Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File: iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier: Mt/8eg9+PnFBSsXCMoEGLHT+nmaOHIM/hkM8R2XUCkQ=
Subject key identifier: 6C:E9:64:69:49:47:25:2F:55:31:86:30:FC:57:A6:48:A9:72:95:2E
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial: 019779AFF944B1C960C6109D3DA44A8D8341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number: 09A3
Signing time: Mon 16 Jun 2025 17:01:05 +0000
Manifest this update: Mon 16 Jun 2025 17:01:05 +0000
Manifest next update: Tue 17 Jun 2025 17:01:05 +0000
Files and hashes: 1: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: IFavXWm0A/Tkph5Jm8IrcMdqbO1uaHVp8+tXWfF9lHQ=)
2: siJjmLBZP9diFC7BYX9p7SQAfZw.roa (hash: Gsh0pNObMeNVow5ebFzkqw16IE2NyBLNNUC8IDCqBag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:f9:44:b1:c9:60:c6:10:9d:3d:a4:4a:8d:83:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Validity
Not Before: Jun 16 17:01:05 2025 GMT
Not After : Jun 17 17:01:05 2025 GMT
Subject: CN=6ce964694947252f55318630fc57a648a972952e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:24:19:45:64:cf:86:7a:d6:f0:95:6a:08:
12:62:ba:7f:b6:e3:79:19:42:47:af:21:e8:c7:69:
c2:6b:ab:ea:1d:41:18:0d:ea:1e:84:13:5b:26:a9:
c9:e4:05:18:ae:b9:3e:2e:e8:b8:2e:08:61:ab:30:
0e:fe:87:8f:81:4b:a2:c1:f4:91:1f:f5:ac:07:40:
71:85:a4:ba:95:c1:a8:3e:8b:e3:3b:79:26:78:a1:
9f:b7:8a:25:c7:ef:08:44:68:b0:d7:7a:08:c0:2b:
d5:6c:a0:0d:d7:c2:6f:4b:d2:c2:59:39:06:bc:a5:
65:3c:5b:07:df:85:a9:6b:9b:70:7e:dc:25:5d:43:
43:45:bb:77:df:64:66:95:7e:d7:63:f1:e0:41:42:
c2:29:c2:84:c5:60:74:30:75:5c:96:2b:cd:e4:b4:
ef:2b:9d:db:cd:39:76:c6:57:c7:b8:81:d1:56:cb:
9d:46:8b:32:af:a8:57:c8:33:91:0c:0a:8b:ef:24:
85:60:00:2a:d5:9b:6c:a9:2f:9e:e3:64:eb:27:ce:
e3:60:87:07:f0:8b:97:2e:23:42:55:96:8b:a2:8d:
af:f5:9f:2d:65:14:d8:c8:cf:e1:13:08:a0:0a:18:
b0:39:37:00:43:c3:19:69:4d:cc:00:16:62:98:7c:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E9:64:69:49:47:25:2F:55:31:86:30:FC:57:A6:48:A9:72:95:2E
X509v3 Authority Key Identifier:
keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:12:f2:d1:a5:8c:01:c0:01:d5:de:bf:6d:e1:a6:4c:0b:3a:
fd:9d:7d:2c:1b:f2:d6:13:6e:c0:d2:31:3f:b0:eb:ad:76:6d:
b9:51:66:34:f4:09:bf:f7:ff:9a:5d:fd:f1:2a:85:cc:65:92:
f5:6d:ba:53:cd:8d:56:38:90:88:c8:a6:71:fb:f4:26:be:3a:
ca:c6:92:4a:36:82:bb:07:38:b6:59:a3:2c:95:57:a7:50:93:
54:8f:0c:01:ae:fa:28:7a:ab:56:95:5c:4a:7b:17:dc:f4:c7:
f9:c4:cb:75:9b:34:3b:07:6b:b0:83:75:f9:69:d1:ed:43:2e:
39:a8:a9:2b:66:73:74:39:6f:3d:3d:6a:c6:c0:1c:e1:37:57:
7b:b7:ee:a8:6d:85:cd:a5:63:90:b7:9e:81:dd:30:8a:c1:f7:
77:dc:de:29:92:30:b2:4f:d2:a0:40:a9:df:2d:af:a8:ca:ae:
c4:c7:9e:72:e4:8d:b7:ea:1f:21:24:82:a1:ef:41:0f:a2:e9:
e1:c7:40:a9:f2:3b:cc:7c:d1:6c:09:f7:2c:f5:bb:22:1f:d3:
a5:2d:7b:ce:cd:ee:da:a6:94:1c:e3:c9:cc:b4:db:d5:b9:85:
1e:44:16:3e:8b:7a:8f:36:6a:94:82:1f:bd:b5:3e:84:c1:6a:
52:f0:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:33:37 2025 by rpki-client