Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
File: iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft (raw, json)
Hash identifier: DmxECeRDcW8uIKCYwhwuJR7sFkWUwjnFkpKTPYv3Des=
Subject key identifier: 33:50:C8:37:8E:08:2A:2A:70:1C:E0:7B:B5:24:84:4F:39:44:74:54
Authority key identifier: 8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
Certificate issuer: /CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Certificate serial: 01974DB27999D0875E81273E2F37242F9C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
Manifest number: 0E4E
Signing time: Sun 08 Jun 2025 04:00:31 +0000
Manifest this update: Sun 08 Jun 2025 04:00:31 +0000
Manifest next update: Mon 09 Jun 2025 04:00:31 +0000
Files and hashes: 1: 03mz0LQjzt1ORtulSs8-RgKcMnM.roa (hash: o7HH4upfGHhmSB89uCr8oSYNHbC8ZdA+S7MeD1sbYe4=)
2: 2Qr14eAD37nuU_5fo7_UeplXIWU.roa (hash: usgUNw1aFsserU4Vh7SHZUsSrOPQTJ2Wa8CALhVnFWI=)
3: XcS7NtVySUtUzIKZEZ4PM2dCvo0.roa (hash: RI3/B49k5u7aP42xJ7PCHqmPzqodpebWnjl4/ch5Tn4=)
4: iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl (hash: MDcRnSZNx4q91BJYuL8taybJ04SZ6aR9RSXOmDLMAhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:79:99:d0:87:5e:81:27:3e:2f:37:24:2f:9c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Validity
Not Before: Jun 8 04:00:31 2025 GMT
Not After : Jun 9 04:00:31 2025 GMT
Subject: CN=3350c8378e082a2a701ce07bb524844f39447454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:2f:73:0d:40:0c:e3:68:bd:2b:b4:ea:17:
22:9e:f7:75:9f:aa:f4:37:39:e0:5d:63:df:da:cb:
d6:86:55:d2:50:2e:a3:a7:bb:e2:fd:5f:a0:66:4b:
e3:44:c7:47:14:cc:ce:50:f6:22:6c:10:77:c6:a4:
0b:91:71:43:f5:dc:c2:cf:8d:85:bc:46:a6:59:58:
57:53:c5:ff:07:3a:19:9c:39:88:12:2f:2b:fa:d5:
39:8b:31:1c:38:c3:5e:8a:99:f8:64:3a:d3:a1:6b:
b3:95:c8:40:62:6d:55:67:d3:ea:1d:b4:29:3a:88:
3d:8c:1c:52:b5:f6:0b:b3:b7:39:07:04:53:48:fb:
3d:49:be:95:16:6e:18:a4:cc:31:90:92:16:e0:28:
b7:cd:57:ec:4d:f6:56:08:ff:ab:ec:40:40:6c:43:
1d:b4:38:4e:94:44:b5:75:45:96:ed:89:b3:d3:d1:
77:94:a9:45:7a:3f:78:5f:fe:37:2b:9c:c6:04:aa:
16:29:05:bb:68:99:c5:21:07:61:8d:d3:27:f5:5a:
d9:bf:b0:39:4d:ac:37:4e:dc:08:14:54:f2:df:d0:
13:bd:a3:1f:27:85:63:57:07:ed:a5:cf:34:c7:94:
82:ac:59:ec:ce:94:dd:9e:e5:0c:e4:c4:55:b4:8e:
37:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:50:C8:37:8E:08:2A:2A:70:1C:E0:7B:B5:24:84:4F:39:44:74:54
X509v3 Authority Key Identifier:
keyid:8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6f:c4:cc:59:c8:90:2c:0f:4c:5c:c9:ba:77:a6:11:87:be:
15:e6:1a:f9:86:c9:10:7d:48:61:cb:82:89:db:ec:8e:38:f2:
3b:5a:1b:6f:1d:7a:19:79:c8:83:a9:06:04:a2:8c:62:0b:22:
da:5a:a3:f1:d4:0d:34:a4:6c:86:fb:14:d2:6b:9f:fc:33:fd:
62:27:6e:8e:c0:d0:4e:24:d0:6f:90:e8:d3:99:04:6e:6f:a9:
a5:55:4a:79:81:06:2d:9a:d5:16:3e:1e:06:59:bf:28:52:ea:
66:03:a6:14:10:1a:3e:1c:f2:0a:8c:2f:51:e1:6b:e7:05:c9:
f3:2f:e5:76:38:26:75:5f:63:38:d1:35:78:e8:10:26:bb:a8:
49:09:2b:8d:b3:31:4a:91:30:bb:71:3a:e1:2a:ef:de:48:ff:
70:a8:a4:19:ca:af:6b:1c:16:6b:3e:47:a2:5e:3b:06:ce:83:
c7:8f:83:41:d2:76:0b:03:ca:4e:61:56:0a:79:cc:02:96:09:
bd:fd:4d:3a:f2:f9:96:73:ca:22:7f:e2:6c:ae:f8:cb:60:93:
d5:b8:b2:68:92:9b:76:57:58:75:46:85:4a:5e:aa:1f:1b:fe:
5e:fd:81:d3:24:47:0f:0e:c3:b0:e7:74:1e:d9:0a:5b:ae:2f:
c2:06:db:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:21:25 2025 by rpki-client