Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
File: Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft (raw, json)
Hash identifier: H5Sk1rLbbkLxUH+Qmve8J55+yzN5xcwUyvlhh9voGbg=
Subject key identifier: 04:ED:AC:E1:6F:3F:0D:A2:69:33:B8:52:F4:5E:F9:C2:0E:32:2F:81
Authority key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Certificate issuer: /CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Certificate serial: 019777F85906350472FEDF8D63F44E85B721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
Manifest number: 0F90
Signing time: Mon 16 Jun 2025 09:00:53 +0000
Manifest this update: Mon 16 Jun 2025 09:00:53 +0000
Manifest next update: Tue 17 Jun 2025 09:00:53 +0000
Files and hashes: 1: BQ2_9-ItF5dIDSCPAfxbIaGC5hA.roa (hash: +G1ycNpVwWYjvSoa5pj4YTiRmj97XRdNfodhiBjoJD8=)
2: Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl (hash: 3kf+gahKIDU9dpkKq/Qp16nqlsHcNx31q2LEo6ph9c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:59:06:35:04:72:fe:df:8d:63:f4:4e:85:b7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Validity
Not Before: Jun 16 09:00:53 2025 GMT
Not After : Jun 17 09:00:53 2025 GMT
Subject: CN=04edace16f3f0da26933b852f45ef9c20e322f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:38:8d:32:8a:be:02:fb:b4:84:e2:b5:f3:
50:54:3d:b4:ca:15:5f:fb:de:20:60:6d:20:e7:50:
73:08:f1:8d:39:0b:a0:41:f1:87:99:31:2d:1a:36:
66:99:7f:0c:18:f6:0e:ce:a7:39:27:ec:c3:e7:55:
5a:a1:73:ab:37:c2:c1:8f:0e:12:2f:83:64:3d:39:
9c:50:db:4b:ce:4a:d8:b8:ec:b3:7d:d4:40:8e:fb:
2a:ec:62:07:b2:f1:82:9a:c0:a4:55:4a:77:94:d2:
ff:97:29:a9:66:41:23:ca:a0:3e:e1:31:23:43:62:
81:c0:4f:a8:fd:3d:f1:1b:1d:ac:d7:0e:6e:a4:77:
db:2e:6d:a5:b5:79:1b:95:91:6a:ae:04:2a:27:d5:
1c:85:c5:70:c2:9a:68:c5:57:66:c7:90:cb:4e:f6:
80:6a:a2:8c:5a:6a:50:c2:0e:c9:92:b0:9a:17:01:
7e:08:01:d4:6c:4a:0e:f5:92:f8:63:26:48:50:2a:
d5:0b:b8:9a:03:ab:ab:b3:f3:d8:24:39:62:13:a3:
cc:b0:bf:eb:6b:00:e2:81:43:05:be:6c:29:af:e8:
9e:dd:be:42:49:d9:b3:3f:78:34:19:3b:cd:78:8c:
51:03:a5:41:04:77:c8:f4:90:95:d0:2a:2d:52:35:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:ED:AC:E1:6F:3F:0D:A2:69:33:B8:52:F4:5E:F9:C2:0E:32:2F:81
X509v3 Authority Key Identifier:
keyid:26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:23:07:17:22:bb:0d:72:48:35:27:3d:a3:bc:60:ce:ce:31:
96:0f:b7:52:2b:85:c3:73:7a:66:38:54:b1:45:51:ae:11:0a:
3c:31:33:be:7a:c7:93:92:58:3a:d3:14:99:4d:af:0b:be:04:
fa:bc:bf:4e:18:b7:9b:c4:36:ae:18:4d:3e:de:f9:91:ab:e8:
15:14:8b:55:7b:1f:14:45:ec:ed:b8:d9:fd:26:35:a2:fe:94:
32:46:58:4d:cb:7a:b4:7b:f0:9b:89:c4:91:42:6b:43:eb:c9:
2d:b0:bc:a2:9e:22:02:25:09:94:42:e9:79:bd:41:36:df:d1:
10:7c:74:1f:1b:4b:83:64:35:c4:0d:87:5c:f3:11:ec:16:9d:
dc:92:1b:ea:41:a8:14:dc:1c:9e:e5:a5:d9:f7:b0:d3:cd:02:
ef:6b:2a:d7:17:ef:17:aa:15:c0:66:f1:b8:8d:d9:c9:bf:a0:
3b:c2:28:19:fa:f2:11:e4:af:01:b9:31:d1:17:3d:0c:9c:37:
1c:3f:bd:9d:4d:54:20:b8:62:18:9e:b9:35:e4:b0:4c:02:3d:
63:ba:75:87:11:86:19:b9:ad:1b:3b:bd:91:7b:68:ea:89:b7:
3b:f1:4e:61:96:d7:a4:30:fd:da:78:89:c6:a2:ca:1a:f9:ba:
ed:5b:f4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:41:28 2025 by rpki-client