Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: H3NVhe00CTd4esfIB5/PY86MRoeQQgIXGHl+Fz2orJ0=
Subject key identifier: B9:8F:07:1A:22:46:1A:58:F5:C1:19:14:02:F9:EB:21:3F:9E:01:14
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019835714AEAAC1199DEAF7258104B4E51B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 14A2
Signing time: Wed 23 Jul 2025 04:01:13 +0000
Manifest this update: Wed 23 Jul 2025 04:01:13 +0000
Manifest next update: Thu 24 Jul 2025 04:01:13 +0000
Files and hashes: 1: 25GdIX8pGRrdAAaubJO0FxbYG-s.roa (hash: J7SjJPVMXuJzyuyQBNTx3E62SBRqK9gpWeifxFumUs0=)
2: 6WSzq5tklzrrb4CQ30LLV8NUx2g.roa (hash: UmnImARopszt+4WaNMMPCsufWGExd3hc37DvZdbg1tI=)
3: 8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa (hash: 0g/v1GDnSb/mpf5pKYYz9HEAiGcoNER98ihb6wrQqWo=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: jwU+1ZL5tP0vH6iVQ4yikkFoUF0dpVxQvE6bazPqdGw=)
5: OREDNoQ0vwPI3XM_zRsW3yzoE_A.roa (hash: 1cT3zKRDrAQDDxV5Rq7SD/mINGk0AiyR89E6Ur7LkVA=)
6: mQQXMqosDbrfiBBQFe3pss-9NtQ.roa (hash: qAb1oy5TaR+lNTajDgndtpEVHAu7ZMdgoTop9g6Wh6Y=)
7: uSaVwi6W5g3viY9NscHN3tqDzCk.roa (hash: t4D+qU5YVF27z4TGr3wG3ucQjp23my4+sKI2eFqOYYg=)
8: uumQQQ1viq_-gfcaqAufH6g_C7w.roa (hash: AM9mJlfYhSa7Wcw8Wx9nTWnnL8T0GQwXceLp5ft6/NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:71:4a:ea:ac:11:99:de:af:72:58:10:4b:4e:51:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jul 23 04:01:13 2025 GMT
Not After : Jul 24 04:01:13 2025 GMT
Subject: CN=b98f071a22461a58f5c1191402f9eb213f9e0114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:4f:f7:0d:d4:c5:20:ca:5d:19:dd:0f:f0:
1d:5f:c3:b6:ec:88:31:42:7c:34:73:27:71:de:37:
96:87:fa:80:6f:55:8b:bf:ef:1b:ff:a2:2f:d0:71:
04:66:9c:d1:b1:74:34:1b:10:72:a8:07:2d:73:da:
03:5c:47:56:a4:77:0d:e0:c0:59:b0:6a:23:c6:b2:
f9:ee:ca:00:b0:d9:5a:1d:7e:05:9d:39:86:b1:19:
00:5d:14:26:ee:83:51:a4:85:18:f2:54:56:22:55:
31:d4:46:d1:8e:89:22:76:81:9e:90:9b:43:78:06:
54:7a:43:cc:c2:87:26:c3:9b:de:26:d9:64:13:30:
1e:e5:59:39:d9:58:b1:27:c1:29:d1:1d:80:7c:7d:
00:dd:e2:90:ea:93:25:cc:d2:79:18:f8:6f:65:ca:
ea:01:16:d0:98:68:c8:57:93:e4:08:70:9e:be:0e:
ea:34:f9:80:a3:e8:86:01:c2:2f:d7:29:0a:72:69:
8b:28:0a:c0:df:56:31:81:8d:59:f0:ec:2c:95:52:
d4:95:44:36:22:35:6f:81:6b:b8:1b:bf:d0:64:07:
28:28:52:82:37:1b:a3:e1:42:2f:79:4f:41:26:44:
2f:fb:09:df:06:1f:77:1c:54:fb:fd:d5:9a:87:9b:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8F:07:1A:22:46:1A:58:F5:C1:19:14:02:F9:EB:21:3F:9E:01:14
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c4:27:37:95:c2:e3:0d:47:d7:d5:48:8c:19:16:8f:de:21:
2f:67:e2:f4:09:82:28:2e:a2:ad:75:61:f4:5b:3e:d4:ab:f0:
3e:8b:e2:fb:fb:ab:d8:08:02:24:b0:48:26:c8:e0:9e:0e:b5:
7d:35:18:15:38:3a:51:9e:95:2f:cf:ce:6c:7c:90:58:0d:f2:
09:71:da:66:ae:75:74:20:06:4b:a3:fc:a0:59:cf:ac:c8:65:
d5:09:af:f6:21:62:fd:86:35:84:b2:02:c9:0c:fb:75:a9:fd:
a0:b2:32:17:08:df:62:4d:64:50:77:bd:3d:7f:0a:b8:87:b7:
38:46:04:3d:44:63:33:fe:f8:06:ad:5c:8d:e6:20:a0:1a:b7:
88:ff:f8:c2:02:9a:54:85:ab:f6:64:95:6e:2c:f5:f9:ce:85:
8d:46:46:e0:5b:11:08:96:6d:d3:d0:16:84:14:79:e3:7b:61:
8c:06:cc:03:f3:47:cb:2a:e4:41:a8:42:98:24:c9:94:0b:44:
e2:26:53:0e:34:8b:b7:17:e2:4a:ab:59:7d:c2:0b:a7:c3:d7:
ad:8f:b6:f1:38:24:f6:cf:1a:81:11:58:07:6b:58:24:a3:d2:
e6:3b:a9:ce:6d:2e:a2:aa:9c:14:c5:29:ec:b7:61:f3:ef:ac:
7e:1a:46:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:58:48 2025 by rpki-client