Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
File: iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft (raw, json)
Hash identifier: qoezfMWhM3kC2XV+W+I34S3pmPThQUHziD9HW/+AWVc=
Subject key identifier: 25:01:BA:B8:EA:37:B4:A0:AC:55:76:11:33:A9:A8:83:3C:F5:F1:02
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial: 01974C9FB0D38129429E159648AFAF9BDAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 23:00:23 +0000
Manifest this update: Sat 07 Jun 2025 23:00:23 +0000
Manifest next update: Sun 08 Jun 2025 23:00:23 +0000
Files and hashes: 1: f3yhbMEZs7I1gQ_x-WS9JokM5lk.roa (hash: xqftVmU39BBrdEog4IYR5U/f0pT7cwZITaktIflO1FQ=)
2: iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl (hash: 1MXVzgfnDEpfR21Fg6A6NtmVQkmvSS7hfZm53opnJTs=)
3: t3t-pfr4z9GKajIg-Z7_EPV6sNk.roa (hash: uoY/pW5jXoKIZBICE3itvMsyp7LXbbd5XR575s2v/qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:b0:d3:81:29:42:9e:15:96:48:af:af:9b:da:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
Validity
Not Before: Jun 7 23:00:23 2025 GMT
Not After : Jun 8 23:00:23 2025 GMT
Subject: CN=2501bab8ea37b4a0ac55761133a9a8833cf5f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:31:76:a0:cb:a2:9b:ab:bc:a9:ee:1a:f2:4a:
90:1d:ea:f1:9e:fb:ab:2b:c3:76:7c:51:7b:be:54:
1b:97:d6:01:2c:8b:0a:5e:64:c8:7f:00:c3:f8:dc:
86:d0:14:99:36:f2:3f:ff:cc:eb:2f:c2:a4:b4:fd:
f8:74:44:5f:74:c7:c6:6d:d8:a9:75:34:0f:c8:8b:
7a:cb:5d:0b:e7:f8:50:55:a2:9e:2f:5f:3d:3e:25:
ff:5a:04:2f:e7:d3:17:4c:4f:3e:6d:5a:34:9a:65:
bd:fe:db:48:ec:32:28:17:ba:5b:ff:46:ad:00:e6:
10:6f:65:d7:4f:d0:db:d4:f9:d4:f8:4a:7e:87:94:
7e:11:bf:4e:cc:d5:dc:78:6f:e3:75:40:07:4a:e0:
55:5a:79:7b:ba:18:95:2c:df:cd:e0:40:cf:ca:2d:
d9:69:2d:06:0c:e6:27:f4:b1:7e:88:aa:11:7e:06:
9f:47:ee:c2:22:68:80:a1:91:8a:31:70:bc:60:55:
e3:02:5c:94:e4:5f:99:94:92:b7:4d:32:3c:c2:b3:
ab:41:60:6c:06:96:4b:7a:8e:a1:78:a2:a3:25:7e:
77:e8:89:c7:ac:b5:dd:6c:b9:40:fa:2b:a9:63:a4:
de:37:ae:9a:dc:a0:27:2d:db:a0:94:81:b8:c2:e7:
07:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:BA:B8:EA:37:B4:A0:AC:55:76:11:33:A9:A8:83:3C:F5:F1:02
X509v3 Authority Key Identifier:
keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6a:8e:13:3f:03:5f:8d:56:b5:0c:b1:1a:f4:5c:58:2d:6d:
a9:d8:f8:16:77:db:4d:4b:dd:3d:8e:62:4c:8f:dd:b4:b4:e2:
a8:f2:f6:1f:50:87:9b:7f:3d:50:e1:d5:34:6a:c7:ea:2f:3f:
77:20:32:a3:0c:a4:5c:a4:d2:91:55:6f:c5:69:c5:0a:87:10:
02:ba:db:c6:12:c7:4b:09:42:67:eb:ec:e2:25:e4:e0:4f:d2:
f8:62:a0:88:6f:03:46:e4:16:20:53:1e:b4:9a:17:dc:02:ac:
db:4b:27:bc:b0:7c:c5:42:5c:36:0b:25:a2:c9:8f:f7:0a:d2:
6a:e6:64:a4:17:3e:77:98:90:3a:72:ab:6a:4a:a5:ce:37:37:
b2:6c:97:1f:49:2d:56:e2:73:0e:48:7c:ec:c0:1f:9d:25:b3:
b7:22:1f:95:43:c6:e0:22:d0:c6:7c:bb:07:e7:26:7f:97:d4:
a9:ad:34:9d:c4:83:4a:1d:3e:1c:6c:a6:f5:5b:40:d7:7e:07:
ca:f6:43:6b:37:c6:44:9a:d1:84:97:45:fe:9e:5f:9f:a7:ab:
ca:50:81:3e:53:0b:90:bd:7c:5b:97:7e:43:fc:90:20:56:e1:
85:96:07:3f:7e:b6:f7:4a:96:62:37:00:cf:0d:78:20:80:c2:
32:f1:6b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:09:09 2025 by rpki-client