Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: OBkXReMDJbx0EQBxuuSy1RRFVpbKYSCSJUDcwvLFgr8=
Subject key identifier: A2:F3:7B:B1:E8:8C:41:01:8B:4F:89:42:36:B3:CE:42:3D:AA:E0:8B
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 019759B6AFD24F6AEFAAC2C6357D0102041A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 06B6
Signing time: Tue 10 Jun 2025 12:00:34 +0000
Manifest this update: Tue 10 Jun 2025 12:00:34 +0000
Manifest next update: Wed 11 Jun 2025 12:00:34 +0000
Files and hashes: 1: 76xLkfM6kYxOK1NXh9OOS2MHsHA.roa (hash: 6Sbux0XZ8H/iAJjFbORSyS+kiaCneStSNPq6dnkA+DU=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: GOgxdcvutrq8i7ZuKapFaPMtmC6ZkbS32Zs4fHMzDfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:b6:af:d2:4f:6a:ef:aa:c2:c6:35:7d:01:02:04:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Jun 10 12:00:34 2025 GMT
Not After : Jun 11 12:00:34 2025 GMT
Subject: CN=a2f37bb1e88c41018b4f894236b3ce423daae08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:f3:32:fb:5b:a0:a9:a7:9b:7d:fe:2a:2d:
53:1b:c0:99:bb:34:42:c9:e9:d5:ca:ba:56:55:4c:
5c:44:e9:f1:9c:69:06:aa:64:d8:c0:d3:64:fe:75:
2b:4e:4c:04:a6:cf:83:6a:61:8f:c3:13:1a:3c:2e:
4d:97:92:95:ee:f8:53:d6:b7:e5:b7:8a:9b:8e:4d:
f5:ec:27:6c:20:9e:15:94:d2:43:69:6a:fa:c4:c6:
f9:e1:66:6a:ba:75:15:53:48:57:06:39:12:c5:fe:
6c:9c:e0:97:7d:d9:79:2a:dd:d4:ee:2f:36:73:d9:
d1:d6:bd:f7:bf:5a:42:f4:4c:76:1b:c6:61:b2:3f:
b3:98:0c:cb:12:74:78:1b:cf:9e:d0:6d:da:2e:4a:
c8:ca:76:95:36:4b:4f:4a:4b:a5:b3:21:fe:8e:eb:
8e:77:a8:c5:50:16:a8:de:18:a3:d6:f9:c8:cf:7a:
f2:7d:e1:85:a2:ca:52:79:1a:24:dc:5f:fb:f6:66:
e8:2c:40:f2:02:79:c8:6e:13:73:6c:84:6b:fe:54:
e9:0b:76:4e:b0:8c:bf:39:dc:32:97:91:db:a5:11:
3e:fb:6b:06:d8:03:bd:0d:9e:20:31:2e:9b:83:9d:
e2:a5:2a:1e:18:b7:72:a8:2f:3a:10:a4:a3:7b:81:
fe:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F3:7B:B1:E8:8C:41:01:8B:4F:89:42:36:B3:CE:42:3D:AA:E0:8B
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:20:61:d3:4e:fa:bd:b1:46:a4:60:dc:37:ad:4b:ea:05:80:
59:e9:3e:c0:30:e7:2a:bc:83:ae:27:64:bc:da:5e:64:77:f5:
f3:be:7f:ab:94:13:9e:ee:ab:59:fc:56:99:1d:b1:9f:be:95:
e5:14:91:90:f9:b5:8f:ca:9b:e4:14:5c:82:1a:8c:7a:01:9c:
d6:72:9a:c7:3e:aa:7a:8e:1f:6d:ef:dc:ed:f0:44:4a:1f:ae:
00:1b:21:a9:23:f3:da:e9:a5:a4:d5:60:7f:5b:6f:41:59:f2:
7c:f7:52:0f:84:49:b2:bd:99:02:e1:0f:ab:18:96:01:51:f2:
00:ce:0a:96:c2:f2:7e:5d:79:0e:69:af:f7:89:0d:32:ff:bc:
30:cb:9d:ed:de:e3:7b:3a:0b:3a:6f:08:4c:64:6d:e3:f0:a1:
e7:2d:77:a5:c7:88:47:5e:66:95:27:94:a4:81:e6:1a:26:ec:
89:45:cf:42:18:8c:15:37:2b:a0:f8:be:3e:50:a0:c5:7e:83:
e2:87:c4:8e:83:b3:65:bd:9f:5d:7a:88:aa:c9:b2:72:a0:4e:
8b:c4:0b:ab:90:ca:ce:59:c4:4d:98:40:ca:45:80:5b:11:52:
1e:53:20:70:af:ee:92:60:fb:da:26:ae:c2:a6:d2:04:fa:56:
04:3c:a5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:27:30 2025 by rpki-client