Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier: xKJ7huWAfK7YdtlA4wcnuTd0HGU0B8NFvBuduG94n/k=
Subject key identifier: DF:2E:47:9B:0F:B5:D2:6B:CE:DB:AA:72:F6:2F:3B:C5:7F:F9:03:63
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 0197711A04700E28F6CB12C5ED47BD9126C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number: 15A4
Signing time: Sun 15 Jun 2025 01:00:19 +0000
Manifest this update: Sun 15 Jun 2025 01:00:19 +0000
Manifest next update: Mon 16 Jun 2025 01:00:19 +0000
Files and hashes: 1: XXE5WlIT_ozyEAytSpXB35caxkQ.roa (hash: Z5Mr1yj+6v3QmltRiVNuWb2ENlO3YvaI3bd4LC6yd08=)
2: hYxEeDcN-ZCvWfxbhWHRTnBKx5w.roa (hash: abkpNh2rbEaJURGIshnWIsN6jClRtBNny3ctzSY8Z2Q=)
3: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: y3bwTvUrMhasjDlMl6ZqkFHzqILK9TkrJjc1Vquq6QI=)
4: vCe1hhmPjnbb0XE8yiRxgRed8A0.roa (hash: KTfoAuRaTuS/CmQPiG+Z8o3GDtlCRJukvO93N6O+Ywg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:04:70:0e:28:f6:cb:12:c5:ed:47:bd:91:26:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: Jun 15 01:00:19 2025 GMT
Not After : Jun 16 01:00:19 2025 GMT
Subject: CN=df2e479b0fb5d26bcedbaa72f62f3bc57ff90363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:07:48:b6:78:da:07:85:e6:c6:19:29:b0:
f9:c2:7b:ce:8a:fb:c4:ff:b7:18:6d:93:38:e3:f2:
d6:5f:a4:ea:c4:6d:2d:e0:6b:fa:ea:17:d4:3b:8d:
f3:ef:b2:cb:9a:79:d6:45:16:c1:01:7d:1b:e0:7d:
a9:06:d8:19:6e:31:92:9d:7c:65:8a:92:6d:71:bb:
d2:ab:be:3f:f8:89:d2:a2:9b:18:70:86:92:d0:f8:
34:cf:93:1e:f9:62:1c:85:51:1a:73:bf:1b:25:80:
6e:a9:db:67:db:18:b2:a6:15:ae:91:44:42:2c:15:
74:e2:80:49:ea:05:80:b4:24:55:64:2c:8f:50:3a:
38:10:20:cb:78:5f:9f:e1:75:d4:85:56:24:e4:b3:
bb:1e:6e:79:b8:2f:2a:22:6b:e1:08:b8:c8:7f:4e:
f1:13:c6:72:1a:f8:bd:23:df:ec:bb:a8:60:be:b1:
3b:6b:98:de:3c:0c:8f:72:87:10:27:2a:e1:ef:7b:
1a:c2:5c:30:80:1a:12:f5:62:aa:b1:91:44:6d:05:
4f:2d:cb:11:14:9f:98:00:5e:dc:4b:d5:b0:9a:c4:
4f:dc:a3:ba:c4:9f:43:b7:d9:c9:97:db:5c:e7:69:
b2:0b:6a:9b:08:ff:fc:c5:38:2c:c0:ee:9e:ba:51:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2E:47:9B:0F:B5:D2:6B:CE:DB:AA:72:F6:2F:3B:C5:7F:F9:03:63
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:df:d0:94:1d:17:34:72:e2:1d:75:4a:68:2d:b0:ab:75:b8:
c6:63:b9:a7:70:3c:c7:50:e7:9f:eb:37:5a:1f:f7:e1:df:0a:
f5:42:a1:f1:65:cd:3c:1f:a1:1e:57:32:39:85:50:13:7e:ae:
ce:64:3a:43:7a:47:20:43:d2:f9:b7:d8:21:57:d1:5c:27:7a:
c6:a4:00:dc:54:00:55:38:e3:82:5a:6e:e8:53:fc:56:ef:c0:
35:35:fd:d4:de:84:c2:78:9d:10:76:c8:74:00:57:79:cf:e5:
9b:d9:a3:cb:01:1e:5d:44:61:6f:ab:88:5c:7c:33:e5:11:4b:
0d:46:82:2e:ec:c6:9a:c7:39:4d:4d:7d:94:b0:55:ae:74:70:
8c:f7:ac:8d:88:c4:7c:99:f0:69:de:e9:85:c9:17:8c:08:fc:
99:cd:e6:12:93:88:c5:23:eb:9e:38:d8:f7:79:55:4c:24:21:
4d:7f:7a:85:e4:3c:4b:29:0e:c7:da:8a:fb:be:86:7d:7e:00:
ed:5b:5f:91:e4:b9:96:61:b6:1c:36:4b:19:46:3f:43:c0:cd:
aa:d9:b3:b5:d6:67:d6:82:5b:a6:e0:8d:58:86:f6:d5:49:77:
40:d9:76:11:9d:bc:e8:2e:41:06:92:28:a8:69:61:b6:62:cc:
ac:0d:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:23:44 2025 by rpki-client