Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
File: iEZAW_zHgGbFGSyz6-csRDxVcog.mft (raw, json)
Hash identifier: Avkwn3LC1IgesqwxPprnPldDw1E77AwzFF7yyKkmP6o=
Subject key identifier: 52:A5:06:4D:C0:BD:B1:E2:CF:B4:45:C3:73:44:59:18:3D:D3:10:F1
Authority key identifier: 88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88
Certificate issuer: /CN=8846405bfcc78066c5192cb3ebe72c443c557288
Certificate serial: 019844AC7079786DAA40B6BD5DAAE6849718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 03:00:08 +0000
Manifest this update: Sat 26 Jul 2025 03:00:08 +0000
Manifest next update: Sun 27 Jul 2025 03:00:08 +0000
Files and hashes: 1: 1wukbEM_Z2cOLmS317mkgQWPtlY.roa (hash: mynvXYceF8nnYoZdEmhOk8iYDpjkXUz62HUCHGcK8Wc=)
2: iEZAW_zHgGbFGSyz6-csRDxVcog.crl (hash: 0QtD69aBBRYDnkCzRAYl1yR72LiZblVq9KltuLl43Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:70:79:78:6d:aa:40:b6:bd:5d:aa:e6:84:97:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8846405bfcc78066c5192cb3ebe72c443c557288
Validity
Not Before: Jul 26 03:00:08 2025 GMT
Not After : Jul 27 03:00:08 2025 GMT
Subject: CN=52a5064dc0bdb1e2cfb445c3734459183dd310f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:44:84:58:79:e0:43:b9:74:69:eb:df:2f:
ab:8d:44:95:23:d8:8f:13:1e:b9:c6:be:a5:43:aa:
de:88:fa:77:ce:18:d6:e5:f6:84:a9:bc:2c:09:97:
26:87:c0:ce:0e:fd:f5:a9:83:c6:c3:ca:25:70:05:
04:b2:35:39:4e:dc:38:b7:15:4e:d8:bc:a3:55:b7:
25:ae:f2:5d:0f:3b:12:d9:80:90:7c:ba:2d:79:cd:
1d:47:94:c7:74:9f:f8:1a:42:24:73:9d:29:d2:05:
8c:33:b9:ab:ee:8d:a6:5c:ce:32:5d:e1:33:1e:2f:
8b:e9:53:6d:2a:5a:c4:44:f0:b4:ff:36:2f:aa:7b:
50:9e:69:6f:2a:33:75:2d:5c:41:34:04:94:69:9b:
fc:53:8a:27:09:fe:9c:cc:1b:5b:53:b8:a5:26:26:
4b:58:09:04:83:e5:cf:f6:0c:11:11:05:01:f6:85:
d1:6b:2b:f9:32:bd:77:a9:51:91:e8:c1:a1:44:eb:
7e:f7:ee:0b:bb:c8:c7:f1:3f:c6:5e:73:fc:6d:10:
cd:e0:bd:b1:4f:50:4c:3b:bb:fb:ac:09:88:8f:f2:
02:f9:65:4c:3a:aa:f8:b2:54:a1:f7:dc:1e:e6:61:
83:f5:60:90:cb:9d:77:38:25:65:ad:a7:d6:4c:c7:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A5:06:4D:C0:BD:B1:E2:CF:B4:45:C3:73:44:59:18:3D:D3:10:F1
X509v3 Authority Key Identifier:
keyid:88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ac:fa:9d:fc:ee:a2:eb:9b:8d:67:d5:f3:60:e9:6f:e1:e2:
c4:54:ba:be:1c:73:8c:5a:51:dc:f3:cc:76:4b:3d:8d:00:ed:
e3:05:15:50:63:b6:ea:21:6a:17:fd:31:16:f0:33:44:0f:16:
9e:59:06:b4:40:a5:f3:ec:b9:4b:56:e4:81:b0:42:21:51:c2:
24:a0:c4:f2:c7:2d:62:72:a2:7f:8e:5f:86:e3:7b:ba:0b:5f:
37:dc:84:e9:fd:2f:0f:65:5b:07:10:58:f7:66:46:23:23:fb:
ab:1e:be:2b:ae:ad:91:32:7b:21:41:32:6f:12:cc:62:62:43:
78:6f:37:21:85:84:79:f6:fe:f9:89:d5:9a:b5:e3:73:12:07:
a2:77:27:d4:b7:3a:26:69:75:1f:ad:5b:a0:ad:9e:21:51:80:
36:e9:22:25:8a:2f:64:bc:bc:ab:f1:ed:e7:ea:b1:7b:8e:f1:
5f:57:d1:56:29:0e:72:b4:fb:1d:6a:ab:33:68:a7:81:57:97:
7c:a3:93:7d:0e:5a:89:e9:68:9a:bc:27:6b:80:d9:d6:fa:57:
b3:15:6c:bc:cd:b6:95:fc:2f:73:84:9b:bb:c1:ec:e5:35:f6:
11:b1:aa:4c:85:69:2f:ec:10:f5:15:39:c9:9a:b2:5d:27:54:
95:2d:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:26:19 2025 by rpki-client