Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json)
Hash identifier: QTvczSgNWsIGsjmTVfNnS73gWITIgyYR279S3bUQrTc=
Subject key identifier: E6:00:79:E2:DC:9D:48:EA:F1:0C:1B:D3:4F:D3:8F:79:0D:D8:28:58
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 01978A36011C0FEF42823E74A1ED9341BF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
Manifest number: 04B1
Signing time: Thu 19 Jun 2025 22:01:24 +0000
Manifest this update: Thu 19 Jun 2025 22:01:24 +0000
Manifest next update: Fri 20 Jun 2025 22:01:24 +0000
Files and hashes: 1: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: u4wC9ToR23LgJxguCsIyvRs3sTYjafxv1Fu9hn7afi8=)
2: bMgRIHfe9czZPsPUKpcmfdHESeA.roa (hash: xt+uVWCgpmniCKO9lfh4KPFwtigjOiclhRJVmau9h3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:36:01:1c:0f:ef:42:82:3e:74:a1:ed:93:41:bf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Jun 19 22:01:24 2025 GMT
Not After : Jun 20 22:01:24 2025 GMT
Subject: CN=e60079e2dc9d48eaf10c1bd34fd38f790dd82858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:83:f0:19:16:40:40:d1:78:09:c1:9a:eb:
22:3b:57:21:7c:fc:89:3f:f6:f4:d4:af:11:ea:cd:
35:f5:69:9c:a4:a2:15:9b:a7:1f:32:08:5a:d4:dd:
50:e7:37:71:41:60:10:46:e3:3f:14:a5:bb:4c:e9:
c8:29:26:92:47:c7:eb:7e:8c:90:78:ce:db:be:ad:
dd:3a:0b:da:64:bc:37:bc:de:2a:8f:fb:dd:ba:9f:
83:e3:d5:04:a4:bb:45:cf:16:a8:7b:2b:95:ea:d9:
2b:81:d7:b1:48:86:28:fc:6b:02:1b:80:99:32:f9:
01:ca:ec:1a:fd:1b:b2:0d:53:60:1f:46:9a:03:3f:
10:39:ce:51:17:83:46:71:f8:2c:16:63:8b:9b:cf:
a3:e2:5a:47:30:a9:2f:73:31:6a:6e:e5:94:25:2a:
47:f6:44:8e:cc:ff:85:97:64:45:18:42:b4:32:d7:
b5:ad:6c:87:6e:98:53:44:b4:2f:a7:d8:b7:a4:6d:
d0:aa:e0:fc:97:69:e5:6e:b3:43:93:a4:b3:45:81:
f6:5a:a9:51:cf:39:aa:15:95:ff:55:6c:f0:e1:9c:
61:e5:70:6e:5a:23:c8:62:27:3f:d6:c3:28:25:d3:
c7:a5:cf:bb:a1:dd:75:3b:1e:67:4e:d3:79:b6:f4:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:00:79:E2:DC:9D:48:EA:F1:0C:1B:D3:4F:D3:8F:79:0D:D8:28:58
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2b:89:02:e0:d8:45:96:9d:38:c3:17:e7:07:8c:5b:d9:d8:
0c:c6:b9:75:d0:a5:d2:f4:64:f2:58:2e:d9:d9:eb:6c:ce:30:
3a:71:7e:44:d6:f4:7a:47:2e:a4:8c:cb:a5:0f:d7:3d:07:54:
48:74:a6:37:a1:ab:0c:39:f7:f0:22:99:1f:de:a0:2c:3c:00:
f8:61:58:8e:bc:e6:af:e3:1f:6c:78:a0:11:2c:3e:11:54:3c:
86:81:d0:3b:27:46:f8:f8:ec:48:99:1c:0f:5e:0f:ab:99:f6:
b8:49:a3:4d:78:27:78:03:98:a3:cf:1b:a6:5d:f9:a9:bc:8f:
ba:64:de:6b:e4:da:c1:14:2b:3e:b1:c5:c7:d8:dc:71:28:91:
f2:df:5a:f4:1b:26:0c:36:10:e8:cc:03:81:f3:8d:6a:76:50:
8c:5a:04:4a:bb:2f:00:0a:87:de:66:99:ef:d4:b5:ef:2f:67:
fe:a0:a4:29:93:dd:18:3c:e8:e0:20:e6:90:4d:9e:4d:00:9f:
07:94:c4:b0:35:8a:ea:83:a2:70:4d:f0:aa:b5:6c:c4:72:cc:
54:15:5a:36:cc:20:9b:15:49:96:f4:a9:79:7d:2e:a0:48:af:
05:f6:f3:89:05:2e:a7:26:cd:59:19:0e:d9:71:21:c5:54:32:
29:69:9e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:29:06 2025 by rpki-client