Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: 9Prc0wmIY4uqh2G3pEc0enouF5j5VyU9vS/TgFJMlnY=
Subject key identifier: 28:AE:FF:A1:19:EE:20:0F:50:22:0C:A9:66:F8:AF:CE:F3:EC:36:46
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 0197816934A657DB26DB9E74639F9A5F9F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 159A
Signing time: Wed 18 Jun 2025 05:00:44 +0000
Manifest this update: Wed 18 Jun 2025 05:00:44 +0000
Manifest next update: Thu 19 Jun 2025 05:00:44 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: R+oziXrFm7jOx54YKkR2AbghcjAdts8TD4adUDYa7R4=)
2: ZaqC_eqAOQjtM4jTMkAtfUr_HnA.roa (hash: qyBeXguoUs9hwnrHmonqUvuWFW9pHnQHNdEGLzV2NBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:69:34:a6:57:db:26:db:9e:74:63:9f:9a:5f:9f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Jun 18 05:00:44 2025 GMT
Not After : Jun 19 05:00:44 2025 GMT
Subject: CN=28aeffa119ee200f50220ca966f8afcef3ec3646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:42:c6:7f:02:11:d0:d4:a5:a6:58:05:b8:
a4:ec:91:ba:55:ef:d4:35:45:ee:df:db:19:3e:81:
78:16:23:8c:1c:bd:29:0e:03:9c:21:17:61:aa:b7:
6c:3c:53:4a:d4:56:d9:66:e4:ed:4d:1b:b5:d2:be:
07:46:3f:82:08:11:57:e5:ac:21:ad:1a:c2:88:19:
5d:ab:36:18:a1:e1:a7:ad:fb:38:a5:31:0c:03:8c:
5c:5f:9d:96:86:e5:e8:90:39:88:2b:09:eb:36:e6:
2c:0a:58:53:ba:4f:9f:f2:0d:6c:a6:ea:f0:6d:ae:
93:61:5b:40:94:19:a6:73:2f:de:f0:e3:05:e3:5b:
b1:42:35:fe:a8:9a:75:a8:7d:28:94:ec:80:9f:78:
04:54:d5:d3:0b:fc:23:86:26:d1:1e:02:8b:80:cc:
e0:33:f1:14:aa:4f:d4:d8:77:30:f6:2a:88:3a:3e:
09:c8:af:7c:aa:af:8e:38:ef:9e:d1:86:f2:7e:9b:
ea:1f:a1:e7:a9:26:de:94:4e:7d:2f:61:c3:bf:d1:
ab:37:a9:b8:82:5c:2a:52:54:49:07:21:34:6a:0a:
6d:34:33:ba:10:f5:1b:79:e9:2d:1f:ac:92:d8:1d:
c0:6c:ed:6d:f1:61:ce:78:c7:0a:ba:ef:ac:48:f7:
58:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AE:FF:A1:19:EE:20:0F:50:22:0C:A9:66:F8:AF:CE:F3:EC:36:46
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e4:47:d3:08:56:01:56:17:c9:fa:78:df:0b:41:37:fc:5b:
21:93:6a:a8:24:0a:dc:3a:02:ce:67:56:7b:76:23:c2:de:39:
2d:8f:b6:a1:ce:5d:02:24:87:69:14:bb:82:5e:23:2f:e9:5b:
9e:39:80:d8:35:56:6b:6d:8a:21:1d:d5:5e:3d:a0:32:a1:ce:
22:f2:49:2b:f1:1f:6c:8c:ad:c6:a3:c4:3f:26:b0:56:94:1d:
7c:03:bc:93:43:51:f0:e4:c3:2e:af:d6:d3:8c:e7:f9:a8:8c:
0f:7b:2a:80:16:ad:5b:f3:e3:a1:6f:6c:8f:2f:7d:1b:e1:71:
51:8a:cd:7a:72:0e:c4:7f:d1:b9:f5:42:69:79:64:1a:39:55:
ad:bb:40:56:19:ea:19:4a:30:49:91:c8:cc:ee:70:65:75:ef:
27:61:7e:db:49:3f:8f:a8:d6:60:fe:d1:93:2d:0d:31:25:15:
a2:4a:67:7e:2c:9f:bc:4d:9a:93:1b:44:c5:d3:d4:d9:56:3a:
fb:5e:00:ad:90:b0:d9:17:e8:9e:47:a8:2c:10:c9:ed:e0:60:
82:99:d0:1f:c2:fe:f3:89:f8:ba:d2:91:8a:3b:f0:af:5c:ff:
4c:9a:a2:b1:e3:1d:ea:b2:d3:7d:86:36:9b:39:a0:a6:97:52:
6a:fa:f0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:06:32 2025 by rpki-client