Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: vnVqXzuf0OSJJ5vJqOPApirQQ+a/SOf7A2YIVKTutP4=
Subject key identifier: EE:24:13:46:81:04:DA:76:5B:4B:E6:33:7C:72:A5:00:48:3E:7F:19
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 019874BE2D38D37671B108C88E857D556CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 0960
Signing time: Mon 04 Aug 2025 11:01:17 +0000
Manifest this update: Mon 04 Aug 2025 11:01:17 +0000
Manifest next update: Tue 05 Aug 2025 11:01:17 +0000
Files and hashes: 1: 7LeNtT1Py-375udT6tgnEczdaA4.roa (hash: KcUWkl6MBuk85woap7zLa0rzE+sobb9Vo8npqesilrw=)
2: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: bre4Xml/tv95kDuxsx13gNdnHMyV44b2rIkc7yFDxew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:2d:38:d3:76:71:b1:08:c8:8e:85:7d:55:6c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Aug 4 11:01:17 2025 GMT
Not After : Aug 5 11:01:17 2025 GMT
Subject: CN=ee2413468104da765b4be6337c72a500483e7f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:52:77:d2:62:8b:5d:73:07:00:98:f2:22:e8:
91:2f:9e:d6:57:11:1a:b2:59:47:3d:fe:b3:df:c6:
9c:c0:57:6a:b0:20:44:98:6f:72:ff:a5:de:91:ca:
b5:b2:08:6a:cf:37:6d:d8:7b:d6:20:4b:08:b9:49:
5f:7b:d2:10:20:9d:57:86:28:36:e3:55:10:b1:4d:
b6:44:83:68:94:67:df:87:72:fb:54:5a:ad:77:fc:
d6:52:2b:d2:79:16:0d:94:83:c4:b0:cc:72:5f:25:
04:1c:e2:dd:3c:4e:0a:b8:18:db:cd:3e:f9:e1:b5:
44:4a:10:7b:ae:c6:8c:be:cc:11:ac:8b:d3:b8:51:
aa:73:38:14:9f:a3:66:88:09:30:30:f1:09:b1:25:
4a:82:51:d6:f0:e2:ff:8a:38:83:af:f2:f1:d0:73:
ba:2b:d8:f2:d1:fe:29:f1:cd:a6:54:65:7d:ae:91:
4a:90:a2:4d:3c:ce:b9:48:bf:c1:af:f8:e3:8f:50:
dd:9f:e3:9f:28:48:3f:79:34:00:37:3b:2d:0e:06:
65:b1:c8:e7:74:82:d1:01:a7:26:d9:18:76:0d:96:
bf:fd:2a:1e:c6:9d:d9:0b:19:a9:68:a5:81:ea:ce:
37:06:21:56:fe:4e:3f:7b:27:0a:2e:75:b0:fe:e4:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:24:13:46:81:04:DA:76:5B:4B:E6:33:7C:72:A5:00:48:3E:7F:19
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:52:04:fb:c0:86:33:12:d4:33:11:6c:4b:54:8e:cd:68:dd:
d4:2e:ea:19:53:cd:94:d2:6f:77:36:bd:7c:2d:33:cf:e3:0c:
59:bc:24:8f:29:d2:3e:3a:af:24:59:d0:1f:65:07:ce:a4:db:
f1:9f:54:44:57:f1:48:d5:ee:4a:68:a4:a5:68:36:35:0f:c0:
0f:e7:f2:4e:f5:1f:06:30:b0:59:7b:8e:a0:11:13:ee:58:16:
80:ab:ad:ff:5e:3f:d7:51:c3:dc:f2:f7:4f:0d:bc:6c:88:c8:
6c:2d:d7:15:ce:80:32:90:3c:b5:32:ff:1c:ea:11:63:84:22:
03:24:a7:df:0e:f1:b4:2d:e1:e3:d2:e9:d1:6f:df:b9:45:ce:
47:bb:9b:34:a4:57:ab:4f:a4:7b:40:cd:6e:b1:10:ba:12:47:
74:e9:89:44:fe:73:b4:f3:21:9e:e1:5f:03:16:1d:1b:e0:ed:
ab:6e:d5:ab:d5:14:8e:75:c1:ae:4b:f5:0b:8c:d9:ef:64:55:
46:d7:5f:76:08:a9:3e:7e:d4:96:12:a8:28:4f:f7:b6:46:e5:
74:7b:8f:48:bf:8e:ac:9f:3a:5f:3e:49:4e:17:e9:fe:c1:19:
29:56:db:f7:6d:22:4f:d5:14:da:32:ff:d2:cc:8c:5a:57:ed:
15:87:16:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:37 2025 by rpki-client