Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier: QywquoMQAs11jJk6Us5CU91ZWT+kSWNyYd/QozqJqBA=
Subject key identifier: 5C:10:1F:BF:82:B4:E9:9B:23:7C:92:3F:24:0A:4D:E8:F0:45:19:33
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial: 0197518F36954DFAB79B49EED23C33258219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number: 0EEC
Signing time: Sun 08 Jun 2025 22:00:29 +0000
Manifest this update: Sun 08 Jun 2025 22:00:29 +0000
Manifest next update: Mon 09 Jun 2025 22:00:29 +0000
Files and hashes: 1: glHtLecTNUxeR4oxupaJRTlQLos.roa (hash: tjH899kftJHgu4JmkbHHTA84WKPpmWW00cLzLNo7wBg=)
2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: DiL/svSrn3w5/8r/xfvCT9ehMEyquuYJaCHghkUL95k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:36:95:4d:fa:b7:9b:49:ee:d2:3c:33:25:82:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
Validity
Not Before: Jun 8 22:00:29 2025 GMT
Not After : Jun 9 22:00:29 2025 GMT
Subject: CN=5c101fbf82b4e99b237c923f240a4de8f0451933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:44:7a:c4:d7:5e:d4:98:4b:bc:aa:04:3d:
64:69:b0:43:12:62:cd:c1:f2:d2:20:98:f4:ee:81:
28:69:b6:94:70:b5:76:53:4f:e9:4b:bd:83:fe:69:
dc:cd:3d:76:d0:27:69:d7:13:08:87:1e:9b:9a:dd:
2e:c4:f3:06:89:b3:41:ba:c8:d8:35:d6:4a:5f:c4:
64:5e:e3:8a:5b:9f:3e:dc:75:a2:e3:6f:98:2a:2a:
7d:a0:7b:3f:dd:16:41:2d:90:35:70:13:71:8e:84:
dd:dc:80:2b:4b:82:69:15:cc:e5:c9:ce:5f:5f:35:
0a:3e:ed:e7:47:cf:2a:07:75:93:1b:8e:86:0c:2a:
b6:8f:f2:d3:91:a9:3b:b5:70:15:c4:5c:eb:1c:18:
66:74:e2:7e:96:2a:31:54:78:ed:1a:ad:ae:c0:c3:
19:10:b3:24:83:ad:01:2c:b2:61:c8:87:c1:67:8c:
61:c5:2e:78:6b:d9:32:cc:b7:e3:8a:47:f6:16:89:
63:8d:84:d9:34:5e:06:57:16:e0:71:04:28:2c:48:
4d:b6:45:ae:d7:a9:79:6d:4f:1b:5c:72:7d:b9:1b:
1d:bd:0b:64:36:d5:f0:66:e1:4f:00:44:5f:97:ba:
a4:73:b6:a3:08:b9:cf:d0:3e:7c:f8:cd:c7:0d:d2:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:10:1F:BF:82:B4:E9:9B:23:7C:92:3F:24:0A:4D:E8:F0:45:19:33
X509v3 Authority Key Identifier:
keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d9:ee:33:cb:97:92:c8:f9:93:73:91:b2:47:c9:45:5c:d1:
6f:c5:98:11:80:92:b9:54:05:f2:1f:1e:07:a9:ef:c8:3f:39:
22:2d:9e:6f:2c:79:44:23:28:37:cf:29:86:61:13:fb:3a:1b:
ce:7c:53:3a:f6:d9:69:4a:03:8d:b5:1a:e7:bb:23:08:bb:e4:
f3:d0:d4:86:7b:ec:fe:96:77:a1:13:70:06:a3:cb:43:46:86:
39:cf:ef:51:6d:30:ac:88:67:99:ff:61:c8:fd:32:96:07:12:
87:17:34:67:49:f1:8c:b3:31:fe:19:eb:43:b0:a9:cb:e5:e6:
39:d1:49:48:b2:64:3a:f7:b8:e4:99:8c:11:14:ab:89:6d:3d:
12:df:14:3b:28:9b:0e:2e:57:2b:fa:90:12:18:6c:87:2c:bd:
ff:08:2b:50:66:ad:bd:f4:1d:ef:56:34:02:18:47:c0:93:44:
d4:df:67:c5:02:f0:a9:e2:2f:e1:c3:1e:e2:0a:c8:eb:52:5f:
fd:34:f2:c7:f0:56:23:84:c9:27:39:a0:21:bf:a9:e1:0f:fb:
ff:51:5c:7b:61:ae:32:34:03:87:0e:a3:6b:94:5f:d7:24:a0:
0e:9e:40:6a:b9:8b:33:8b:77:d8:d1:5b:dd:59:1d:7f:f4:1d:
c5:29:65:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:21:48 2025 by rpki-client