Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File: I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier: RHjahWN+bwM/3b7sXecTmewboDdljMuHP3D5wuTIIBc=
Subject key identifier: 3F:20:81:40:4C:52:A0:38:61:9E:EB:E8:3B:9F:E2:96:75:42:A5:D9
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial: 01977187EBA0F943C1118ED8E4A73D2F0AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number: 041D
Signing time: Sun 15 Jun 2025 03:00:22 +0000
Manifest this update: Sun 15 Jun 2025 03:00:22 +0000
Manifest next update: Mon 16 Jun 2025 03:00:22 +0000
Files and hashes: 1: AgvVH_Z5ZikBFIUyEGB_f4ftLfg.roa (hash: Ii6l1o1UjR6zsFk/Ik5xPFxEIQrzvV/YcOC6UeUTh7g=)
2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: 3+80m44HoHIXQnc/RVN8ml9bGhqCiFg8+30iNO33+z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:87:eb:a0:f9:43:c1:11:8e:d8:e4:a7:3d:2f:0a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Validity
Not Before: Jun 15 03:00:22 2025 GMT
Not After : Jun 16 03:00:22 2025 GMT
Subject: CN=3f2081404c52a038619eebe83b9fe2967542a5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:90:23:f2:bd:75:e0:ae:e6:bf:9d:2a:35:
c4:1e:46:04:d6:e6:46:ae:62:ca:a8:62:2c:1d:7c:
52:44:b0:f7:a0:cc:4b:39:60:91:d9:ee:19:89:22:
ed:44:18:41:d8:a0:23:a7:e1:df:ac:4f:6a:7f:de:
59:20:ad:ff:6d:76:4b:23:2f:07:07:c4:a4:64:ca:
8f:29:66:8f:35:89:e2:57:9e:2c:98:3e:48:b1:ff:
b2:c6:67:9c:75:86:7c:44:e8:25:c3:d0:1d:f8:8e:
3b:d1:eb:f2:95:01:c0:6d:b0:67:e2:63:14:13:96:
6e:c0:81:20:ea:26:a9:7f:f3:ca:8f:6b:dd:7f:09:
98:0e:5f:cb:88:4d:29:59:15:ea:9a:6c:a2:29:b7:
fd:38:d8:3e:63:c7:6f:aa:d2:7e:51:61:31:fa:08:
6a:ff:bb:57:0e:b6:c5:0b:54:0d:d8:89:32:50:89:
6a:29:8e:c0:97:60:2f:ff:62:98:78:36:11:8f:b0:
b9:e5:6a:e1:f6:5a:dd:fc:5f:10:ca:76:8c:10:37:
ca:fc:90:30:76:db:18:17:b5:a1:e6:d2:c9:2f:53:
ca:9a:1b:ae:62:93:81:00:ca:57:23:a1:53:fa:d9:
bd:0c:91:27:ae:19:77:b3:e8:ea:c0:56:aa:be:10:
a6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:20:81:40:4C:52:A0:38:61:9E:EB:E8:3B:9F:E2:96:75:42:A5:D9
X509v3 Authority Key Identifier:
keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5f:ec:55:f0:f7:6c:65:a1:75:f9:e6:75:48:bf:98:e2:44:
86:d4:d4:ac:5b:2d:59:f7:29:d0:0d:b0:5d:95:40:34:4f:09:
8b:7c:c0:ca:2d:81:04:36:88:6c:33:16:5c:59:5f:79:37:9a:
f2:e2:42:2e:64:ec:ee:78:9f:22:8f:ef:73:8b:1e:53:d3:9a:
21:d9:35:68:12:a6:0c:5f:e4:75:02:49:7c:cf:bb:b6:98:67:
96:39:b1:a5:ae:f0:ee:25:ad:84:6f:52:fc:5b:ce:63:34:18:
be:e9:02:d6:87:6c:47:fd:a0:8f:cb:2b:a9:21:2c:11:e2:92:
4e:14:75:7a:54:ce:bc:24:2c:c6:ea:08:34:ca:be:62:c5:2c:
c4:e7:c5:42:d3:14:29:e7:77:38:6d:86:44:44:17:b9:d7:01:
cd:0e:c6:a5:eb:1a:8f:32:af:19:7e:c8:c6:24:a7:a6:b6:51:
00:08:d3:64:7a:d6:42:3a:6e:4f:0a:3a:6f:e6:33:ae:a8:77:
22:a9:45:d8:aa:50:9c:74:e4:d2:17:c1:07:d7:38:75:52:ac:
cf:9b:17:67:f8:d9:f6:2e:c8:8e:da:e6:6d:65:19:4c:e1:d7:
95:8b:cc:fc:4a:0b:92:cc:a6:3f:86:aa:81:78:67:0c:1a:92:
aa:8b:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:45:51 2025 by rpki-client