Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: J3nkI1QAUT5S4NciphUWLXCpch/kYXfckQHkb+2lA1w=
Subject key identifier: E0:BD:3D:C8:CC:2A:9C:58:B3:2B:97:65:26:79:91:44:ED:A8:30:01
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 019748FA8057133E7A7654B4A76EF355EFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 06:01:05 +0000
Manifest this update: Sat 07 Jun 2025 06:01:05 +0000
Manifest next update: Sun 08 Jun 2025 06:01:05 +0000
Files and hashes: 1: 9Xk925SUUXfLnbw9FBp9N3qLdfo.roa (hash: Ly02I9+k8vuMGWxnQ136VFvx8sd3hejXT82bKGKV7BM=)
2: PHa1bwg0jlW9wU-ZxMrg4KmG4Zc.roa (hash: sT+3KqlrpBwNw2te0UajmvKsMUapvIEs9YfpHeq4XGU=)
3: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: lwkZ4pL0vZG0UJqo+u3xwOMDvvGhe4j5NBGb+F2rgtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:80:57:13:3e:7a:76:54:b4:a7:6e:f3:55:ef:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Jun 7 06:01:05 2025 GMT
Not After : Jun 8 06:01:05 2025 GMT
Subject: CN=e0bd3dc8cc2a9c58b32b976526799144eda83001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:b1:fe:4c:e9:c2:1e:6b:fa:45:a7:1d:59:
02:4c:a0:ba:8a:c3:79:6d:1e:1e:fa:26:9c:a6:6b:
71:a0:21:5e:97:ea:d1:c4:e3:67:24:85:c1:b8:fe:
91:3d:94:e8:9a:04:e0:3b:6d:b3:aa:8a:60:c7:21:
8b:b4:9a:c4:09:f0:e7:e5:14:72:ba:a0:12:0f:bc:
f0:69:21:a3:0f:11:26:55:3d:49:f1:03:41:1c:d8:
51:a0:ee:c8:0f:e8:06:39:11:43:6d:fb:74:88:0f:
89:4a:79:75:d8:e5:67:dd:6c:67:26:5e:11:79:90:
bc:93:60:fb:f9:7e:20:94:f9:c4:49:34:d4:34:80:
70:cf:bf:e9:a5:5d:a9:ce:49:1c:2d:43:05:ca:a7:
7d:9a:83:f7:0a:6e:2d:b2:ed:28:9d:ac:ea:ef:21:
dc:6b:d4:2b:f7:60:16:e2:d7:89:47:ab:af:84:fe:
89:73:7f:ad:99:34:aa:f6:3a:80:61:0f:aa:3d:a1:
e4:3d:ce:03:6b:54:bb:44:3c:27:1a:88:0a:c1:1d:
74:0d:2f:56:db:66:33:b4:a2:a1:6e:84:97:43:31:
36:7a:1e:f5:a4:7b:60:20:8a:f6:c0:28:17:fe:d2:
32:a1:bf:c0:08:0e:46:df:c3:31:45:e7:7d:7a:7d:
ca:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BD:3D:C8:CC:2A:9C:58:B3:2B:97:65:26:79:91:44:ED:A8:30:01
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3b:18:ae:03:8c:21:2c:03:62:b9:30:6b:83:09:16:a1:03:
41:56:0b:73:00:ee:74:15:23:24:59:d3:bc:36:71:0c:3a:ad:
b7:77:12:18:a7:e7:70:44:89:97:c4:7f:d0:6e:c4:36:35:4b:
c2:ad:a5:40:e5:95:e6:71:d7:ae:f1:27:3b:52:22:6e:fc:c2:
35:59:98:35:3e:4c:98:3a:fa:bf:1f:76:9c:8b:ff:3f:d4:88:
70:1d:d8:48:ff:e8:d2:b7:b5:95:03:a5:dc:ec:c9:59:87:64:
f1:10:d4:a8:6b:22:ac:eb:d6:36:d6:03:ac:2a:ba:f3:23:6c:
de:c5:7c:e5:9f:42:85:d7:10:8a:01:e4:89:0e:fe:38:29:b4:
f5:9c:7f:50:0d:dc:57:32:14:70:ad:5f:84:1d:46:c8:4e:71:
e5:59:40:aa:ae:33:73:28:b9:cc:5e:41:73:1a:44:6c:42:c8:
4a:dd:8a:ae:10:90:a6:20:cc:3e:41:c4:0c:83:5b:be:23:67:
d4:bb:ee:e7:cf:cf:49:9b:4d:2f:55:27:23:dd:b8:2c:11:ef:
5a:71:92:a8:0f:c1:ea:27:5d:7b:d7:8e:31:ab:db:d1:97:1a:
8e:71:21:cc:6b:28:b8:bf:0e:72:3f:9e:be:19:aa:62:bd:3f:
76:a0:02:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:41 2025 by rpki-client