Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
File: IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json)
Hash identifier: BtxF3cmdzO8wGPRP8sDI5DBmQmIWL0BxzlZWT0CSdyI=
Subject key identifier: 4E:43:96:A4:B1:F1:B7:06:4E:BE:C9:FE:A1:12:AC:5C:5A:3F:A7:05
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial: 01977075411DE9051811F79B8CE53F07E25B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
Manifest number: 129F
Signing time: Sat 14 Jun 2025 22:00:21 +0000
Manifest this update: Sat 14 Jun 2025 22:00:21 +0000
Manifest next update: Sun 15 Jun 2025 22:00:21 +0000
Files and hashes: 1: I1R3to4OG_lNOOBtkQLneyBTnz8.roa (hash: FMbiRiL06k35Wxnm+65HlWTTvYTK4mOLvCtx0FDCwp4=)
2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: Nbd/elViho4HABFc8PDc/Yx6zApDCFqHW1S6UZG57R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:41:1d:e9:05:18:11:f7:9b:8c:e5:3f:07:e2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
Validity
Not Before: Jun 14 22:00:21 2025 GMT
Not After : Jun 15 22:00:21 2025 GMT
Subject: CN=4e4396a4b1f1b7064ebec9fea112ac5c5a3fa705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:58:79:7c:71:2d:2b:f1:10:50:44:9b:db:7d:
2a:24:55:0e:99:92:76:b0:ec:c8:18:79:c4:23:43:
15:e5:b3:77:be:c1:8d:7b:aa:c8:82:65:72:0c:4d:
f9:db:26:ee:0f:e6:10:fe:cf:d4:f9:bb:72:9e:52:
3a:b7:84:ae:64:3c:1a:bc:f0:01:da:2f:d5:94:80:
8c:f0:57:8d:89:10:43:14:e4:07:be:04:e2:00:af:
37:7d:98:01:a3:1a:1a:49:46:7f:1c:83:8c:27:2c:
88:25:ce:41:71:b0:47:92:a2:dd:d2:b4:75:2c:ef:
b6:12:3b:79:d5:06:57:f7:40:5d:7f:ba:07:5d:67:
eb:60:92:7a:bb:dd:ad:6f:b8:73:37:df:3b:a7:12:
61:f5:36:cf:b1:6f:9d:73:5a:4e:0b:7e:9f:c6:f4:
f1:91:37:42:f6:5b:a2:4a:60:e7:59:d0:a3:f7:71:
ad:d2:f0:db:b2:81:72:d1:64:03:cd:54:c6:1a:92:
90:18:d9:2f:00:cb:0c:b3:13:36:ea:30:2f:09:4e:
b2:2f:bd:16:df:7e:cc:df:a8:20:38:76:49:28:b9:
f3:4d:0f:7d:66:76:af:df:e5:8d:d7:32:ef:a1:5d:
7c:2d:a1:6e:7f:c5:a3:99:86:35:03:89:e4:c3:52:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:43:96:A4:B1:F1:B7:06:4E:BE:C9:FE:A1:12:AC:5C:5A:3F:A7:05
X509v3 Authority Key Identifier:
keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:45:f3:8c:f4:f4:34:b5:38:2f:b8:8b:1c:50:6d:0e:64:f4:
ca:34:76:e9:93:95:fd:94:6e:97:39:da:10:50:e5:9b:82:db:
4f:60:9a:b6:66:83:df:95:d7:7c:66:f4:3f:6a:ee:24:7d:41:
fd:9d:3d:7a:b0:73:42:f2:80:78:72:39:52:b5:cb:ae:99:a8:
a9:c4:39:d7:ba:75:b7:5a:29:9e:e2:a2:df:c0:9b:a1:1f:94:
81:fd:a6:f9:6a:fa:ef:ad:2e:22:6c:67:12:9e:9f:b5:b4:b1:
45:28:6c:7c:bb:28:d2:a7:cf:22:54:49:47:1c:34:a9:8a:88:
ac:df:cf:1d:1f:e7:c7:9b:25:22:63:12:13:0c:d6:34:3d:b6:
95:b1:93:c7:36:09:cc:ab:22:84:eb:e5:b3:9f:99:c1:56:79:
5b:e9:b6:dc:b6:88:18:cc:bb:d8:ab:3e:72:34:2d:88:df:67:
fd:b8:bc:fd:1d:8c:70:d6:bb:eb:c6:02:0a:34:16:1b:fc:1c:
f6:dc:fc:f4:5a:5a:48:18:9b:2b:53:0a:bd:b3:7e:4b:60:1a:
c8:72:21:e0:7e:3e:62:88:be:b4:9c:51:d7:c6:42:c1:c1:9b:
c4:e5:84:54:06:fc:47:20:73:c3:68:e0:3a:fb:e3:11:af:ad:
92:2d:9e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:59:32 2025 by rpki-client