Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json)
Hash identifier: MiIXF0CTSuLL0FjcslzO0EeY+uCKTqFt8n4AFsa+KGk=
Subject key identifier: 1B:1B:AC:03:D8:53:51:04:11:DF:61:CF:62:43:D7:BF:4B:65:D0:9A
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial: 019777C0F8B2751AA66E12E9E8F65E3E3109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 08:00:24 +0000
Manifest this update: Mon 16 Jun 2025 08:00:24 +0000
Manifest next update: Tue 17 Jun 2025 08:00:24 +0000
Files and hashes: 1: 8InkRh5Wj50wupapEt3xMMDv2FM.roa (hash: FzSOMTztxVGNTuOuFeKpaH88eAgODwYDPG7DI36h4Cg=)
2: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: NR2nOoInlAioKFUTb5/J9seDJPi5Bjp6NYCr/rbds6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c0:f8:b2:75:1a:a6:6e:12:e9:e8:f6:5e:3e:31:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
Validity
Not Before: Jun 16 08:00:24 2025 GMT
Not After : Jun 17 08:00:24 2025 GMT
Subject: CN=1b1bac03d853510411df61cf6243d7bf4b65d09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:2a:a4:af:42:cb:1f:a7:04:be:f2:f9:c0:
43:62:48:9a:c4:d0:dc:11:7d:71:2e:ef:10:3e:27:
84:57:89:a5:56:fa:1d:3c:a5:a0:1d:51:51:6b:89:
c1:16:b5:b2:1c:96:e0:31:ca:ba:48:e5:b1:84:68:
ca:9a:98:fd:f4:05:50:9a:f1:58:8f:c6:f7:2c:d6:
a0:cd:75:ed:cc:32:83:e6:4c:4e:2a:c2:d0:03:2d:
a7:cf:58:8e:20:f2:46:7c:47:db:ae:27:70:8a:4f:
4d:53:eb:ef:ff:d6:bd:15:e2:01:69:07:47:3c:8d:
7a:28:a4:0a:d0:3d:3f:fc:b5:d0:28:cf:fe:69:69:
8b:20:4c:8e:39:79:e9:fa:47:28:ba:74:0c:d4:f6:
96:37:1f:b7:c4:7f:6b:76:d0:fc:ed:8d:1a:0d:39:
b5:21:6e:02:57:7f:87:b7:dd:af:c5:e9:fd:6c:75:
29:21:cd:44:22:2c:ed:7e:c9:80:d8:8c:cb:08:ed:
80:a8:15:16:62:1a:69:ab:63:27:11:f3:ee:84:72:
f9:64:0d:71:ca:c9:23:82:36:1d:10:50:65:e7:a8:
5c:46:b0:08:13:e5:e1:4f:df:5c:85:1a:45:af:d0:
54:bd:08:04:de:56:72:06:95:c0:53:f9:1f:d9:93:
9c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1B:AC:03:D8:53:51:04:11:DF:61:CF:62:43:D7:BF:4B:65:D0:9A
X509v3 Authority Key Identifier:
keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:21:a7:83:4a:cf:f0:cb:06:f6:cb:16:9e:7e:d1:56:50:5e:
e3:95:2a:de:26:dd:5e:a1:cd:ed:b9:94:7b:de:0c:ee:42:52:
97:0f:3e:52:d2:42:99:b6:13:10:fe:b6:99:90:f1:64:32:3a:
79:20:a2:8d:d8:e2:bd:e9:bd:ea:37:71:cd:74:34:91:a9:13:
80:b8:29:26:43:91:68:4c:77:19:89:ba:07:24:bb:29:18:f0:
08:13:b4:a6:29:dc:d1:05:b9:59:43:fd:f9:da:9e:ef:3f:b1:
be:5b:01:1f:6a:f5:bb:31:1c:22:66:70:b6:bc:d0:3a:c9:15:
76:e7:e6:fe:86:18:14:ef:c2:84:5c:ef:b4:b3:f4:d8:75:69:
65:38:60:aa:8f:be:89:c8:58:61:46:6e:17:c2:24:9c:ac:94:
4c:40:80:a3:b1:07:ef:98:4d:1a:1f:56:19:86:e9:83:92:88:
c7:2f:c3:02:27:c4:7f:d0:c3:dd:f9:6b:b7:0f:a2:41:ef:5c:
7a:e4:b1:39:97:6d:98:50:96:22:b9:72:9b:7e:1e:bd:a7:60:
cf:b4:2c:ef:eb:d7:d5:d4:69:8b:66:d1:e9:75:f1:e6:6e:f4:
0f:b6:e6:c5:57:38:5e:3b:10:c2:f4:06:92:e0:d6:87:1f:e8:
f7:11:09:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:27:47 2025 by rpki-client