Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
File: IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json)
Hash identifier: 1J0JnXHoP3iO3lf8FNEgd1qBpIYxEF7cqozM1FnX650=
Subject key identifier: 24:22:78:87:AB:7F:33:E0:A9:D8:B9:86:D0:E3:0D:03:FC:B9:78:A5
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Certificate issuer: /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial: 01976DAB71340EF4A1D7076BFA2511B4A00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
Manifest number: A1
Signing time: Sat 14 Jun 2025 09:00:41 +0000
Manifest this update: Sat 14 Jun 2025 09:00:41 +0000
Manifest next update: Sun 15 Jun 2025 09:00:41 +0000
Files and hashes: 1: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: 4pXMR9oWk01ouy5r7GAS8EQvrTvjHNql6xF4MtDDzEs=)
2: iLANhbyVV3zbKcRa5e1j5ys5bQ8.roa (hash: HvIZEmUJodoCUOQJmSLlhYyGWehRd8s2eUB4GrSGatI=)
3: vXv88BHimThnafaryEHozjYrlDI.roa (hash: DV1U9+gs3m5mNc5xoVIc27oNoGuDOyBahRAnw8thlug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:71:34:0e:f4:a1:d7:07:6b:fa:25:11:b4:a0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
Validity
Not Before: Jun 14 09:00:41 2025 GMT
Not After : Jun 15 09:00:41 2025 GMT
Subject: CN=24227887ab7f33e0a9d8b986d0e30d03fcb978a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:6a:46:5e:41:6f:26:7a:55:06:81:ff:85:
c9:5b:c6:d5:e7:4d:d6:a1:0f:9a:d5:05:32:c5:92:
6a:f7:43:ad:c1:6a:10:5c:85:97:e2:0e:d4:1f:17:
af:c0:82:f7:a7:fc:23:c4:1b:9e:56:84:c9:d0:fb:
45:d7:40:2b:7d:42:19:d5:54:80:40:42:12:73:63:
65:31:d2:51:5a:b7:d4:ef:5f:54:1e:cd:db:54:ee:
19:91:dd:e2:de:e9:bf:96:bd:f1:23:61:9e:c6:3a:
3d:df:d3:52:9d:54:5b:74:97:75:12:10:8f:f4:e3:
d9:d2:48:fa:2b:1e:a4:6d:30:e3:4e:98:f5:48:d6:
35:d4:a7:41:52:ba:59:28:ce:00:12:f4:81:82:ab:
13:60:28:c7:fc:42:3f:50:05:20:3a:63:ea:8e:8d:
f6:47:a3:87:ea:c9:be:24:79:a3:12:e6:12:00:5d:
17:a5:d7:df:f1:5d:b0:15:ce:68:f8:b8:9d:a9:18:
7f:c6:ea:e1:1f:85:f0:53:f5:86:98:a8:c4:71:7c:
6c:77:ee:f4:0f:d6:21:3b:a0:07:f7:fb:49:2b:3f:
0e:2d:d1:4b:91:57:b3:62:c9:3b:f2:0b:c3:12:fb:
7d:87:38:b6:07:d3:09:71:9c:35:0e:db:93:d2:d4:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:22:78:87:AB:7F:33:E0:A9:D8:B9:86:D0:E3:0D:03:FC:B9:78:A5
X509v3 Authority Key Identifier:
keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:bc:47:39:87:66:b1:c9:f6:8d:92:62:fd:7f:1b:d8:e0:47:
f4:44:6b:66:89:63:ff:8b:1e:18:22:e0:2a:34:2a:b0:49:27:
e8:f9:77:79:4e:49:48:1c:f3:50:1a:72:ec:11:38:ba:86:4a:
e6:16:4b:fb:92:72:fa:57:87:95:cf:0e:93:4e:43:94:6f:a9:
8f:20:9c:71:b8:b7:38:de:c3:74:c9:2b:f7:2c:45:50:d6:a1:
c2:3f:38:e8:d3:d3:34:92:48:a9:d9:be:18:91:4f:85:ce:4c:
fb:36:c0:4d:11:ef:dd:92:2a:34:3d:ee:30:4e:aa:d4:0b:11:
f5:ac:d4:9b:a1:6f:8d:66:91:f5:65:63:e5:fb:32:b2:24:48:
71:ff:9b:65:b5:c7:5d:ff:2d:21:b5:e8:63:cb:e4:52:01:99:
32:c8:64:3f:09:a1:c2:97:05:45:37:57:ef:dd:19:79:f0:78:
cd:6b:61:f5:61:d3:9d:91:1a:0d:83:48:5b:b1:1b:92:37:fd:
a1:e1:ee:1f:ee:9d:0b:76:4f:ca:ce:d4:11:00:86:64:2b:2e:
45:ce:61:c9:f0:16:dc:39:3a:66:8a:46:cf:2a:c5:fb:07:ad:
b8:64:ac:88:60:68:aa:8d:2e:eb:59:a8:50:d7:68:4f:a2:c7:
98:00:b7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:02:39 2025 by rpki-client