Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
File: IS7ROxq32gkK7kL2rt3f27FWpfg.mft (raw, json)
Hash identifier: ZQQ4TqJk1qinqx6/DlsgQRbh2WUxZ21f43RuegjK92U=
Subject key identifier: 1C:2F:9F:CB:FA:C8:8B:78:00:CA:9E:39:43:5C:15:2F:EA:90:28:5B
Authority key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
Certificate issuer: /CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Certificate serial: 019771F61FC921B788B1A662ED9EBD5C0E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
Manifest number: 0DA9
Signing time: Sun 15 Jun 2025 05:00:44 +0000
Manifest this update: Sun 15 Jun 2025 05:00:44 +0000
Manifest next update: Mon 16 Jun 2025 05:00:44 +0000
Files and hashes: 1: IS7ROxq32gkK7kL2rt3f27FWpfg.crl (hash: vUGQ+HFRt+robszsTqjq+dgOCg2KKXukg7XwHMulnBQ=)
2: pYYF24wF2qUQt0FJlZ3YB5wUYkU.roa (hash: zEnazzlJdeIGpPAdwwnulmZqiWyOGMOyiwVZOjKNgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:1f:c9:21:b7:88:b1:a6:62:ed:9e:bd:5c:0e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Validity
Not Before: Jun 15 05:00:44 2025 GMT
Not After : Jun 16 05:00:44 2025 GMT
Subject: CN=1c2f9fcbfac88b7800ca9e39435c152fea90285b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:0b:b7:eb:d7:57:13:37:f2:96:39:7b:0b:
1f:e2:6e:1c:92:70:f8:11:f4:20:91:e6:73:ec:13:
d7:20:28:6d:d0:69:a1:be:92:f6:3a:4f:0d:6d:b0:
c1:9a:5d:ae:a5:e0:53:a4:0e:d1:dd:aa:9f:31:bc:
a4:d9:f7:7a:e8:0e:e4:9e:76:61:bc:74:de:b9:c5:
4c:96:89:12:13:06:fc:04:82:97:cf:1d:f1:1c:50:
fb:36:7b:e5:67:54:fc:95:bc:6b:61:d5:e5:1f:54:
0d:85:26:9a:cc:d4:c9:b1:ab:48:f1:69:f2:11:ca:
2d:2c:63:ea:70:6d:ad:24:7b:ae:40:e6:02:90:73:
31:e4:38:c0:9e:b3:9d:66:31:69:53:63:92:1b:e9:
c8:a8:ef:03:24:16:88:47:e4:bc:37:d6:17:af:5d:
89:44:57:d3:9a:c9:a2:58:f2:23:29:99:1e:ed:b2:
c7:e9:b1:1d:45:2b:7b:8c:74:ed:b6:46:36:73:85:
fd:43:15:a1:d3:49:a0:d9:e1:9e:e8:09:1b:39:b1:
fc:f8:45:6a:67:c3:97:4b:56:35:df:3e:28:a8:f5:
95:19:a1:3b:93:ff:07:d4:6a:fb:44:e7:3d:d5:9a:
fe:32:9e:97:32:a7:ee:db:c4:6e:a9:33:61:af:84:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2F:9F:CB:FA:C8:8B:78:00:CA:9E:39:43:5C:15:2F:EA:90:28:5B
X509v3 Authority Key Identifier:
keyid:21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ff:f2:3b:ad:e9:cf:21:08:55:d9:43:df:83:f9:d5:0e:f1:
f1:e6:f1:23:d8:54:a6:0b:2b:00:66:1e:46:20:23:9e:27:25:
b5:53:90:75:d9:de:33:7c:22:9e:9d:24:5f:0b:de:39:e6:2d:
86:81:fe:e0:74:32:c5:e7:31:94:08:ea:b6:d0:17:e5:f8:f4:
e3:53:b8:3c:b8:18:a6:d7:43:bc:2c:80:37:ef:85:65:f2:17:
bb:be:61:b9:10:2c:92:14:bb:3c:ba:de:e9:93:02:7a:07:16:
d0:eb:4e:f3:cf:a7:22:5d:52:24:da:3e:15:7c:a4:10:8e:b1:
dc:f1:66:0d:eb:34:15:46:f0:23:30:90:a2:b8:6a:bb:c5:cc:
05:ec:ab:60:74:35:73:53:28:ab:a1:28:f0:40:b1:bf:6e:71:
07:d3:2d:bd:bc:a2:30:c2:f5:90:59:10:15:8f:51:48:01:9a:
ee:e0:8d:e3:11:a9:28:e4:19:80:36:8b:e6:a2:ed:57:bf:4f:
11:ae:1c:14:4e:34:47:01:72:06:5b:9c:fc:a9:2c:af:ab:3b:
4d:c8:6f:df:79:02:58:cb:be:17:25:7d:da:e9:cf:09:d3:ac:
06:65:8f:47:a8:64:34:1f:ca:59:c6:3a:a9:51:b9:81:de:05:
78:9f:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:18:38 2025 by rpki-client