Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier: oDtcrvoMHZCuDj4+4+bgBFCkaEJBMHKyezuskwA2gCA=
Subject key identifier: 84:11:20:8B:03:D6:DF:EA:CC:2C:D0:AA:F1:4C:7B:80:4F:4C:27:60
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 01974DB252286CFBEF4A054DA8CC65D40EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number: 12A3
Signing time: Sun 08 Jun 2025 04:00:21 +0000
Manifest this update: Sun 08 Jun 2025 04:00:21 +0000
Manifest next update: Mon 09 Jun 2025 04:00:21 +0000
Files and hashes: 1: 1b_wV0k49kuwRrhHplXiK2XiroA.roa (hash: RH2MIMTVkHxoiPuLQAUrE2Rqg6UxaLBroHReV0YDdhs=)
2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: OPOFaQXtqprYqRWExi6fAZ8FKyLNlpJWjgK1tGy5930=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:52:28:6c:fb:ef:4a:05:4d:a8:cc:65:d4:0e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: Jun 8 04:00:21 2025 GMT
Not After : Jun 9 04:00:21 2025 GMT
Subject: CN=8411208b03d6dfeacc2cd0aaf14c7b804f4c2760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a7:df:68:3b:f7:cf:ad:4e:fa:1f:25:fb:f9:
32:1a:97:08:7d:13:24:87:33:24:1b:cd:c3:12:b0:
b5:6b:62:49:c8:7d:5a:87:2b:a7:db:f0:6e:80:b3:
2f:be:7b:70:f1:90:80:4b:17:13:d8:b3:c9:05:a1:
1a:da:ce:3c:5d:02:28:72:45:1f:48:b2:70:6b:16:
09:2d:e2:f8:d8:35:52:d7:2a:be:45:5d:00:56:d3:
5f:7e:a5:7b:19:ea:5d:03:18:c7:5d:62:2d:8b:34:
69:17:ce:0b:d4:a8:3a:9d:2c:18:73:d0:16:88:62:
e1:8e:db:16:57:a3:84:42:6b:68:2e:3a:da:07:ea:
05:30:3a:a7:ca:28:6b:d7:e6:74:2d:9b:de:df:0b:
c9:fb:0c:9a:bf:fd:ec:31:8e:79:0f:1e:77:f4:a8:
02:46:e0:90:3e:4a:70:ab:a8:a6:86:85:59:3a:a1:
b4:d3:7b:dd:c9:b1:e3:dc:ce:f2:6c:55:07:99:a2:
d6:bb:5f:7b:62:52:9e:4b:ec:25:7f:68:ab:5a:fa:
33:89:22:b4:02:b8:8b:16:98:51:50:05:48:22:9b:
b6:63:b0:ac:cc:97:76:e0:a6:96:09:99:a8:bf:a6:
ac:6f:31:25:77:e6:29:e5:b6:aa:54:08:6f:4c:b6:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:11:20:8B:03:D6:DF:EA:CC:2C:D0:AA:F1:4C:7B:80:4F:4C:27:60
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f2:e1:20:e4:c1:75:48:53:af:f1:be:cb:8c:6e:cc:c7:ed:
7e:68:68:00:af:bb:0f:c8:2c:61:a0:32:b6:b9:dc:a4:fa:8b:
e2:a9:99:06:ed:23:e1:91:fe:1d:86:11:40:f4:7c:74:b4:1d:
9e:9d:93:0c:54:11:ac:95:c5:4e:2e:52:cc:76:b7:95:58:18:
1c:04:eb:65:e6:62:0e:45:dc:bb:ab:a6:df:d4:a7:ee:d3:1e:
e9:fe:ce:4d:2e:15:a2:91:44:79:cd:f1:07:43:8b:3a:95:ca:
72:1b:55:0a:5e:50:70:95:e9:ff:73:c8:4d:eb:f8:60:26:7b:
b5:6f:72:71:3f:e3:c6:b2:fd:f5:ea:38:e8:9f:fd:e4:7c:bc:
f8:5a:a2:08:1f:01:d2:32:00:b2:6b:9e:b1:3c:32:e2:91:57:
e5:83:b5:03:11:43:ef:4d:ff:1c:68:d9:d8:ae:3c:d8:b6:96:
5d:b7:9b:07:d9:99:da:5d:f1:3a:f4:29:27:17:34:b7:c0:e5:
a1:ef:47:0c:ea:6b:61:9f:a5:3a:03:bf:5d:dc:b6:93:04:a5:
50:f0:54:3d:0e:7e:ff:73:12:c9:cb:07:54:a4:44:54:2a:21:
c2:eb:5a:3c:25:7f:da:cd:2c:86:9c:05:de:b0:05:8a:5f:8a:
92:6d:ab:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:04:19 2025 by rpki-client