Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
File: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft (raw, json)
Hash identifier: 9Od5Cz87ZOPKntpVRd1ZMeV7tMr3i/0qzpGGCTeD8kU=
Subject key identifier: 21:D0:6E:BB:53:50:C1:5F:E9:97:E7:4A:FD:A0:A0:32:41:E0:B4:FF
Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
Certificate issuer: /CN=2046367390224a07684d7977f9165a0950f03d54
Certificate serial: 019768BBC6AAB990094881944EB8285DE9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
Manifest number: 1299
Signing time: Fri 13 Jun 2025 10:00:25 +0000
Manifest this update: Fri 13 Jun 2025 10:00:25 +0000
Manifest next update: Sat 14 Jun 2025 10:00:25 +0000
Files and hashes: 1: ICVbUtHfbHYJwV7ucXI2K_14ylU.roa (hash: d0or5/9y3dY5/PzUShTK41fVXw4MjWFCN4HTk7PqBCg=)
2: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl (hash: 4H58Htj3ABW0iRoM2gDtLMNFwFY+WMjPjj0Wp2OZchk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:c6:aa:b9:90:09:48:81:94:4e:b8:28:5d:e9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2046367390224a07684d7977f9165a0950f03d54
Validity
Not Before: Jun 13 10:00:25 2025 GMT
Not After : Jun 14 10:00:25 2025 GMT
Subject: CN=21d06ebb5350c15fe997e74afda0a03241e0b4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0e:7d:e0:bf:22:6d:b0:a8:1d:91:f9:58:63:
30:e2:e2:80:37:c0:c4:50:da:fe:1a:dc:e8:5e:f3:
4b:12:c1:ba:8e:34:bd:f0:ba:0c:b2:93:02:db:a6:
78:e6:09:66:40:31:9f:48:7e:83:96:9a:a7:38:60:
41:0d:1c:16:7c:cf:0f:b9:50:bf:51:86:2b:41:ba:
fd:f1:a9:e8:d9:f3:8a:b0:90:39:76:94:d8:35:7c:
df:74:ca:15:6e:1e:af:b4:85:2e:31:e5:21:0d:56:
77:c9:39:bd:8a:3d:ac:0b:0a:aa:e6:c2:11:28:5b:
0c:39:ac:db:d0:7c:eb:ce:5f:b5:dd:3d:ab:1a:cc:
e8:f1:d2:8d:b1:13:d2:89:49:cf:3f:4e:e6:b3:8f:
a1:e8:8c:2e:31:05:51:d8:bf:61:73:83:41:1e:04:
21:ba:a6:a9:76:a4:3e:30:b4:ec:f3:be:fd:21:41:
06:f8:e7:27:02:36:cd:dd:cc:07:ca:61:e1:9c:6d:
a5:45:ca:4c:38:a6:70:9c:af:0d:d6:a9:05:71:94:
d9:de:10:ea:6c:a4:11:81:10:3d:c2:39:19:a3:3b:
7f:41:0e:5e:3b:c6:b5:6d:59:cd:fc:b0:3a:eb:23:
b4:cd:bf:06:c0:a6:4b:dd:b8:24:a5:49:7a:af:70:
2e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D0:6E:BB:53:50:C1:5F:E9:97:E7:4A:FD:A0:A0:32:41:E0:B4:FF
X509v3 Authority Key Identifier:
keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d1:b6:03:64:74:6b:93:89:bd:74:2d:84:9e:80:6f:90:ec:
f7:a6:51:d5:02:63:92:5b:26:7e:66:fa:fd:38:2f:9b:de:ea:
a9:41:33:2f:d4:46:64:a8:a9:fc:3f:cb:0d:5f:ce:fb:4a:9b:
cc:0f:ac:5c:98:12:3c:fd:22:59:39:86:98:b3:e1:27:eb:ec:
f6:8c:28:d5:3a:5e:35:10:62:1a:cb:39:16:88:a3:9a:3d:7c:
7f:62:12:45:6b:f5:75:f5:85:19:ad:63:ce:4d:9b:f2:a7:65:
f2:04:d9:1d:29:6d:8d:c1:3d:78:52:0d:55:83:96:66:b8:e3:
6b:82:bb:0e:95:b1:90:f2:8e:27:94:43:ba:ec:45:d7:e7:e5:
82:ea:cd:52:c1:58:9a:c5:76:bb:30:99:10:03:71:c5:8e:ed:
ad:e7:bc:55:96:87:e0:de:94:ae:9c:c7:9c:89:ba:3a:ba:8a:
b2:f4:ee:d7:fe:68:81:15:3d:c5:bf:ae:35:88:7d:86:2a:13:
b9:22:a0:26:f6:53:18:9c:b0:6e:f2:04:53:f0:ca:f6:da:5e:
45:b1:b2:1f:1c:ef:c3:a6:5c:a0:2a:87:81:e9:a2:5f:43:38:
6b:5d:33:6b:65:f7:5f:7a:a6:09:b4:87:e6:a4:a9:45:2c:b2:
e3:a2:06:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:55 2025 by rpki-client