Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
File: iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json)
Hash identifier: a74Zig4SASVs+m6vSoKZ6Rsx/3YKjUIDnTqf5bdobbY=
Subject key identifier: C9:D7:DE:C7:D3:4C:76:7F:C4:FF:88:AB:88:CE:56:4B:D7:21:77:C9
Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Certificate serial: 019749D5822A259A01C580EA42777E1E0DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 10:00:18 +0000
Manifest this update: Sat 07 Jun 2025 10:00:18 +0000
Manifest next update: Sun 08 Jun 2025 10:00:18 +0000
Files and hashes: 1: eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa (hash: NL/nj7PiRruzzNoJXPrVqMifeH+fC4R4vqg0qPtnqLg=)
2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: fzHGiHuT4zofrCbRNj+jW+xgrMcde4gNVBvTmvLpJa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:82:2a:25:9a:01:c5:80:ea:42:77:7e:1e:0d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Validity
Not Before: Jun 7 10:00:18 2025 GMT
Not After : Jun 8 10:00:18 2025 GMT
Subject: CN=c9d7dec7d34c767fc4ff88ab88ce564bd72177c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:d5:b1:b4:a1:9f:28:d6:d0:6c:11:8d:29:
47:c3:60:d2:8d:5b:17:0c:03:0a:3f:d2:91:16:03:
52:43:a9:0e:4b:dd:51:40:e5:7e:eb:1c:fe:5d:a2:
4b:2c:33:91:a3:89:bc:21:e5:f4:df:07:6a:9b:77:
06:8f:e9:ae:dd:33:67:37:2d:f9:06:98:3a:d3:4b:
26:01:08:e7:46:b6:7f:ea:c3:e3:71:4e:37:aa:1c:
85:ca:7c:e2:e8:9f:e8:42:1f:58:bd:fb:5c:e8:b1:
de:f5:26:3f:c5:c4:43:c3:04:6a:90:97:13:c5:fd:
44:3e:09:f8:95:56:83:67:f1:1a:89:29:a3:dd:62:
a7:ce:75:22:24:ab:17:35:ea:81:c6:63:85:6e:0c:
67:a7:13:fe:ca:b7:3f:ad:02:e6:22:b0:a1:8b:11:
18:78:59:0f:e9:fe:d5:37:fc:6a:13:2e:ff:4a:9c:
52:80:13:e1:fd:1c:ed:3d:d8:8e:4e:93:a9:d6:f5:
cd:51:77:b9:4f:30:05:81:75:8f:f6:6a:42:38:82:
32:ca:46:ba:56:6e:d0:b2:58:3d:83:1f:b0:4e:c0:
9c:4c:e2:67:bf:c6:6e:71:52:b9:ce:77:91:0b:62:
99:59:3e:e2:ef:b4:c6:ef:43:03:da:b0:99:cc:97:
09:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D7:DE:C7:D3:4C:76:7F:C4:FF:88:AB:88:CE:56:4B:D7:21:77:C9
X509v3 Authority Key Identifier:
keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:99:cd:0f:19:09:62:ea:3c:81:d5:ac:45:d2:1d:96:8f:36:
bb:94:11:11:96:33:72:ac:8c:1e:c4:da:51:5e:ef:11:44:29:
60:43:fc:0a:11:37:db:d5:21:ef:4d:ec:82:be:4a:b3:2f:53:
54:18:bd:71:1f:9d:88:d2:5a:3d:36:da:bd:95:40:70:3e:63:
e8:45:a7:ab:ee:a4:97:1b:22:7a:c9:88:d8:b0:3a:b1:1a:2b:
ad:ef:f2:96:c5:3b:54:a7:5b:34:65:0f:21:ed:2e:89:0a:8e:
d5:5f:3d:c8:80:0a:0d:24:46:65:90:92:44:ca:0b:10:f9:a8:
14:33:92:4f:50:7f:5a:98:1f:73:22:dd:d9:1e:e0:6f:2a:81:
86:23:b8:c1:73:f7:aa:74:1e:7a:49:d6:4d:e0:d4:5d:22:a0:
b6:c2:75:cd:8e:f8:97:f6:d2:bc:f7:2a:c8:9b:7c:b6:30:06:
b1:98:ea:d7:bb:a1:d5:ff:cb:d4:10:ed:b7:05:54:72:ac:6f:
61:44:9a:3a:c8:e5:b8:f0:5f:eb:42:13:9f:50:d0:e9:5b:53:
73:44:41:5d:92:83:bf:d8:6d:f0:4a:e7:b3:09:77:58:90:9e:
53:8f:e7:79:79:ba:c1:9b:20:6c:90:e7:44:98:aa:72:24:c7:
4b:78:dd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:22:09 2025 by rpki-client