Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json)
Hash identifier: y6wgp9W+htEmcveUEpLXZnoASqX/YKz/LowJjx8xtVs=
Subject key identifier: 71:1C:CA:7A:31:A0:51:EB:03:34:2D:AE:C8:25:FE:0A:D6:AA:F7:D8
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 01976D06D14065895726AE4C400980B6D5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
Manifest number: 01D0
Signing time: Sat 14 Jun 2025 06:00:52 +0000
Manifest this update: Sat 14 Jun 2025 06:00:52 +0000
Manifest next update: Sun 15 Jun 2025 06:00:52 +0000
Files and hashes: 1: 2n3afJDZ2VaAW1ICi9wuuluJH-s.roa (hash: n7gdmzqfRPjhPckkIN46JD6+pmnsuH8Fvwcad0thHWk=)
2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: CP4eg1dB+XtoFrKy5oPHSH8yCk2OTVu1Rw1lHymtvKM=)
3: fc650b5-Hy28l_7CM0InWSbhHHA.roa (hash: I0jfOZTYpGZasFE0U01uqVVs9byyAIXg5OzAj9nSBPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:d1:40:65:89:57:26:ae:4c:40:09:80:b6:d5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: Jun 14 06:00:52 2025 GMT
Not After : Jun 15 06:00:52 2025 GMT
Subject: CN=711cca7a31a051eb03342daec825fe0ad6aaf7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e2:31:36:63:52:aa:b8:f5:5a:14:66:ee:e9:
79:f9:a0:5a:35:3d:d8:56:3f:8e:ec:1c:2c:3b:00:
72:6b:88:f0:09:62:0e:fd:ea:89:91:ab:4c:da:bb:
2b:c0:48:40:78:1d:67:61:33:57:15:d9:01:1e:a8:
c1:b3:51:73:da:a1:ad:60:5d:a5:a7:bd:d6:89:6e:
be:cf:a6:ab:5e:40:22:2f:26:3e:7c:f9:f3:6f:70:
1e:48:6b:a2:e7:b4:30:4f:6f:b0:2b:f5:d8:aa:63:
8f:c2:8e:77:69:74:ee:2f:a9:7b:d2:00:95:e5:ed:
2e:34:d5:20:f4:4a:4f:15:12:1e:83:bb:7b:ac:d2:
a2:3e:79:bd:ee:29:24:6e:8a:18:f7:17:76:2f:73:
86:c2:a6:8a:27:dd:5e:14:5e:54:e2:09:0c:15:59:
c5:5c:9b:03:a1:04:0a:ab:ea:21:75:07:7a:05:af:
f1:45:64:93:da:32:75:94:96:6e:6c:6e:af:cd:5b:
7f:56:46:0f:e8:48:fd:45:77:30:b3:ab:10:ad:1a:
e5:bc:39:a0:ac:d3:1a:73:ce:da:af:f4:4e:db:75:
e1:38:bd:14:c5:00:3e:12:48:f3:15:d2:1f:00:5f:
e4:ba:dd:73:63:34:cc:39:2f:ed:32:81:25:32:c3:
57:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1C:CA:7A:31:A0:51:EB:03:34:2D:AE:C8:25:FE:0A:D6:AA:F7:D8
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2f:bc:00:6e:de:68:61:76:32:91:4d:35:71:3f:be:ba:e5:
f5:1d:55:9d:12:59:5c:4f:b7:c8:3e:e5:e0:22:b5:a0:07:63:
b6:39:89:61:60:69:2c:d9:48:32:53:07:cd:21:ae:5b:82:28:
4d:b5:38:cb:88:72:c2:80:f0:34:ae:db:40:8c:df:a6:70:c7:
49:e7:42:e4:05:1a:72:12:6c:ef:bc:61:96:f7:ba:81:94:ae:
46:6e:89:2d:f4:e1:97:d5:cd:ab:26:c5:1e:3c:e2:09:b4:25:
6b:16:15:34:4d:a0:cd:0e:13:8d:9d:aa:d3:40:36:0e:a8:5f:
2b:2f:5b:d8:fa:56:b1:87:4d:97:29:98:d7:28:62:e4:56:cc:
70:e1:99:bb:8a:90:e4:fa:08:85:1d:92:c9:19:20:70:7d:d8:
91:ed:b7:4a:4c:99:00:d6:8b:5c:99:00:69:bc:6c:96:18:38:
83:a1:e1:80:5e:ca:03:f8:58:dd:dd:88:f1:22:61:47:de:5a:
fc:87:d3:bc:1d:d2:db:81:7b:ab:38:96:e5:b0:78:e4:94:5c:
81:26:f4:af:43:1e:97:80:8b:69:c3:12:07:c8:c1:9f:f4:89:
a0:58:90:bd:32:77:3c:02:60:e0:8f:2c:75:fd:36:db:ca:84:
cd:82:a3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:10:05 2025 by rpki-client