
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File: iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier: jIsI3r710r74kJ4EVfPFKqutrmhb9lLuUqQEnBBcsHM=
Subject key identifier: C9:7E:34:E0:95:D2:00:F0:48:9E:CC:05:C8:10:DF:EA:F2:05:62:CC
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial: 01974E5730AB8737027CE83AAE9DF467C98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number: 0C36
Signing time: Sun 08 Jun 2025 07:00:26 +0000
Manifest this update: Sun 08 Jun 2025 07:00:26 +0000
Manifest next update: Mon 09 Jun 2025 07:00:26 +0000
Files and hashes: 1: NGjcJESkWKoe17DLj5CiFkjFkhs.roa (hash: GPilr/syUwSnDgvatxbmfR2uNG9m+2J2hRVuK9V/K4A=)
2: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: h/a+sdRg/xSDj9ISNLtk6dkaFuY/ZBV73UUjHGS+L0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:30:ab:87:37:02:7c:e8:3a:ae:9d:f4:67:c9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Validity
Not Before: Jun 8 07:00:26 2025 GMT
Not After : Jun 9 07:00:26 2025 GMT
Subject: CN=c97e34e095d200f0489ecc05c810dfeaf20562cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:32:ec:6d:df:5e:ad:0e:44:a5:27:92:de:
d8:74:14:c3:b7:a9:aa:eb:fb:d7:87:1a:36:de:13:
cb:e5:7e:63:49:ad:49:3a:3d:eb:44:63:34:68:47:
f8:f3:4f:f3:1b:e9:67:63:a8:ff:98:10:59:47:6b:
83:fa:21:3a:f3:07:d4:b7:d9:9c:0b:e7:de:4b:25:
54:9a:6f:50:07:fe:cb:73:6c:1f:b2:06:f4:5f:fa:
93:ff:16:68:54:b7:ef:c4:3a:e0:8e:be:20:a8:9b:
fe:0a:c4:d4:fd:e0:a6:70:98:82:70:e4:c7:69:55:
4e:c2:5b:2c:26:f3:50:35:da:99:f7:ce:f6:58:98:
62:9f:8d:58:6b:7c:96:7a:63:86:cd:66:cf:a2:ec:
33:a5:7d:dc:bc:26:b8:5d:3c:2a:dc:88:66:66:18:
f8:43:6b:90:6a:f2:6a:ef:54:91:f0:06:86:a9:a4:
0c:5a:1f:81:44:8c:5c:8f:28:53:d5:3f:62:89:09:
59:3c:e4:1d:84:2a:4f:bb:bb:97:8b:73:c9:ff:7f:
41:5b:33:d4:f6:b7:b9:7b:43:52:4c:ef:e2:82:e8:
44:30:07:4b:7f:b9:f4:f7:60:4b:6a:0a:cd:d4:47:
54:2b:0f:57:81:4a:61:cb:66:bc:60:31:cf:39:d9:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7E:34:E0:95:D2:00:F0:48:9E:CC:05:C8:10:DF:EA:F2:05:62:CC
X509v3 Authority Key Identifier:
keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b1:83:66:77:04:96:07:e9:47:08:b2:64:bf:8e:dc:c0:60:
73:10:4a:07:d3:2b:eb:b3:df:fc:41:0f:df:71:ab:ef:b4:91:
fb:89:4b:3e:9a:22:40:7d:bb:f9:6c:26:a9:09:57:d2:f5:a0:
aa:61:90:8c:73:22:f9:f7:eb:d2:e2:91:26:d8:d5:fb:c5:23:
83:8f:97:8e:8f:a2:4e:78:b8:25:4c:8d:77:d1:9c:3c:5b:ce:
da:e3:a2:bf:34:45:3b:99:ba:23:78:dc:29:19:cc:fb:13:2f:
0c:54:38:d6:9a:23:9a:47:51:c2:9a:96:4e:9c:4f:4e:e0:58:
5a:45:9e:07:1d:68:9c:ee:23:fb:72:ca:c4:5d:6a:6e:34:b6:
d2:ec:e7:8a:dd:90:7d:1f:0c:02:ec:11:ed:74:2e:16:f5:7b:
2b:70:a5:d2:df:60:74:09:c0:da:0e:a0:0d:ee:41:2e:b1:88:
b1:39:ba:94:e4:68:f1:ca:5e:46:f6:fb:93:0b:29:ab:ca:fe:
21:b3:5a:7c:08:6e:54:c2:83:23:e6:43:95:87:bc:2b:4e:01:
1f:31:b4:28:cb:fc:4c:5a:25:07:4b:03:6c:b5:11:78:4f:f2:
29:2a:bc:a4:5f:eb:ae:30:f3:a7:44:2d:90:87:84:63:23:8a:
35:58:21:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:39:05 2025 by rpki-client