Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: bAKmCPDarTaxgYWA+k8cPfqhH0sMx9N7eGd+QL13wZI=
Subject key identifier: 8C:18:C7:61:65:A0:C8:E6:00:79:E5:6A:2D:41:B9:99:F1:75:65:22
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 0197440A9452C621123A9C7C59BDEAB586D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 1425
Signing time: Fri 06 Jun 2025 07:00:33 +0000
Manifest this update: Fri 06 Jun 2025 07:00:33 +0000
Manifest next update: Sat 07 Jun 2025 07:00:33 +0000
Files and hashes: 1: 25GdIX8pGRrdAAaubJO0FxbYG-s.roa (hash: J7SjJPVMXuJzyuyQBNTx3E62SBRqK9gpWeifxFumUs0=)
2: 6WSzq5tklzrrb4CQ30LLV8NUx2g.roa (hash: UmnImARopszt+4WaNMMPCsufWGExd3hc37DvZdbg1tI=)
3: 8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa (hash: 0g/v1GDnSb/mpf5pKYYz9HEAiGcoNER98ihb6wrQqWo=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: vFjfEqjJr5ciOqlH21YF6wy94tfoLEed8EQzWMUhgKk=)
5: OREDNoQ0vwPI3XM_zRsW3yzoE_A.roa (hash: 1cT3zKRDrAQDDxV5Rq7SD/mINGk0AiyR89E6Ur7LkVA=)
6: mQQXMqosDbrfiBBQFe3pss-9NtQ.roa (hash: qAb1oy5TaR+lNTajDgndtpEVHAu7ZMdgoTop9g6Wh6Y=)
7: uSaVwi6W5g3viY9NscHN3tqDzCk.roa (hash: t4D+qU5YVF27z4TGr3wG3ucQjp23my4+sKI2eFqOYYg=)
8: uumQQQ1viq_-gfcaqAufH6g_C7w.roa (hash: AM9mJlfYhSa7Wcw8Wx9nTWnnL8T0GQwXceLp5ft6/NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:0a:94:52:c6:21:12:3a:9c:7c:59:bd:ea:b5:86:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jun 6 07:00:33 2025 GMT
Not After : Jun 7 07:00:33 2025 GMT
Subject: CN=8c18c76165a0c8e60079e56a2d41b999f1756522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:ee:0a:e8:32:55:ee:a6:ba:e9:9b:34:88:
00:23:6f:2b:86:e4:5c:49:1e:97:d4:df:69:0f:2e:
83:95:b3:70:47:7c:2b:94:ca:dd:1b:8a:1b:95:4d:
3e:7a:5f:ad:0a:70:e0:88:23:7f:69:6d:36:75:48:
0c:69:72:b7:04:81:a3:1b:5c:d2:ed:5c:66:fc:59:
28:14:80:8a:60:1b:32:cf:73:45:5c:83:96:02:dd:
b2:6d:d0:03:e5:41:e8:f9:ac:02:3f:8a:d7:c6:53:
36:f7:d9:df:d9:d7:08:4f:6d:e4:7d:ae:4b:5b:af:
b2:41:eb:3f:ab:00:51:8e:7c:4a:3d:e3:f0:55:ba:
23:0b:dc:7b:4e:26:4b:e9:f7:3f:07:b5:f7:24:b3:
72:ed:04:55:f6:43:be:74:80:87:02:b0:19:96:d4:
03:3c:c7:48:86:dc:d1:f4:47:60:f0:95:33:42:89:
68:db:14:bb:4b:77:99:b5:ea:38:fc:65:e4:a3:74:
59:fd:f7:ed:84:89:e5:f6:5f:1f:4e:d5:7a:d5:15:
5a:59:71:66:eb:a1:91:37:d6:c7:5d:db:86:1e:03:
32:66:b1:f0:e4:b7:be:62:9d:e2:83:f5:66:07:41:
08:0b:16:bd:b3:8d:d9:73:a5:b2:8f:7b:51:91:2e:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:C7:61:65:A0:C8:E6:00:79:E5:6A:2D:41:B9:99:F1:75:65:22
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ba:8f:50:ed:ad:d9:23:6b:0c:d2:de:c6:62:a6:07:47:67:
23:48:5a:07:ec:63:9b:37:96:b9:c1:89:07:48:fe:c1:9f:0d:
6e:99:b5:a2:c4:e9:46:bf:21:24:5b:bd:e3:f7:a2:bb:d9:c7:
84:f8:d9:48:9d:e5:d5:24:4b:fa:4d:4f:56:55:ae:5d:eb:86:
18:fa:49:d2:c8:72:4f:54:9e:44:5a:3b:a7:a1:e2:83:80:c3:
43:b9:fa:73:36:47:6e:7c:2e:15:ed:80:ad:28:c8:01:4b:68:
14:02:df:b3:11:d0:d2:44:61:da:0c:6e:70:5e:91:4b:f8:b7:
1c:60:a5:50:81:46:c2:31:ff:bb:29:2b:a4:d0:5d:b1:fd:09:
9d:cc:ec:a9:eb:0b:26:c8:c7:7f:06:82:5f:5f:54:6e:91:81:
e8:5f:22:74:22:87:d2:58:34:c9:05:77:19:86:53:e5:ff:3c:
47:5a:26:f4:4e:b2:83:a3:1f:97:32:db:c4:20:dd:ce:44:f3:
61:80:3b:8e:de:3c:d9:68:26:5d:c0:cc:d7:85:5b:fa:dd:72:
95:ea:5d:4f:79:b6:a6:5c:78:59:1b:06:23:68:e9:20:7e:4b:
6a:dc:a4:4b:f4:45:b0:9e:a9:cd:05:ce:70:cf:16:53:e7:d3:
f0:b0:cc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 10:06:36 2025 by rpki-client