Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier: ZKVaIqmolKT6Fsp2xsnrbyH2+nc7V8EplEIYVYVp3Bs=
Subject key identifier: B5:3E:19:12:84:92:6E:24:A6:8E:9A:FF:3B:D4:34:A3:AA:DA:79:98
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial: 019748FA59B66DA4EEE7486E262E6815E975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 06:00:55 +0000
Manifest this update: Sat 07 Jun 2025 06:00:55 +0000
Manifest next update: Sun 08 Jun 2025 06:00:55 +0000
Files and hashes: 1: 2JOqb_FcM3JCaikWzh1QzLM3NNs.roa (hash: isQtSQoVI4VnIJhK4p6fvX5w7lFtKPVqkwJW/rfKCwA=)
2: KkqNZ54Qewj5mCBLo3rtzCSFt7g.roa (hash: Rbv/KvRW9C13yYdCBXyUxqLUAuWNRC3szrxFy+NiiA8=)
3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: V5FGLX7FzlGpq1Wdm8g6Fcz6nJRPRg2nbrwV4H9zVNs=)
4: soZKqGzihNQNfxzcrDh_Qn-1Tnw.roa (hash: +H581vOHkrLuu+UEmJR0K8H+S0wh9yACSCN32HI4jio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:59:b6:6d:a4:ee:e7:48:6e:26:2e:68:15:e9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
Validity
Not Before: Jun 7 06:00:55 2025 GMT
Not After : Jun 8 06:00:55 2025 GMT
Subject: CN=b53e191284926e24a68e9aff3bd434a3aada7998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:25:b9:66:28:58:21:a2:1e:28:b9:8c:4f:e2:
15:87:8d:d2:2f:8c:7f:a0:b9:ce:33:7c:58:a2:6b:
6e:d7:15:8f:d6:67:0a:5a:db:49:79:75:da:37:2d:
a2:e3:64:9c:bc:92:cf:8a:4b:95:70:6e:b5:bd:61:
91:99:f3:9a:ea:39:c5:97:25:2d:be:6e:ca:bf:ef:
13:2b:19:45:4a:97:82:62:75:39:df:32:9c:53:af:
9e:47:23:36:91:57:07:12:da:cd:06:da:50:b0:6a:
d8:57:28:5c:ce:29:ee:84:05:21:73:be:0c:82:ca:
23:2a:17:f7:7c:8f:a5:eb:68:8f:49:92:7c:64:a9:
8d:5d:86:39:b2:b5:d5:7b:95:a9:5d:22:4d:bb:59:
57:26:c9:7f:6c:b4:88:35:bc:62:ba:de:1d:e7:dd:
28:5b:6a:1c:fe:e4:a6:46:ab:4b:2b:3e:28:4b:09:
b3:64:8f:61:04:10:8b:57:1e:20:d5:57:17:7e:25:
7d:bb:4f:d9:d7:96:56:dc:e2:d9:11:80:ae:e4:38:
9f:2e:e1:6d:11:5c:1f:2f:da:f1:2c:4b:6c:9b:32:
f7:93:31:ac:24:9c:02:8f:af:f6:f3:0f:38:09:ac:
3b:b4:00:b8:18:6b:91:42:f8:79:6b:c7:83:8e:07:
eb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3E:19:12:84:92:6E:24:A6:8E:9A:FF:3B:D4:34:A3:AA:DA:79:98
X509v3 Authority Key Identifier:
keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ae:10:2c:64:58:f4:68:60:b3:20:47:a1:fe:fa:16:da:7c:
0f:12:42:1e:61:13:5b:54:0f:df:2f:0e:c4:59:39:41:db:76:
3a:53:46:6a:6e:c9:1d:ed:33:14:0c:86:b9:c0:45:47:1a:e8:
dd:b7:4d:f5:da:5d:50:46:79:c6:5a:ab:bc:00:ef:00:a4:d2:
de:20:49:19:30:1a:d0:1c:c0:f7:3d:a6:7d:46:b5:9a:77:75:
ea:76:80:54:71:d7:77:51:0f:8c:72:4f:60:c5:72:4c:91:95:
89:a1:e4:a6:de:ec:f0:c2:99:e9:75:a7:f2:cb:f9:f6:2c:62:
a4:ed:5d:c5:5c:04:b0:55:1a:ff:ae:7f:21:04:3a:0d:59:4f:
81:70:30:0a:24:41:84:fb:fe:f4:d5:89:e4:88:aa:e6:1e:f0:
98:60:e4:ff:2e:71:6e:50:fc:48:7c:8b:b5:c7:8b:03:76:2e:
c8:b2:fc:0b:4d:6e:8d:5e:6a:4e:40:bd:b2:12:02:f0:c7:47:
49:90:5d:53:7f:66:2a:72:59:4b:c6:d4:af:e9:6d:3e:72:95:
05:39:eb:b5:b1:83:b1:e8:53:09:84:e8:1a:ca:b8:fe:f9:f8:
92:cc:e7:99:d3:30:ec:79:56:2f:3b:0a:a2:3a:32:5a:70:df:
77:ce:89:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:34:09 2025 by rpki-client