Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier: OP1w0QjROBvO5rNuSCEcRjAEX1sYYZwaDZIEXr+mZMM=
Subject key identifier: 63:4E:F4:97:86:14:08:62:A2:3F:A8:86:23:4A:04:EB:E6:E8:DE:39
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 01978357511B156C7FD1A6208E47775BEBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number: 1356
Signing time: Wed 18 Jun 2025 14:00:27 +0000
Manifest this update: Wed 18 Jun 2025 14:00:27 +0000
Manifest next update: Thu 19 Jun 2025 14:00:27 +0000
Files and hashes: 1: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: FzWs9DXeQ2pYBrgMU7JWYKVdVXEuNWee/G8CXJ2okuw=)
2: ZCDIooS_ImzZeN5QrbFaFhO5dyA.roa (hash: TP421izhVwKSZitQyZKTA1SgQgPy6vE7WxBJa4Db6y0=)
3: xOQ7AmZa9_C69z9KUz6w5PLIpQA.roa (hash: 8+VSRj7tw2mCh7Z/e6KhYhg5OTkoPLOgLEVa0Q5ZizM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:57:51:1b:15:6c:7f:d1:a6:20:8e:47:77:5b:eb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: Jun 18 14:00:27 2025 GMT
Not After : Jun 19 14:00:27 2025 GMT
Subject: CN=634ef49786140862a23fa886234a04ebe6e8de39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:75:4b:d5:7f:69:ea:53:e2:f0:d9:d0:27:
81:36:f5:ac:58:81:83:04:ec:e9:70:aa:c4:d2:c0:
16:58:be:dd:4b:a6:ce:59:78:7f:05:ef:3b:cd:24:
4a:1a:a8:68:53:59:a8:26:2d:85:a1:ab:15:94:5e:
72:15:59:61:80:d9:59:7d:e5:22:e4:95:e2:79:59:
b6:1f:52:89:ff:cf:db:17:cb:c0:ba:3b:c7:a9:3d:
6a:5c:44:bb:1c:0a:12:d2:1e:f1:d8:ea:a5:24:0e:
c0:9e:60:01:c6:86:55:a0:b9:f0:77:72:34:e8:25:
4c:d3:79:cc:9b:c7:eb:9b:7a:6c:e6:23:a3:fa:77:
74:18:dc:7c:fc:e0:25:e2:58:e9:90:73:10:d4:6b:
41:04:86:e4:0c:68:40:c8:25:5b:2b:88:3c:2b:b1:
b4:9a:5c:59:1b:23:81:69:fc:7b:de:62:82:27:9b:
64:55:25:04:06:1c:7e:d9:6b:94:f5:9e:12:ee:45:
17:dd:8b:c5:15:d6:d3:a5:59:00:63:2a:b1:cd:17:
f0:d3:41:2e:ff:ea:8d:9b:09:73:d8:5f:e3:b8:56:
4f:2d:63:ac:fe:0f:28:f8:69:1e:ae:ae:31:f0:34:
3a:55:9c:ce:0a:02:ca:cd:33:7a:b6:c8:fa:75:9e:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4E:F4:97:86:14:08:62:A2:3F:A8:86:23:4A:04:EB:E6:E8:DE:39
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:82:08:ef:22:2b:b3:a1:e1:07:7b:5e:97:33:d0:ab:44:4a:
5a:69:33:df:96:e9:16:77:da:29:c3:55:29:b3:04:90:66:73:
7f:3b:08:8d:fe:2d:79:e1:f1:0c:4d:96:03:2d:13:90:34:3a:
af:21:15:95:6a:41:af:1f:37:aa:d7:e8:00:06:ba:0d:a5:44:
ed:27:58:0f:cf:8f:60:b2:1e:9c:41:7f:43:a8:13:3d:75:3b:
70:60:11:ab:42:ab:1a:fb:b2:dd:83:b8:86:c2:47:20:df:9b:
a7:c7:ed:05:27:fe:21:74:45:5f:9a:6a:a3:c6:78:79:d3:1b:
60:0e:91:a8:06:ac:aa:5b:44:17:79:7c:6f:39:bd:a0:5e:36:
eb:ca:55:74:66:b8:66:5d:01:e8:cb:f6:9c:2a:19:0c:66:9a:
a7:11:c0:a1:a3:bb:6f:44:33:3e:46:48:1b:2d:f3:3f:72:4e:
19:50:8b:02:7c:2d:e3:ed:c6:85:b5:96:1c:d9:aa:1c:04:f5:
6a:da:86:58:ca:4d:c9:d2:76:46:dc:bd:19:92:2e:de:14:3a:
21:16:c3:2f:11:ae:61:17:8d:97:cc:ac:fd:14:c2:c1:ce:fb:
84:ba:1b:b7:88:bc:ca:14:d0:2f:9b:9a:a5:bc:aa:8b:d6:5a:
ec:c4:04:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:14:55 2025 by rpki-client