
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
File: iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json)
Hash identifier: w6MfUzmWnRILA2vfutkmcP/p0VF74CdZH3cyDhpVVH8=
Subject key identifier: 04:FA:CB:B2:90:F5:AD:97:63:96:2C:8B:43:02:66:07:08:57:B3:67
Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Certificate issuer: /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Certificate serial: 019758DB5EDE339588510806775BB98632BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
Manifest number: 089C
Signing time: Tue 10 Jun 2025 08:01:01 +0000
Manifest this update: Tue 10 Jun 2025 08:01:01 +0000
Manifest next update: Wed 11 Jun 2025 08:01:01 +0000
Files and hashes: 1: J2gFJxTXec_tCl5fYmT5ueu90dA.roa (hash: eqh0jr48WZnOgc9VcsakSv2fxPv1f923UQBSwi0u554=)
2: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: lwv/vqA1MsHvCIABeCXbBPV7wu4A+3kaWTYJZNqc37Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:db:5e:de:33:95:88:51:08:06:77:5b:b9:86:32:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Validity
Not Before: Jun 10 08:01:01 2025 GMT
Not After : Jun 11 08:01:01 2025 GMT
Subject: CN=04facbb290f5ad9763962c8b430266070857b367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:a8:00:23:81:30:9a:71:c7:7e:f6:06:f8:
c0:92:11:b9:d9:b5:b6:ce:31:56:00:74:c5:c6:9d:
31:1a:64:08:2d:75:4d:1b:75:07:f7:40:a4:95:26:
1c:34:8c:c2:1c:08:ba:ab:c0:44:83:74:39:43:e6:
bc:4a:28:54:92:d0:bc:50:01:90:e8:9f:04:95:c4:
33:18:3d:ab:8e:e6:9e:02:e0:5d:ae:c2:08:73:92:
af:25:a3:92:e4:e5:b4:dd:7d:d0:88:50:e6:d6:e2:
62:a4:41:67:c4:6b:c3:b8:99:72:6c:14:ab:dd:f6:
cb:84:ac:f9:aa:4a:d5:7c:3a:4d:0e:96:00:ea:73:
78:a3:fc:0a:64:54:69:7d:e9:99:b9:a2:38:b0:b3:
d7:32:1c:fb:1d:be:90:fb:8e:7a:7d:a6:fe:c7:ab:
6f:e5:11:80:84:92:70:63:08:f8:e2:3f:42:dc:dc:
43:4d:2b:67:fc:fc:2a:02:80:01:9d:25:ed:40:de:
07:54:de:e3:e1:e5:9c:ba:9e:54:9b:ec:fc:28:d7:
3d:90:64:aa:69:ad:c9:25:87:6d:4a:75:5b:97:8a:
dd:25:81:da:22:91:d2:d2:d4:e4:6b:44:70:ef:c2:
15:f8:a6:70:60:a4:62:78:05:5f:d6:57:47:8d:da:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FA:CB:B2:90:F5:AD:97:63:96:2C:8B:43:02:66:07:08:57:B3:67
X509v3 Authority Key Identifier:
keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1b:a2:98:3b:6b:09:f5:b6:57:45:64:f8:6e:e4:37:06:2a:
23:1d:24:e6:ee:80:42:29:70:cf:e0:e0:0f:aa:cb:72:ea:67:
cc:1e:fa:d2:fd:55:8f:6f:c4:ea:97:f5:f9:2a:e6:cf:ad:01:
69:23:14:52:df:92:17:6e:61:c1:ca:27:34:b1:98:4e:85:f2:
d9:5a:16:2b:58:33:25:1b:a6:10:1d:90:0e:3d:94:cd:1d:74:
33:15:a2:af:7c:53:21:d6:48:f1:b8:01:8a:95:c1:6c:68:25:
6b:38:74:93:ef:fb:09:47:e4:a2:fb:99:95:e5:06:b5:7e:09:
5e:fe:c9:71:62:90:09:4a:28:88:31:7b:ee:c7:05:a2:1c:94:
70:43:f6:c7:ac:02:73:5d:22:eb:be:3a:55:de:07:0e:ee:7b:
ef:71:c9:41:7f:04:87:38:1e:65:15:d9:36:8f:07:4d:1a:ad:
99:9e:5a:ca:9d:60:fe:07:ff:4c:28:16:90:15:af:ac:f7:79:
a2:dd:eb:95:62:c4:79:4d:3d:d5:82:53:d7:6c:8d:41:97:5e:
72:45:10:cf:08:18:f7:3d:a1:cc:9d:ca:a9:ae:86:81:34:14:
97:be:e4:91:08:eb:27:02:00:ed:f4:51:62:46:69:d0:72:86:
e8:3e:b0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:18:57 2025 by rpki-client