Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
File: iaQ4np9NXMjEhtaCK-8fRO987UI.mft (raw, json)
Hash identifier: P/JBr7WQ73vkjoJ19MXA/vPrIUTW6YutjHFC+jHok8g=
Subject key identifier: 30:2D:6F:0E:8C:C6:8F:39:A8:3D:F4:68:BC:28:3F:2E:C9:D9:D6:40
Authority key identifier: 89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
Certificate issuer: /CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Certificate serial: 0197470C1A478F005F1988830E0249FE05A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
Manifest number: 89
Signing time: Fri 06 Jun 2025 21:01:04 +0000
Manifest this update: Fri 06 Jun 2025 21:01:04 +0000
Manifest next update: Sat 07 Jun 2025 21:01:04 +0000
Files and hashes: 1: 8ZpplWrhbVda_aSYHx2pbbAdBWI.roa (hash: KC0Osg8WEd8lVzUhmWMq6YDl/x9/ZL2h5Pd6qvq9PbE=)
2: iaQ4np9NXMjEhtaCK-8fRO987UI.crl (hash: w1awVrffQXY2BxDlBdgiWXmYVQOdWmO780z2ILy7X2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:1a:47:8f:00:5f:19:88:83:0e:02:49:fe:05:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Validity
Not Before: Jun 6 21:01:04 2025 GMT
Not After : Jun 7 21:01:04 2025 GMT
Subject: CN=302d6f0e8cc68f39a83df468bc283f2ec9d9d640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:53:f6:b7:c2:65:a1:30:fb:3e:e2:a6:ca:
86:35:e7:f8:4b:27:83:dd:34:da:fe:cc:81:48:c7:
37:a6:60:fc:69:99:70:25:51:54:f8:06:ef:4d:4a:
c5:21:3c:c0:05:0e:d1:78:9f:92:2b:16:e9:db:cf:
c7:c0:51:f9:ab:57:88:52:3a:71:bd:9a:2f:3f:c6:
5d:79:a0:35:97:8d:98:74:df:2f:a1:71:dd:c9:fd:
27:1e:f8:70:5f:8d:38:6e:90:d0:d8:5d:6d:f7:eb:
a5:1d:21:1c:92:97:5b:a7:20:08:6e:36:38:7f:db:
d8:f7:f6:e3:0c:ee:d1:53:b0:82:a1:c0:1a:ed:dc:
86:cc:15:0a:e5:f0:60:1a:f4:e9:8a:45:a4:f8:d3:
e4:61:06:5e:b9:48:c2:b7:4f:6d:4b:aa:2a:dc:14:
57:3e:db:4e:51:d0:5e:95:f6:51:5d:e2:80:2e:ad:
de:25:42:20:eb:cd:10:94:e7:b3:b7:59:76:4a:3c:
73:8b:26:30:dc:8b:72:a8:bf:ff:07:1a:1a:f0:03:
7e:44:ff:ed:40:6b:26:e9:f5:40:14:8d:4b:78:86:
d8:67:fb:07:c4:af:05:bb:b6:9b:e6:9e:e4:37:08:
bc:7c:5c:21:99:65:8e:2e:52:3f:eb:09:25:00:0f:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2D:6F:0E:8C:C6:8F:39:A8:3D:F4:68:BC:28:3F:2E:C9:D9:D6:40
X509v3 Authority Key Identifier:
keyid:89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8f:22:83:b2:d7:62:de:77:51:2d:a5:e9:05:e5:33:ad:5d:
1f:73:29:98:6a:1e:0a:60:34:8c:cf:49:ca:29:68:0c:0e:1d:
5b:4b:fb:99:c5:cf:e8:22:1f:1b:2c:10:e2:ce:8f:6e:f1:85:
f9:51:08:66:29:76:ad:24:0d:9a:f2:5b:c8:d2:be:40:19:a6:
88:71:68:8c:89:07:57:39:c1:3f:e9:49:bb:ca:28:6d:f9:96:
cf:c9:2c:da:bc:f1:c2:ce:5a:f8:84:af:97:60:b7:4c:c1:89:
32:57:f2:dd:09:e1:d6:b5:79:ce:d4:4b:7f:83:e5:30:ea:9c:
3e:51:e8:06:36:ff:f5:cf:60:88:f3:45:b7:96:df:e2:27:1c:
9e:1f:8f:d4:10:63:d2:ec:45:d3:62:f8:23:5d:9d:72:c5:e2:
d4:44:2c:0c:41:21:50:82:10:c2:ae:f7:9e:54:5d:b3:e4:0a:
17:51:f2:ed:74:80:57:b2:7b:94:fa:50:ff:49:61:09:3c:01:
2e:46:8e:b2:59:b5:64:f4:af:bf:80:76:16:47:0e:22:4d:12:
66:4e:e6:29:0f:df:2d:b6:11:73:47:79:13:8e:6b:5e:53:93:
26:50:49:b2:81:44:50:24:a8:45:d0:94:41:3b:ee:3d:fd:5c:
98:a4:6d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:27 2025 by rpki-client