:55:46:b5:b3:50:96:6f:47:8d:62:df:a1:e1:0c:
a6:76:e5:c8:a6:ad:e6:16:1b:d9:80:be:87:af:d2:f1:20:60:
b1:93:52:d1:52:96:46:62:15:4a:a8:53:c9:7e:d8:f6:e7:e0:
3a:01:3a:c3:8c:5e:49:af:3d:1c:a9:78:c2:a4:4e:1f:07:f1:
ba:14:fd:f5:fc:39:4c:f9:b7:a0:4c:12:f0:d0:94:02:b5:e8:
d2:50:88:53:ef:80:13:1d:c4:2c:8a:5e:89:ac:63:f4:7f:21:
c1:c9:79:2d:90:b3:c9:25:ca:11:42:cc:47:6b:ea:05:59:8c:
85:dc:4e:6e:40:4b:97:31:ff:e9:07:96:69:c4:83:20:f5:62:
60:9c:48:19:a5:12:21:5e:a7:24:18:01:f4:e0:a9:53:15:f5:
24:28:bc:00:2e:70:3e:c6:00:98:e0:94:ca:fd:7b:80:69:22:
b6:4d:11:a1:ea:26:9a:3c:a2:80:05:e1:6b:be:b0:84:57:6b:
8c:68:b9:41:4f:c6:33:72:3e:35:68:19:d0:72:55:57:6c:f4:
05:e2:5a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:15:07 2025 by rpki-client