Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: 6Ne99UIKCK7Vnb+8dub0YGME4OYT8GQv6sU3mAH6898=
Subject key identifier: D1:12:DA:DA:2D:B9:D4:AF:7E:D8:9F:FF:F8:72:BB:D8:0A:D2:1C:04
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 019768BBD7281B9E4B8AC08E364466229EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 1017
Signing time: Fri 13 Jun 2025 10:00:30 +0000
Manifest this update: Fri 13 Jun 2025 10:00:30 +0000
Manifest next update: Sat 14 Jun 2025 10:00:30 +0000
Files and hashes: 1: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: W7Y1FopRJA2ELV9goiQpBzvp9ZxZnO7vRx2/tQK/5cI=)
2: ff-qexzHEUD1WgOGjo1dcXlM5zw.roa (hash: okd5E/DUi3wr0dkKGYnxuoMgYENizBl6tX2uR1KatU4=)
3: o-JKFkGOw7b9iS81cGqL_sPqhTE.roa (hash: LeiOclwc6FMh1dAwDJxgRxawRJ1HHtp5FtwQRdIanPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:d7:28:1b:9e:4b:8a:c0:8e:36:44:66:22:9e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Jun 13 10:00:30 2025 GMT
Not After : Jun 14 10:00:30 2025 GMT
Subject: CN=d112dada2db9d4af7ed89ffff872bbd80ad21c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:9d:cd:56:1c:c3:1f:7f:5a:cc:7e:1a:f5:
64:f7:cc:e4:29:9c:d7:18:65:85:b2:5e:5a:a5:23:
68:18:11:a6:45:5d:f0:5e:c8:9a:64:62:99:29:35:
cb:5c:c7:45:ed:92:df:e7:80:fb:cd:95:63:b9:0a:
ba:b0:14:fb:91:fc:f7:0f:a1:83:55:5e:3d:86:6e:
4a:22:16:b8:1d:fe:5a:c0:0e:30:fb:2a:ff:38:86:
51:e9:f8:7e:95:ea:2b:da:23:a1:53:28:8d:92:cd:
d9:09:70:cb:e1:29:1d:59:fe:d3:66:4a:c5:3b:44:
78:72:9b:9e:11:25:f7:c4:f6:18:cc:bd:d2:89:2c:
e1:86:5f:6f:db:ab:db:ad:23:d0:ec:c1:a6:be:ba:
2b:b4:c4:43:fa:e9:5c:10:b4:da:ba:80:b9:04:90:
05:01:ae:ea:76:e4:44:ae:53:aa:c8:e6:4f:87:99:
74:c5:7b:a3:bd:52:42:90:92:9a:72:b5:16:4f:22:
60:82:06:2d:46:60:8c:3c:a2:49:69:14:bd:98:f9:
00:ae:4f:5d:a2:9e:8a:d1:a5:e6:ba:2f:a5:d3:06:
25:91:10:a9:d7:94:95:fd:1f:6d:97:c5:67:77:3e:
dd:32:d9:15:63:bf:02:a7:5e:7e:89:a1:f2:09:3f:
ac:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:12:DA:DA:2D:B9:D4:AF:7E:D8:9F:FF:F8:72:BB:D8:0A:D2:1C:04
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c8:71:09:42:1b:59:94:88:64:c1:e7:b5:68:25:cc:a8:55:
02:58:43:86:aa:10:4f:d2:1b:db:fc:fc:7c:07:b4:d1:73:67:
b9:12:38:fe:6b:fa:ff:4c:7f:00:b1:de:7a:d1:ce:d1:2a:8a:
49:c0:2e:c8:bc:c1:a8:13:64:dd:2c:da:68:a2:fa:5f:5e:5a:
17:85:8e:79:2d:bd:6f:9a:68:e7:a4:02:ef:1b:de:48:58:c2:
7d:1e:11:9f:de:bc:67:ac:f5:ee:b1:74:ac:28:78:ec:95:6f:
03:b7:f6:e0:dc:6d:b2:e9:76:9a:57:77:86:48:fd:43:60:df:
5e:05:d7:59:78:52:d8:7f:56:9f:07:a5:0e:c6:c1:c8:06:4d:
6a:96:b5:da:01:fb:0b:31:08:4e:2e:1f:c3:61:5e:2a:6c:50:
0e:95:31:b9:79:e4:9e:1c:f1:75:73:9f:a3:fb:44:69:44:9e:
25:bb:20:76:11:f2:2d:11:7b:a6:6d:f2:42:22:73:ca:1e:e2:
28:48:7e:f7:62:cb:35:12:a1:df:6a:d8:9d:e2:2b:81:d0:68:
09:09:7b:b3:dc:c3:d3:aa:b8:30:72:2d:e2:88:54:0e:fa:7d:
2b:69:e5:a3:49:1b:10:3e:a8:7e:ce:56:fc:a0:dc:7f:8a:c9:
e7:53:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:47 2025 by rpki-client