Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: h3zboAaA+3tqdnojh8PPgmwHsmQYB51QziU9PNKeqvA=
Subject key identifier: FA:95:11:2D:97:04:5A:0C:C5:17:B0:B4:F1:36:3F:77:BE:5F:14:A7
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 0198443EE7B6E93780D5C2698E2F8195259F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 01:00:29 +0000
Manifest this update: Sat 26 Jul 2025 01:00:29 +0000
Manifest next update: Sun 27 Jul 2025 01:00:29 +0000
Files and hashes: 1: 0tVPRt7zVqUIIvmXairhGKRXv0U.roa (hash: dhSo1lkIbUUIXrPA3/k2AFZiXI7dxBUbTf590V+gQts=)
2: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: UwPkR52NlpdODfxkK1Mn5mxNYLPV8GpX7HH8nJF1alM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3e:e7:b6:e9:37:80:d5:c2:69:8e:2f:81:95:25:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Jul 26 01:00:29 2025 GMT
Not After : Jul 27 01:00:29 2025 GMT
Subject: CN=fa95112d97045a0cc517b0b4f1363f77be5f14a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6f:0c:17:49:ee:e4:4f:b3:e7:e4:ca:9d:d0:
f7:e2:fd:8a:ef:d3:c9:7f:55:8b:1f:60:c3:55:05:
78:8f:3f:68:61:ec:42:eb:3b:59:c4:1b:73:e5:3f:
80:48:8f:93:03:12:dc:87:9c:ef:4d:f9:7e:bd:6f:
d5:63:5a:54:4d:a3:a0:fa:5c:9f:ce:0e:14:11:34:
5d:7f:e7:86:92:be:3b:97:a5:e4:e1:60:95:6f:2a:
c2:1c:83:c2:11:90:25:3c:a2:83:72:3a:29:6d:02:
ca:04:94:5b:39:ac:df:3a:cb:a3:c2:26:ac:b7:74:
66:f4:f3:a4:f1:ca:eb:86:ca:dc:d9:b5:85:c4:61:
ff:43:0d:48:8a:61:b1:73:8e:03:b0:e4:38:17:23:
08:44:82:8f:71:a2:ce:52:82:bc:63:1f:66:32:5e:
77:ed:80:c3:99:d2:cd:40:29:bf:b7:44:d3:6b:f0:
30:f9:56:4c:54:dc:b9:37:09:f7:64:f1:e9:29:e7:
9b:06:ac:07:e1:27:4b:40:80:59:ed:1d:fa:90:dd:
1b:2e:83:55:bc:f5:b5:a8:fe:e4:3c:21:54:6b:90:
3d:ad:49:a9:14:3e:d6:a4:b4:d7:6b:b7:d6:d0:5a:
6a:06:d1:a2:33:51:47:86:b6:16:be:77:8b:55:a9:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:95:11:2D:97:04:5A:0C:C5:17:B0:B4:F1:36:3F:77:BE:5F:14:A7
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:01:7f:81:42:6c:2a:70:bd:40:da:0a:f5:c7:73:a5:b3:08:
cd:be:45:4c:b2:18:dc:9b:8d:65:05:f6:09:97:c7:50:a5:4a:
dd:1f:c2:18:83:3a:33:a2:7a:c6:d4:58:d5:e1:7b:a2:3a:72:
71:65:82:5d:cc:c4:41:7c:2b:81:8b:46:b1:47:7a:47:82:83:
e5:19:05:ff:56:93:f6:56:36:6f:c0:b7:91:ad:55:23:86:1c:
cf:c3:e5:66:77:de:73:c0:b7:2c:f5:b8:64:30:33:76:3c:28:
67:67:f2:48:22:b2:54:e8:94:32:7c:a9:1c:b2:f1:49:bd:a7:
d2:26:4d:61:09:32:46:50:cc:be:04:d2:02:07:85:63:6f:f5:
4a:a5:0a:a7:09:40:d3:a3:32:5a:ea:cf:2d:e7:d4:5b:11:91:
02:8e:0b:3a:81:99:79:a2:ca:af:1c:c4:dc:8f:f6:44:18:90:
00:58:c5:47:eb:67:e3:51:01:b0:33:1d:8e:99:01:f9:7d:84:
2a:76:26:4c:f3:48:02:ee:b7:30:cb:42:50:9c:56:67:81:f1:
cf:ff:ce:9c:4c:bd:c4:45:35:26:2a:be:3e:85:00:a6:17:c3:
58:f8:b5:b4:02:b8:c7:6d:cd:0c:78:89:0f:7c:8b:be:85:c9:
4f:62:27:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:02:18 2025 by rpki-client