Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File: i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier: WIdmfaL+qiT7CqQa8c8zWi5EE1FOFvYFtO9k3bo3XoA=
Subject key identifier: 1E:D4:ED:57:BB:AB:B1:3D:BF:84:E5:64:48:B1:42:AB:47:13:A7:01
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial: 019746670355877EBB940063670397B23968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number: 0F86
Signing time: Fri 06 Jun 2025 18:00:45 +0000
Manifest this update: Fri 06 Jun 2025 18:00:45 +0000
Manifest next update: Sat 07 Jun 2025 18:00:45 +0000
Files and hashes: 1: KwomHtAHnCM0D-yGdW_0Sf3mopc.roa (hash: nJuUP0j6H239g1R7GMJyKq0zviXnK+AhK7Q4U43dyg4=)
2: ZYlcf7X6lFUqPdlZgjx7h6pY7f0.roa (hash: Z91lhusvfId6xXTKVa6gm5qmkQJNcO8M7YoIqY37LFU=)
3: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: 75FhcfXFvwenNEY/FEfwINHXjlswz/l7Yu4dHjJtzvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:03:55:87:7e:bb:94:00:63:67:03:97:b2:39:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Validity
Not Before: Jun 6 18:00:45 2025 GMT
Not After : Jun 7 18:00:45 2025 GMT
Subject: CN=1ed4ed57bbabb13dbf84e56448b142ab4713a701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:1a:99:f8:14:46:bc:31:0f:ee:04:3d:f7:
fd:c5:6d:b9:db:75:8a:66:2b:79:76:4c:a8:db:83:
6d:fd:b1:37:8d:26:15:25:9d:88:f4:7b:40:52:a6:
19:c4:ed:63:b1:de:19:75:28:5b:aa:6f:2c:41:1b:
19:39:bb:23:94:c5:b2:b1:83:ff:4f:0e:a5:cb:f2:
46:73:97:25:26:c0:5a:30:41:ed:18:c4:ae:28:2b:
e1:85:97:19:ec:8e:f2:22:a4:60:29:b4:95:2c:15:
c9:1e:4e:39:b5:03:e7:99:2e:92:71:03:2b:4a:06:
5a:c8:c2:eb:3e:f7:06:68:6e:66:69:2f:14:b7:1a:
51:f1:8b:bf:25:f9:b9:bb:f3:c7:d3:f2:1c:5d:a4:
12:47:c7:f9:79:e4:d4:02:f2:e8:40:f4:0b:81:6d:
c7:ae:b0:ee:7e:4b:b2:86:47:ed:90:f1:8b:1c:fc:
50:1a:c0:d9:7e:be:eb:4b:d6:02:d3:c5:76:b0:37:
7c:07:cf:6c:d7:c9:03:79:29:0e:d6:83:4a:5e:f5:
cc:7c:1f:fa:d5:27:4a:67:09:27:2d:d5:be:65:28:
59:f2:ce:df:66:13:93:44:f7:28:f5:23:97:7e:8b:
90:d2:56:e3:d9:38:f5:8e:66:f8:b9:e2:aa:fa:0d:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D4:ED:57:BB:AB:B1:3D:BF:84:E5:64:48:B1:42:AB:47:13:A7:01
X509v3 Authority Key Identifier:
keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:09:c8:e0:70:d7:b4:5e:b1:6d:13:58:c4:de:64:39:68:9c:
4d:eb:3f:f7:bd:35:49:c4:50:b8:64:5e:8b:69:98:51:1c:9d:
e8:08:d2:8b:b3:ce:d6:ea:ad:41:90:ce:e9:79:76:e4:aa:ea:
37:66:ec:71:4c:f8:62:c4:a6:16:c5:fa:67:10:9a:fe:12:3d:
e0:8b:6e:22:23:31:76:2c:5e:3c:30:d4:5c:03:2b:10:19:d7:
49:87:5f:e7:0b:4b:6e:e6:55:b1:40:02:30:f4:64:87:16:ae:
b7:ff:52:ff:fd:8d:15:c5:89:fb:fc:a8:45:53:93:47:8d:d2:
fa:17:44:70:82:c6:33:62:ce:c8:ca:e5:7f:9e:68:f8:24:b7:
26:0e:d9:0a:23:c9:da:6d:09:59:ed:42:90:16:b6:ec:04:df:
e3:10:35:02:6b:d9:2d:a3:1f:50:fc:d8:df:55:21:01:d4:7e:
2b:e9:e8:cf:3b:1f:0e:b8:92:5f:4c:ac:4f:57:07:f0:ab:a1:
43:60:97:72:76:42:e8:4f:50:03:cc:90:a4:0b:e9:16:44:bd:
14:9c:1d:98:d9:72:2f:67:f6:fe:fc:5a:fb:a2:98:b8:af:5a:
15:de:14:32:f3:27:4f:cd:b2:f8:29:d4:d1:cc:92:d1:ca:7d:
db:b4:52:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:08:50 2025 by rpki-client