Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
File: iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft (raw, json)
Hash identifier: +GAqwJWSKPYhqbwOG0r+qyQP8R+B7ZRjjOa7viJiS78=
Subject key identifier: 64:FF:F5:0A:22:69:C1:01:0B:9F:9D:B2:45:5C:76:87:D2:C1:60:3C
Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Certificate issuer: /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Certificate serial: 01974AE82742E7E5A826C76487B85AB61A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 15:00:17 +0000
Manifest this update: Sat 07 Jun 2025 15:00:17 +0000
Manifest next update: Sun 08 Jun 2025 15:00:17 +0000
Files and hashes: 1: RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa (hash: pKnXAopaFCsi1rLxZMLLXoTv9xoOBoXWRjgeegBslqw=)
2: iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl (hash: j0GAzyqEPVWJJgYRGXeQnijjFJxwO3AXIjweFXrAO5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:27:42:e7:e5:a8:26:c7:64:87:b8:5a:b6:1a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Validity
Not Before: Jun 7 15:00:17 2025 GMT
Not After : Jun 8 15:00:17 2025 GMT
Subject: CN=64fff50a2269c1010b9f9db2455c7687d2c1603c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:54:1c:c0:62:e7:45:90:91:e4:ea:8d:d1:
c1:c8:08:8d:05:cf:62:ae:d3:c5:32:13:92:51:a7:
ec:03:3b:e6:b2:ca:b8:07:de:0e:91:d4:60:59:7b:
fc:0d:5a:ad:ef:b9:02:73:95:5a:63:d0:3e:d1:f6:
c6:1d:42:b6:1b:99:73:26:21:ac:c2:53:c6:a9:00:
7e:fd:eb:b3:d4:f5:33:06:b7:38:a4:da:ff:e7:10:
9b:3c:4d:5f:1e:d0:b2:b9:37:95:c8:d6:2f:f0:dd:
ae:7b:0b:1b:26:9a:4d:77:3e:06:80:50:62:9d:c5:
d3:3b:45:9f:52:70:46:1b:49:dc:e6:26:71:eb:c4:
69:a4:02:98:c2:87:94:eb:c9:22:9f:a0:88:68:75:
55:c6:6b:7d:81:7e:40:69:cc:ca:6c:01:94:2d:91:
8c:70:23:df:3a:35:d2:c4:35:f5:38:98:a2:5b:83:
28:39:8a:61:d0:35:c2:6d:1f:b4:db:85:f5:68:2b:
bf:8a:23:3f:03:1a:e5:44:0b:a2:c8:9c:d9:0e:ff:
d7:43:22:7b:42:46:9b:9a:45:55:25:28:c7:2e:3b:
be:17:71:98:da:1e:a3:3d:c4:8f:ea:6e:97:81:ce:
e6:ae:3d:9a:22:2c:68:b5:4d:de:cb:de:1a:37:fd:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FF:F5:0A:22:69:C1:01:0B:9F:9D:B2:45:5C:76:87:D2:C1:60:3C
X509v3 Authority Key Identifier:
keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:45:dc:0f:b6:af:9c:a5:de:5c:d0:9c:20:02:df:3c:28:e3:
ee:1c:1e:87:ff:1a:5f:a3:89:6f:36:64:5b:fe:d0:be:bc:30:
1a:ab:2f:b3:92:4d:92:1b:19:02:1b:ba:d8:85:1e:88:b3:af:
77:ab:bb:93:b0:fe:eb:22:c5:5e:20:02:00:cc:94:da:e4:b5:
43:da:db:0d:ce:4d:22:05:56:5c:db:4f:6d:2b:95:2a:5e:23:
fa:19:d7:93:49:c7:80:9f:be:68:b6:fd:31:01:1e:6d:85:c2:
b5:7b:8d:e0:ec:85:67:7e:1a:5f:d0:1b:b1:23:4a:2a:62:c6:
13:cd:cc:fd:94:cf:a0:8a:a0:ec:ba:a4:f0:8b:3d:bd:d7:0e:
1d:21:4a:e6:09:8c:ba:6a:e8:e7:27:92:e7:cd:80:d1:e0:32:
b3:1e:c3:bf:31:15:e6:ff:a4:81:88:e2:8a:98:de:c7:fc:2e:
7b:c7:de:72:8d:5b:e9:01:9c:53:0a:fd:b1:9a:e6:68:10:70:
02:1b:c7:42:9a:e7:6e:bf:89:b1:dc:36:b8:e7:b2:07:dd:f2:
cb:1a:38:3f:7d:80:05:a6:26:9f:a7:2f:9b:30:61:59:2b:a9:
14:09:e9:3f:20:15:7e:ce:95:cb:9f:9c:17:60:73:db:58:d8:
06:ea:64:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:27:25 2025 by rpki-client