Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
File: iZJBoANIMVwCwOKpFQuGMIfRyFc.mft (raw, json)
Hash identifier: C6N0ZiUPtAgFAEXr6mH+Y7ieyhj0yOykuncfa23ALp8=
Subject key identifier: 9C:EC:45:F5:44:C0:A5:15:9C:E0:93:BD:7A:CC:B5:34:9C:B7:89:94
Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
Certificate issuer: /CN=899241a00348315c02c0e2a9150b863087d1c857
Certificate serial: 01984A4158F9FCB1B569CD018554FAEADC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
Manifest number: 0434
Signing time: Sun 27 Jul 2025 05:00:53 +0000
Manifest this update: Sun 27 Jul 2025 05:00:53 +0000
Manifest next update: Mon 28 Jul 2025 05:00:53 +0000
Files and hashes: 1: 4ttxHqG59duZ5ALfvPB_x9iVGCs.roa (hash: fJvQbvQakJgNuM3dzhqnbPVFRMsvp98NzyW7hIi8pio=)
2: NhicUss_-kBiNIFBTBFdbugxZaU.roa (hash: x3eOaLcQnmMrFRkUTb/8DthAE9edvP0YO/DPYux9zTE=)
3: UZiFFztRfeKmfRhqu-DMXiBHSwY.roa (hash: LxeETqbIhKu+XVMzaqPP2mnLDNqdpGhRBtoYHWGJNkY=)
4: WDn1mbHRkiQwKXkGzlfqrEUF0Pw.roa (hash: L1bh3lJQlQbB+0euiek2LnVAf5GTLk4lwBwlyM5cRJ0=)
5: eeMUvhikn7BcQGcUG3J_KumqmI0.roa (hash: rMyPtHGXVd59N7ATnOyDSnVnrrZL6fZtXGf2fhRBUW8=)
6: iZJBoANIMVwCwOKpFQuGMIfRyFc.crl (hash: sO+y1FMRGSLpDeDLxqtFLePklpORkdFrXQkCW+HiEOE=)
7: yHRWciFFOnDT7mIADGdvOTHOJRI.roa (hash: OaAq5TmHl/2ctslO8/QJcZi4nuJ1WFnqWLqN1q7rq1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:58:f9:fc:b1:b5:69:cd:01:85:54:fa:ea:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857
Validity
Not Before: Jul 27 05:00:53 2025 GMT
Not After : Jul 28 05:00:53 2025 GMT
Subject: CN=9cec45f544c0a5159ce093bd7accb5349cb78994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:7c:06:71:68:71:f5:83:e4:f1:4d:48:2a:
b5:24:b6:01:c4:b6:fe:32:13:5e:fc:ab:fd:46:3a:
c0:e0:19:09:df:ef:4c:6d:54:fa:32:0b:2d:9d:68:
5f:d4:46:c6:40:a8:02:d5:d4:cd:57:6b:f1:d2:0a:
62:32:a4:f4:5f:2c:d7:88:9f:61:03:3b:c6:a7:9e:
18:15:27:51:c8:7e:41:2a:b6:59:d8:2f:bb:05:06:
a6:fe:37:f0:d4:50:25:7a:7b:d8:f2:c1:f2:16:40:
6a:8b:1b:b1:c1:76:92:f7:91:91:cc:64:87:02:95:
6a:50:ee:f6:4e:93:63:71:21:29:31:39:71:13:44:
a4:77:44:ad:88:ab:3d:15:12:43:68:a1:a1:4d:67:
44:60:c2:bf:f1:8b:8c:07:14:74:8e:0c:c5:89:d3:
fd:9e:2a:82:33:3a:60:34:95:81:b8:3c:da:c6:e9:
24:e2:02:a0:84:a9:be:3d:ad:4c:dc:8f:93:72:06:
f7:f7:c5:3d:12:bc:61:6b:f9:08:02:b4:1b:ae:09:
e3:8c:9b:5f:b6:d9:d4:fc:f4:47:66:57:76:87:4e:
32:59:72:d9:01:45:f7:b5:e6:ca:ad:b7:7d:e9:3a:
0f:f3:c8:7f:32:5d:e2:d9:8c:a6:df:9d:32:eb:ac:
79:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EC:45:F5:44:C0:A5:15:9C:E0:93:BD:7A:CC:B5:34:9C:B7:89:94
X509v3 Authority Key Identifier:
keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f2:e2:f1:64:5d:5d:50:3d:91:45:30:ae:5b:f6:5a:37:5b:
54:9d:ba:6e:a3:13:18:88:57:52:58:0c:de:31:e7:09:00:4a:
d5:fa:e9:05:6b:c9:35:f3:58:c8:2a:2d:57:0b:33:ac:4f:cd:
4f:d3:db:bb:0e:60:a0:ae:d2:f6:d7:de:14:e1:d2:5d:d9:5e:
69:45:ad:df:bc:a8:6f:f6:e6:93:8f:9b:16:b3:e1:51:a3:5e:
55:6b:23:dc:e1:65:7b:fb:af:10:ba:7c:9d:da:18:47:6f:b7:
4c:c2:6a:6c:bd:11:e9:7a:31:5d:b0:35:94:a7:b1:f6:3b:dc:
08:99:9a:82:bb:36:41:ae:ad:77:f7:6a:b4:11:e4:8a:33:70:
81:4b:9c:46:23:68:09:70:ba:65:45:69:54:d5:76:54:e0:80:
0e:b3:84:2c:6a:d6:16:42:91:ab:65:12:27:b4:31:3c:e4:05:
00:b0:91:d1:7f:6b:c1:8a:7c:be:e6:8c:e3:b6:7a:40:03:eb:
47:c6:8c:d2:bd:27:59:c8:25:c3:b5:d2:7a:4e:f5:85:1f:8f:
1d:54:ed:6c:f1:0e:63:02:3e:8d:2a:ac:3c:80:e0:5b:75:8d:
8d:9a:33:55:e3:08:79:49:a0:fa:80:cb:4e:a2:fd:cd:b5:c1:
d5:23:bd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:25:08 2025 by rpki-client