Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File: idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier: RDtHvmld3p64vCVbW5edmct7TYqBCHcojftd2VP9eYw=
Subject key identifier: 19:FF:7D:72:13:23:57:C0:39:73:D1:E7:9A:A6:A6:13:A3:27:5E:AD
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 01974742EF8EA3CE7FF30AB5B3A5E72C2C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number: 15AA
Signing time: Fri 06 Jun 2025 22:00:58 +0000
Manifest this update: Fri 06 Jun 2025 22:00:58 +0000
Manifest next update: Sat 07 Jun 2025 22:00:58 +0000
Files and hashes: 1: NiGYqg5TAswBXGUoDDk3K-vSfzg.roa (hash: oBryaxq11NqGZi9VWM48AWdrC2u99cuTtHQY7Z60FIs=)
2: WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa (hash: OqboybhTqeUl9b9SecOseaZfDnk1cvhEpGeclcmitv4=)
3: XfXS8ijvqtsMHkla-Me1RcI7IwA.roa (hash: 2RtkbeEIEVw4twW1PRZ/J8F/rTi3ZGd/QdB8lfuZFqE=)
4: bjCT3AVcMSsUvzlUV22vDpDgm88.roa (hash: x4ngTz88Z2Xqe2E3hfhNz2+VZin5gGJSvgjTiP2om64=)
5: fkq-oahmsSqrVUTtF-STfDckmnU.roa (hash: mVtrIUuQCxsrmw0YepuR3MHRKtv6BfBxn8f0qa7KMLk=)
6: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: kSnVXN6Gn+oYWlO2WDhV+QfzZ1GHwMOaOaZ5pR/5QLo=)
7: u7Bic-zzMP1Iys3M73ZkiMffy74.roa (hash: PFfJrw/TlR3YpR2p/4mJqLKX4yyUo6fGvlNS1uayrpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:ef:8e:a3:ce:7f:f3:0a:b5:b3:a5:e7:2c:2c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Jun 6 22:00:58 2025 GMT
Not After : Jun 7 22:00:58 2025 GMT
Subject: CN=19ff7d72132357c03973d1e79aa6a613a3275ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:68:5d:c0:24:2e:e5:0c:25:a9:c0:9b:91:
54:48:92:f8:43:9f:45:66:2b:19:c5:b9:51:e1:01:
27:0a:a7:3b:c8:f2:2c:b1:32:dc:2c:07:de:8a:76:
2b:cd:d0:2c:53:15:39:a7:99:80:94:7a:df:9c:41:
9c:3c:8a:f3:27:f7:97:1a:dd:88:09:66:35:8b:84:
2e:5b:7a:49:8d:25:4d:97:02:0c:e2:f5:5f:0d:bf:
db:50:af:6b:60:f7:0c:e8:55:64:a3:8d:79:43:78:
cd:fe:79:da:2b:45:35:ef:d9:4f:59:f2:f4:29:b0:
81:54:8a:09:52:c6:c6:fa:8f:40:18:79:3f:88:7d:
38:e3:63:d7:a4:03:3d:fa:5c:e9:6a:53:7e:ec:ac:
56:7d:86:df:19:a0:b6:3a:e2:39:59:70:fa:00:19:
0b:8a:19:34:cc:1c:43:f7:ab:42:02:e4:31:ac:89:
94:43:2a:44:37:6d:48:1e:41:e9:91:7c:45:f0:ce:
db:9f:6a:5c:56:9b:1f:f1:bd:c2:da:66:b6:a4:12:
3f:ff:1e:ca:ee:49:30:c4:0d:6e:0d:97:9c:87:59:
a1:3c:bf:60:27:5f:8e:ca:e5:8c:da:1a:21:f3:7d:
39:79:49:3a:f0:d1:b5:e8:51:83:dc:32:21:d4:39:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FF:7D:72:13:23:57:C0:39:73:D1:E7:9A:A6:A6:13:A3:27:5E:AD
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:33:1d:a4:f2:a5:40:64:c3:27:ea:8a:37:d7:32:5c:07:f5:
5e:0e:18:71:f6:ca:2f:8b:94:e1:e7:e4:b1:09:d0:db:35:68:
25:f3:48:97:30:a0:38:db:c3:09:6b:86:67:fa:b9:67:f8:9c:
b6:d4:84:aa:89:1b:8f:76:85:28:b7:b5:5a:5b:90:27:75:12:
0f:9e:36:f9:cb:f7:36:62:15:59:26:fc:84:21:e8:57:39:28:
00:9b:35:c5:e2:d3:e1:bf:2c:ad:f0:d4:63:4d:83:3f:39:50:
f6:b8:cc:0b:0b:4c:f4:cb:73:bb:90:0d:e0:22:30:24:2f:37:
6f:38:d8:e8:78:94:76:2a:6a:48:ce:78:6e:08:bd:45:e1:8e:
7f:62:26:87:a6:b7:0f:5c:41:9d:bd:28:ce:89:79:bf:c5:74:
61:13:07:9e:2a:e2:02:76:08:c5:61:d2:66:34:2a:cc:93:a0:
b7:6f:04:09:c5:b8:b2:5b:0b:c6:7e:30:4a:62:86:b9:b7:b3:
56:96:ad:19:83:71:71:e7:71:56:87:7e:43:20:2c:23:f1:d4:
2e:7e:09:a2:9a:ed:f1:27:df:bd:34:f7:d2:f7:10:ef:0e:1a:
7e:7e:8b:24:d4:16:d4:98:f9:8c:77:ef:3e:59:4e:8c:b3:88:
55:f7:a0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:28:48 2025 by rpki-client