Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
File: iW1QqxLax1eoUX-YnnMXJVoUfFA.mft (raw, json)
Hash identifier: E28ikQz6cIO4LK9wR5HelcjrpdKn5kIPtXpxPHBu+dY=
Subject key identifier: 0F:DB:98:77:73:80:8F:1E:E9:CB:C8:44:80:4D:22:D2:F7:22:2D:47
Authority key identifier: 89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
Certificate issuer: /CN=896d50ab12dac757a8517f989e7317255a147c50
Certificate serial: 01974CD779FD530B307330A54B735631B1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
Manifest number: 07F7
Signing time: Sun 08 Jun 2025 00:01:19 +0000
Manifest this update: Sun 08 Jun 2025 00:01:19 +0000
Manifest next update: Mon 09 Jun 2025 00:01:19 +0000
Files and hashes: 1: B38rRSPWErqXfPx0DzWgKIR_ZF4.roa (hash: 3ngIsupMWcvGfbEOZowjuSpsq4xSUo0YoDqyx3tWI8Y=)
2: SW-4hL0mVSkVe3oiFDw6-IYGB80.roa (hash: aedwmf02se0U+ifzhQZmrqdfm8+Faq7npwCgMp24KCg=)
3: iW1QqxLax1eoUX-YnnMXJVoUfFA.crl (hash: yeN+z9/tFukMWv3/l+BDjxu81evI+dewXs8/P4d2rbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:79:fd:53:0b:30:73:30:a5:4b:73:56:31:b1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d50ab12dac757a8517f989e7317255a147c50
Validity
Not Before: Jun 8 00:01:19 2025 GMT
Not After : Jun 9 00:01:19 2025 GMT
Subject: CN=0fdb987773808f1ee9cbc844804d22d2f7222d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:aa:b1:ae:ba:88:1c:bf:82:b7:7f:45:23:
97:dc:e1:89:9c:24:3d:8f:ce:4e:4a:47:25:5a:0e:
94:63:b6:92:39:98:19:c4:50:fa:b1:dd:75:1f:3b:
37:56:e5:a8:9b:31:3b:2a:2c:cd:9b:c8:1a:4f:3c:
02:07:9d:20:e9:7d:ba:46:29:89:0e:9a:14:d0:2e:
fb:88:6d:0e:08:86:7b:01:00:58:45:e5:db:f0:9c:
87:16:0a:73:de:a9:49:8f:06:c6:3b:6c:0b:51:8e:
dd:d1:9b:e2:9c:d2:b2:22:0e:5a:1c:4e:37:1a:57:
cc:e8:ca:c6:57:52:3c:9e:db:dc:a7:a9:11:ba:9e:
d1:04:35:01:05:1f:d8:16:0a:42:ab:ec:17:46:3d:
6c:0d:7d:39:63:ca:56:97:22:ad:4f:18:32:e3:ae:
ae:bc:41:a5:86:c6:33:3a:08:38:14:da:33:6d:0b:
ef:87:18:77:2b:9a:b9:eb:f9:b3:41:8f:f9:80:40:
84:e9:2b:08:35:12:b0:99:66:c5:19:05:54:74:cf:
a2:5e:96:6b:3c:bc:b9:a2:74:6e:aa:c9:e6:68:87:
49:78:88:0c:f4:ba:ce:c7:f0:29:63:0e:c2:60:92:
4a:2d:88:2b:19:37:50:76:f7:9d:26:97:44:21:ab:
be:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DB:98:77:73:80:8F:1E:E9:CB:C8:44:80:4D:22:D2:F7:22:2D:47
X509v3 Authority Key Identifier:
keyid:89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:61:16:18:15:8b:2c:32:3a:0d:4e:8a:85:99:a4:ca:78:c7:
5e:e0:b8:15:71:8e:45:19:ee:50:2e:72:aa:71:57:09:0e:8c:
ad:77:18:81:84:f3:4e:c8:bd:20:80:24:36:20:52:7b:85:48:
7a:ae:7b:2c:63:81:5b:86:20:09:25:50:7a:9a:aa:83:2f:d8:
da:06:66:ea:76:f0:5b:79:5e:2b:35:10:19:74:af:36:d7:4b:
53:84:43:5d:9c:4b:10:a7:17:55:e2:43:2c:89:f9:5f:45:97:
33:56:db:72:44:1e:cf:11:a3:84:8f:33:f1:e6:aa:62:59:db:
e5:67:a9:d3:b9:7a:6a:17:7f:6c:8b:0e:4b:d7:ed:86:52:8b:
f0:1d:96:42:90:68:d4:54:36:d3:b7:f6:7e:dd:6f:0f:f0:bd:
e8:2e:f1:42:f8:c1:dc:93:38:27:c9:35:0e:44:e6:20:94:56:
ef:cb:f9:c6:6f:99:14:62:c4:99:5c:9c:0a:a3:ac:42:9d:14:
c5:5b:52:a2:b6:3a:ca:0a:d2:3a:4b:9b:cb:5b:b0:ec:aa:58:
9f:5d:d5:51:6d:54:e3:92:89:04:5d:77:83:6f:fa:4c:b6:e4:
a5:e7:9b:f3:80:e5:27:30:c6:39:a1:fc:37:52:4a:82:10:23:
d1:aa:e8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:21:54 2025 by rpki-client