Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: 5iNcM1HTz1jvBRAds7/J1TGrCR5ixwOtY5zBSfB6wo8=
Subject key identifier: 64:0C:AA:10:46:2A:E6:51:E4:B7:44:47:1C:86:E3:1A:90:E5:F3:15
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 0197481E1F9058BCB89667EA3AA8D61864C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 14CF
Signing time: Sat 07 Jun 2025 02:00:23 +0000
Manifest this update: Sat 07 Jun 2025 02:00:23 +0000
Manifest next update: Sun 08 Jun 2025 02:00:23 +0000
Files and hashes: 1: Qv6t4wP7j-uLsxcfTWHv2ZFQWD8.roa (hash: eR47NrGWjMdNEp9FBa07vBAWwdqKIDeSc8imYvJOwfI=)
2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: IjWpsdXY5P8uDrpOFNiJw245dfn1F11u4mD0YVOvPb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:1f:90:58:bc:b8:96:67:ea:3a:a8:d6:18:64:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Jun 7 02:00:23 2025 GMT
Not After : Jun 8 02:00:23 2025 GMT
Subject: CN=640caa10462ae651e4b744471c86e31a90e5f315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:9c:14:67:4b:33:a5:e2:3b:51:cc:16:9c:
95:05:61:28:3d:33:f0:46:d3:ca:f5:b2:9a:b2:9d:
ab:c7:99:39:21:4d:92:b1:31:af:f1:36:60:ee:ed:
63:21:25:64:4b:3f:0a:4b:0f:ae:b2:4b:fc:0a:7b:
06:02:38:bc:73:cb:17:bd:15:4b:1d:05:17:b6:63:
9c:fc:5a:43:76:a1:0d:f9:8f:10:9d:0c:ee:bc:a2:
7b:7d:7a:92:0c:66:df:f4:66:2a:3c:85:32:a6:b1:
45:26:38:8d:f0:65:44:13:f2:38:2b:c7:dc:c0:45:
a5:77:8c:96:90:09:8d:09:4e:3d:3a:21:ee:e9:e7:
b0:db:24:13:98:25:51:44:97:13:57:a6:c9:d9:c0:
20:8c:cc:2f:d0:ce:9e:3d:1b:7a:eb:95:c6:8f:c7:
e2:51:1d:5f:69:fd:46:55:06:a0:6b:96:a5:7c:e7:
da:18:8f:42:a3:8a:ff:c1:9f:bf:a7:9c:94:90:dc:
66:6f:66:8d:50:c8:9c:84:5c:ad:99:64:eb:f1:6f:
71:66:b4:cc:54:ea:0e:77:a1:dc:c7:c1:50:6d:d8:
66:5f:06:01:f4:7d:1a:30:70:4a:13:84:95:b9:d9:
43:3a:b4:dd:15:c7:b4:a5:9f:9b:5b:cc:a5:b4:4c:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0C:AA:10:46:2A:E6:51:E4:B7:44:47:1C:86:E3:1A:90:E5:F3:15
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dc:ef:04:32:ea:11:b3:cf:35:4e:d1:46:9d:45:89:7b:ad:
37:08:88:32:da:6e:42:04:16:49:86:dd:3a:dd:5f:04:f3:b1:
c2:6e:4f:09:53:ed:72:65:1d:cc:59:4a:c0:5c:4b:ca:6b:fc:
69:af:d7:48:59:33:45:19:62:58:6d:cc:47:c7:3d:47:ca:f0:
39:b4:f6:d9:ea:d8:2d:19:13:81:f5:b2:c5:e2:23:d1:a0:c0:
f9:db:97:b1:b0:1b:0b:9b:70:c7:33:07:fc:a0:92:b2:25:c7:
b9:19:85:d1:a3:6e:59:23:5f:2f:32:de:37:22:09:39:0a:fb:
33:39:de:fa:25:13:ce:38:48:43:60:b2:d0:eb:41:4b:95:6e:
fe:47:40:fa:b9:03:f7:20:19:54:a4:0e:30:9e:d5:f3:65:99:
56:7c:76:c6:d0:e8:ef:29:b8:03:dd:b4:4e:c2:65:5d:73:dc:
6b:3b:5f:3a:d0:f1:8e:f0:46:4e:f8:bb:bb:e1:7f:34:32:8c:
70:06:f4:b1:6c:be:ed:d2:ad:02:9f:4f:b6:90:da:83:f2:7c:
ed:a1:19:ef:a4:dc:83:8b:c2:17:87:4f:1d:ba:80:40:90:ae:
c8:05:67:42:21:a1:70:49:70:2d:16:a6:34:c3:55:70:d8:ee:
d8:3f:4b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:53 2025 by rpki-client