Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: cFSewjRfcpppmLR6bWBLWTpylOR6Nwt56FFQvpDQ5fQ=
Subject key identifier: 3A:E8:61:0B:EF:FE:49:0F:14:B2:BD:06:9E:6D:BB:AD:AA:0F:10:57
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 01977008092771D2A37094CE7EF22F159424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 08D9
Signing time: Sat 14 Jun 2025 20:01:04 +0000
Manifest this update: Sat 14 Jun 2025 20:01:04 +0000
Manifest next update: Sun 15 Jun 2025 20:01:04 +0000
Files and hashes: 1: 7LeNtT1Py-375udT6tgnEczdaA4.roa (hash: KcUWkl6MBuk85woap7zLa0rzE+sobb9Vo8npqesilrw=)
2: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: FvYkH+f2pi8XFeOy1+XKwd/woM/PTRY/tlqKvAXS3Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:08:09:27:71:d2:a3:70:94:ce:7e:f2:2f:15:94:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Jun 14 20:01:04 2025 GMT
Not After : Jun 15 20:01:04 2025 GMT
Subject: CN=3ae8610beffe490f14b2bd069e6dbbadaa0f1057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0b:ee:34:78:a2:d5:38:9b:b9:ba:c0:8e:5d:
32:43:9f:96:d6:0a:a8:af:fb:66:5d:be:a2:fa:ee:
f6:1b:c0:5d:7d:bd:64:52:96:ef:aa:49:36:af:d6:
aa:32:5d:3f:42:62:52:fe:3b:0d:63:3d:14:af:5b:
0d:7b:d1:16:e4:62:80:28:a8:88:a4:cc:96:c4:80:
2e:68:7e:98:de:44:91:34:47:c3:03:6b:75:18:e6:
7e:6a:0b:a6:a3:53:33:c7:08:08:78:37:97:20:fe:
9c:e8:7a:cd:f6:49:4f:26:30:95:fb:2c:64:06:8e:
fe:73:df:4a:68:c8:8a:16:00:d5:fe:cc:86:86:c8:
3b:54:bf:07:8d:1b:40:e0:0e:bc:eb:58:7c:f1:e7:
cb:65:92:99:0c:69:7f:d3:28:3f:66:a6:4f:0b:0d:
22:ef:c7:90:ca:5f:b5:dd:8e:ba:c7:00:a1:11:3c:
27:c7:ec:ba:14:45:10:dc:13:77:38:09:54:45:1b:
e2:8e:69:43:96:64:5d:6b:bd:a2:50:4c:cd:a3:e3:
b1:ad:84:82:c5:e1:b6:a1:f9:5c:af:1c:66:cc:b8:
fa:fc:a5:4a:62:a9:d2:03:64:72:22:43:66:8c:bf:
c2:13:2b:58:43:10:e1:bc:fd:80:62:85:96:c1:20:
d5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E8:61:0B:EF:FE:49:0F:14:B2:BD:06:9E:6D:BB:AD:AA:0F:10:57
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:29:d5:46:b3:a9:ab:75:93:b2:ed:d4:b6:e9:47:b5:b0:d1:
77:04:22:92:8d:36:b1:37:ff:ac:be:2b:43:b7:2e:bf:19:b1:
3c:9f:3a:c4:f2:6e:4a:c0:3b:4a:24:8b:a3:35:09:19:32:de:
c7:72:19:b1:b3:a8:d8:8c:02:0e:f4:1b:d1:8a:b1:f4:aa:c7:
29:76:18:39:83:8a:b9:5c:28:63:c2:f1:31:39:c1:a5:b6:19:
61:7f:ac:8a:1b:78:3c:c1:65:64:55:10:99:c0:bf:c5:c9:84:
35:7d:77:4f:36:29:18:82:aa:eb:a0:a2:f8:ac:eb:69:02:37:
45:92:8c:2b:fb:20:75:2d:5e:80:07:53:ad:8d:1c:b4:d5:08:
03:3f:77:ee:f3:9a:19:6b:ea:b2:0e:10:60:aa:f9:5f:f6:20:
9a:33:08:fa:74:0b:83:59:ff:a4:ca:f4:41:14:30:87:d7:9a:
0d:5c:8b:64:0e:99:11:ae:11:7d:38:36:3d:31:30:0c:ec:79:
bb:f8:90:46:29:19:bd:93:59:3e:c9:a3:e3:ef:7f:9a:c0:20:
3f:8a:26:b8:be:2d:e5:7f:28:ee:ce:4a:c0:13:86:5b:3d:4e:
57:d3:66:e5:f9:56:6f:f4:55:2e:59:a9:8f:6e:1c:c9:0f:37:
01:3b:e9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:55:07 2025 by rpki-client