Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
File: iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft (raw, json)
Hash identifier: aCxSpWHXUaQRo2UlS4yxe2tZLButiYCNYuFYYk1yS2U=
Subject key identifier: 9E:F3:32:05:36:BA:CB:6D:CD:21:FE:CF:4C:CF:6D:77:9B:7A:CE:37
Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
Certificate issuer: /CN=8968883765549991d7ff376126d58a909a14b8f1
Certificate serial: 01975347579129420A6400F4233B7ACBB135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
Manifest number: 01A8
Signing time: Mon 09 Jun 2025 06:01:13 +0000
Manifest this update: Mon 09 Jun 2025 06:01:13 +0000
Manifest next update: Tue 10 Jun 2025 06:01:13 +0000
Files and hashes: 1: OFotEhQS5D75BLXwwqIZG_YPaGM.roa (hash: DFc7srYmWSrbDIWTrg0cPVEONFNYLjz8/fNoPyoYWxo=)
2: iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl (hash: 0wttwMJ49mTFip3eC/rbIGAikgQyo5pBPmYO2NwoNZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:47:57:91:29:42:0a:64:00:f4:23:3b:7a:cb:b1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1
Validity
Not Before: Jun 9 06:01:13 2025 GMT
Not After : Jun 10 06:01:13 2025 GMT
Subject: CN=9ef3320536bacb6dcd21fecf4ccf6d779b7ace37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:4a:a0:5f:43:1b:49:0d:16:21:7e:00:c4:
f5:6a:58:df:96:6d:51:6c:e4:0b:aa:fd:57:7a:08:
b3:3e:b5:81:34:72:6a:5d:91:bb:c6:04:7d:31:01:
0e:66:f7:c0:fa:6c:c6:4c:3a:cd:bc:47:80:fa:f5:
c2:7c:ce:69:91:76:9f:21:7a:1d:99:a9:53:ae:8a:
c8:82:40:60:8d:b1:33:8b:ff:c9:f1:94:97:8f:f2:
d6:a1:9d:41:45:a5:a1:05:f3:6c:25:30:0e:1b:42:
89:c4:a2:ae:69:86:63:10:30:1c:4a:ea:8f:f7:f3:
0e:bf:26:91:72:86:cf:6a:9a:1b:15:d0:62:5f:af:
b6:bc:87:13:7b:4a:46:ee:19:b7:98:8f:a6:4f:ae:
62:84:5e:e2:da:9d:2a:91:fd:ed:d9:25:8d:a3:d3:
5b:a1:f0:7c:0c:0c:42:4f:20:ac:c0:16:5f:9a:28:
f1:ea:b0:89:a7:6c:3c:0f:e0:b1:6c:26:28:a6:5d:
f1:ff:d5:85:44:5e:dc:7f:8d:0f:3a:42:83:df:20:
bd:d5:e4:aa:84:fc:53:74:6e:cd:ad:dc:cb:31:c1:
14:e6:5b:5f:25:48:22:d6:b1:67:05:4f:d6:6a:ff:
e2:3d:ec:9c:11:6c:ef:68:cd:ab:4a:44:d1:2d:20:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F3:32:05:36:BA:CB:6D:CD:21:FE:CF:4C:CF:6D:77:9B:7A:CE:37
X509v3 Authority Key Identifier:
keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:16:4f:c7:7a:6a:22:72:e3:e1:0e:ac:f2:a3:da:e7:02:1b:
d3:a9:b2:75:e0:72:b1:a1:02:7c:35:a6:73:31:21:e5:02:ec:
e4:b3:0f:85:64:f5:9f:4a:90:61:89:dd:ed:38:34:6e:c2:78:
0e:52:a6:e1:e3:b1:80:05:ea:5d:d1:bb:0b:4d:09:c0:22:e3:
2c:cf:a1:2d:30:d0:7f:8f:59:3d:72:5c:01:54:03:a9:d1:36:
89:35:66:f5:7c:61:f0:e7:eb:4a:c6:51:f1:b0:a6:07:ad:3c:
67:4a:55:ac:81:24:03:b1:bf:8a:0b:15:70:91:33:f5:f2:d4:
f6:c4:2f:79:74:f3:6c:9f:42:7f:2e:5d:69:35:4a:cd:4f:3a:
05:78:e7:05:61:1f:10:31:ba:4c:43:17:68:80:ca:3f:d7:7a:
e8:f5:bd:1a:81:70:0a:50:aa:b8:2c:c3:2a:39:ca:ef:4a:07:
c4:c4:89:d5:27:2a:51:79:68:b3:7b:62:3c:d9:46:9b:4f:0f:
45:ea:7d:49:f6:43:0d:7d:a2:ea:ca:05:c3:e8:3b:e3:f2:84:
9d:17:67:3f:1f:9c:ce:42:24:83:be:42:2c:bb:62:d6:d9:64:
78:f6:57:82:35:fb:a3:b4:a2:b9:98:38:c8:50:82:3e:35:2a:
18:61:66:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:38:31 2025 by rpki-client