Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: N24ZiWPpK/4KpswOeNDvF93SwIPuuZhPr8A5aGoXe6Q=
Subject key identifier: 8B:9F:9A:B6:14:47:CE:EC:63:C8:9E:AC:09:3D:4A:0F:A9:0D:D8:25
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 01977489760444CF6B336433A702BC25A879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 17:00:55 +0000
Manifest this update: Sun 15 Jun 2025 17:00:55 +0000
Manifest next update: Mon 16 Jun 2025 17:00:55 +0000
Files and hashes: 1: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: FPlBwNhMuAuGLCrAobUR0eVjCjGzF1653FrOJFVev0M=)
2: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (hash: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:89:76:04:44:cf:6b:33:64:33:a7:02:bc:25:a8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Jun 15 17:00:55 2025 GMT
Not After : Jun 16 17:00:55 2025 GMT
Subject: CN=8b9f9ab61447ceec63c89eac093d4a0fa90dd825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ee:eb:15:71:d1:99:19:d6:2e:f7:f7:9e:b4:
87:2b:80:c4:9a:d7:05:f9:08:0f:7b:88:99:90:82:
66:c2:05:26:16:70:72:d2:e8:7f:03:06:e8:1e:b2:
82:94:ab:df:22:82:5f:38:7e:97:3e:80:ad:10:61:
5a:dc:cd:77:05:e1:1a:e1:0a:53:cf:55:89:1a:83:
e6:45:ff:8e:aa:ae:a6:1b:03:57:02:2f:f0:4b:31:
5a:5d:9e:b8:06:ed:d2:63:85:c1:8d:29:3f:ca:a7:
cb:8a:03:ba:ad:a0:23:b4:ae:4d:34:d9:9d:09:f9:
a0:bc:ef:10:04:32:da:bb:6a:83:a3:30:88:21:7e:
29:b6:60:66:dc:38:75:b3:e5:c4:cd:5b:d9:91:20:
d6:db:da:fb:b5:2c:44:14:37:81:c0:51:db:9c:a5:
02:aa:27:e3:e6:74:32:92:cc:05:14:ff:17:62:a2:
8e:af:71:4d:f4:01:94:3d:26:6b:04:b8:fb:87:d7:
44:a8:e8:cd:35:a1:b3:4f:39:d6:ef:ed:ff:18:f3:
b4:f7:1c:0b:e7:c5:ac:19:0f:a1:85:48:b6:90:48:
7b:32:b2:6c:2b:af:be:40:7e:90:1f:26:39:f7:1a:
a7:34:37:a8:d6:5c:41:f5:a2:8a:e7:96:1e:8b:1b:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9F:9A:B6:14:47:CE:EC:63:C8:9E:AC:09:3D:4A:0F:A9:0D:D8:25
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:33:ec:24:ad:89:7c:59:0a:b8:6c:cb:37:45:36:8d:75:1d:
fa:3e:91:90:d6:45:e2:b5:52:54:07:c6:e1:39:f6:f4:22:d1:
42:6c:61:ca:96:2a:6a:ca:9c:f2:b5:e5:d3:a8:10:9c:db:c5:
13:98:07:bd:c9:14:2b:14:25:f6:02:14:d0:ab:e9:c6:f5:ca:
49:87:e8:ee:53:46:56:c2:4e:8a:8e:96:08:6f:86:4d:62:e5:
f9:81:ce:27:6a:8f:69:78:fb:d5:44:45:8c:5e:f8:c3:47:2f:
88:cf:05:98:fd:f1:12:92:37:68:bd:4c:f9:3a:87:70:47:44:
0d:2c:6c:ef:ec:89:7d:bd:fe:50:c6:ea:61:14:33:7c:25:a0:
b7:06:fa:7a:ec:11:1f:46:d8:97:f1:cb:df:28:f6:07:8d:ee:
39:9f:0e:cb:a1:05:2b:1f:1e:3c:74:db:fa:18:35:86:bc:4c:
3b:62:12:a7:ce:59:d3:fb:79:65:46:86:37:cf:07:26:eb:60:
2f:b2:39:24:b3:84:56:8a:5e:4c:04:e7:17:e1:ea:e2:36:71:
7f:33:49:ac:e3:6e:ae:cb:5b:b6:f0:56:e0:9f:ae:de:06:1b:
65:08:36:a8:ca:68:d0:94:1e:18:2d:65:06:23:d0:0f:ea:42:
e6:1f:82:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:58:33 2025 by rpki-client