Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json)
Hash identifier: 0CJ3GzZSkTVqwvX5+3CYjBBOoyO+wnIseqpEEd3mrZY=
Subject key identifier: 0B:60:E4:74:39:B7:86:19:64:A5:5C:12:78:54:85:FC:D5:1A:FB:51
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0198443EC0384A8B6659A368E36944F333DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
Manifest number: 15E9
Signing time: Sat 26 Jul 2025 01:00:19 +0000
Manifest this update: Sat 26 Jul 2025 01:00:19 +0000
Manifest next update: Sun 27 Jul 2025 01:00:19 +0000
Files and hashes: 1: 5igPCN9X0bgxG5uECn6Ix_J7HO4.roa (hash: pevu2Sy44NywHg7YV7OVl6vYE/WCVHhk1qeVOAIs4Q0=)
2: AbKOh9gpXgwFSloJdXfaWSLCFyg.roa (hash: Q+kVnk5rKEmbqNEXqZoiJZUiyaqs6rvEUwmrzWgFMQI=)
3: LZXNMAIh5rxJ27RzY3-HOC44ze8.roa (hash: a//LkQjUfY/J/vByRTwCkOeaTuhCCphW4WYvKNJGdac=)
4: RCBkFFwBEsQ7ba3phjJnBaHWzQs.roa (hash: dQAPkn8OvvoRT06i7f3Wfx+4CzwKeoY4qVg/zCKUGxs=)
5: dJyo5maMFYG06CB60KewP8-LNEc.roa (hash: LO26kgSXxCz0IxFKcAaH1ZYq5V5rRxtBlLjShWu3YvU=)
6: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: XIY/tNSP1si4paH6p5zYUrbpB3Y2oIXKFbBytttvfn0=)
7: jgHkgotwUlDa7vyV8NwpOKOQ3Bg.roa (hash: CARcq+MM79jGs0AyYYQWuKyff+oBzRUmXWJMUB4WUF8=)
8: kALeFOqdoUlsrrEA4gEeCsqdb7U.roa (hash: CGGNVlWIfGNVOdkVdR2nL+rohybhJ6hPwgX68rdZVTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3e:c0:38:4a:8b:66:59:a3:68:e3:69:44:f3:33:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jul 26 01:00:19 2025 GMT
Not After : Jul 27 01:00:19 2025 GMT
Subject: CN=0b60e47439b7861964a55c12785485fcd51afb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:7f:da:a1:47:36:f3:bd:6e:15:95:21:c4:
54:7e:f7:b6:0a:de:65:a2:32:dc:78:70:92:e8:57:
6d:9e:db:11:52:98:f4:d1:0e:0a:12:85:53:95:3a:
d3:04:40:f0:f7:99:33:47:57:c5:cd:cf:71:bb:71:
29:ca:d5:4b:9b:a2:0c:ab:4b:23:30:89:31:68:d3:
1b:86:a7:b8:3a:98:92:ef:6f:06:af:f6:2d:c7:9c:
ff:1d:c9:af:07:f7:43:ff:b8:17:42:82:f6:ff:75:
cf:08:7d:fd:51:1a:8b:c9:a9:c4:49:d9:6e:7a:fc:
94:d4:5a:7a:a8:2f:f0:02:ac:c9:99:e9:6d:27:75:
52:e0:37:32:45:69:6e:40:c9:f9:a7:0b:2c:f5:93:
0f:16:b5:be:70:dd:89:d3:61:b0:36:3c:be:41:3f:
74:50:55:d7:93:7e:ed:6f:0b:b7:32:80:94:83:e8:
dc:46:62:a3:aa:f3:8e:9c:83:72:e5:ef:d3:97:8c:
bc:5d:23:62:a6:1b:46:3e:dd:a6:9a:c3:44:ee:fb:
c4:d7:1c:33:d9:98:78:47:49:e1:df:b0:0c:02:f3:
c7:e1:f7:15:98:b3:bb:f2:9f:54:21:99:57:3b:be:
c2:86:a1:61:cd:ee:db:25:78:03:58:f1:92:a4:31:
1e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:60:E4:74:39:B7:86:19:64:A5:5C:12:78:54:85:FC:D5:1A:FB:51
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:38:08:1e:b3:cd:f8:d1:86:f4:e5:12:0b:23:f9:e6:03:08:
91:d5:97:f4:e9:cc:fc:11:85:cf:31:c6:69:b1:c9:49:b9:f8:
74:ee:c7:21:15:71:ee:87:9b:54:6a:dc:2f:62:c4:a4:e4:8e:
1d:4f:d1:cc:de:87:1d:ad:a4:53:79:7b:b9:5a:18:14:61:4d:
49:57:8e:63:42:a2:2f:a3:36:3a:bb:19:e1:bf:a9:81:6e:5a:
52:4a:b1:db:80:28:5a:4f:6b:b1:9d:85:ba:6b:d6:6c:38:af:
05:85:9d:87:6b:f3:d1:03:86:55:55:97:a9:6c:c4:e4:dd:50:
d8:1f:7a:67:0e:1e:eb:d0:c6:d5:7f:3e:e6:2e:fd:82:69:01:
6d:e7:7b:af:73:9e:3f:b8:a8:25:91:1b:12:9f:39:c1:d4:a0:
37:fc:34:ad:f0:0f:1d:e7:c4:62:5f:75:02:0b:31:15:2b:a8:
af:73:ba:55:d7:17:67:c8:0e:50:d3:e7:5e:64:67:93:50:78:
f9:3c:21:8e:9f:c9:b8:07:d7:3f:2d:9a:05:b3:5f:2f:85:68:
fd:89:8c:15:b7:cc:bd:20:d3:f1:f3:0e:4b:ef:08:18:84:f4:
f8:20:0b:b1:b9:90:7b:5b:c1:46:9f:9c:c3:49:55:0c:6b:1a:
c6:70:5b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:36:14 2025 by rpki-client