Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
File: iib0dtYIYlrR_gblK5dKn2bwFBo.mft (raw, json)
Hash identifier: Z//G0xNMlfHgX2l/UmDd4Zg1QfNtesvWhbDGK8gYU3I=
Subject key identifier: 65:6E:21:2B:44:48:7F:51:F9:30:22:9C:AA:0D:24:7C:60:34:5D:9B
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial: 019748C364E0EC99FE0A95C3996CFDA151C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 05:00:54 +0000
Manifest this update: Sat 07 Jun 2025 05:00:54 +0000
Manifest next update: Sun 08 Jun 2025 05:00:54 +0000
Files and hashes: 1: VGVyrg_KWe6qJVf2EFW5rg282l8.roa (hash: no1Xp/fKJZHQHLgUjaAU6HFgcxae88YxDTT3wdaVfTw=)
2: iib0dtYIYlrR_gblK5dKn2bwFBo.crl (hash: Dst89a/aX8lx850wCk1ANCPgJNLmtpEjqdWQceQpiWo=)
3: jmjQM-Af7YixW0lhj7IQRUe7D0c.roa (hash: Tb54ESX/F3Guxq8pdf9XF/gmXcXHx+T4/bKA3b9RF5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:64:e0:ec:99:fe:0a:95:c3:99:6c:fd:a1:51:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Validity
Not Before: Jun 7 05:00:54 2025 GMT
Not After : Jun 8 05:00:54 2025 GMT
Subject: CN=656e212b44487f51f930229caa0d247c60345d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a0:b0:26:68:dd:cb:b1:6d:54:b0:b0:84:e9:
77:4d:d9:6c:97:d4:cc:fe:0c:14:76:60:f5:6c:8d:
44:26:ea:9b:41:77:5a:34:68:e8:e7:a1:da:f7:4a:
c7:e2:36:f3:2d:3a:36:9c:c9:4b:89:58:e2:50:52:
b8:ee:0b:a5:37:94:80:4a:5d:38:d0:c8:05:4e:b9:
25:00:29:95:b8:f9:8c:2c:eb:16:5b:c1:31:58:e2:
d3:8e:b6:2b:5c:53:bd:26:4a:7c:9b:f6:87:3c:ff:
e9:7a:10:9c:ea:3a:6e:b8:b3:e7:95:ab:31:88:ec:
40:17:4c:17:73:23:a9:43:14:3e:19:00:0b:5c:04:
d0:93:67:8f:0b:d8:0c:7b:02:10:39:af:35:bb:c3:
cc:8d:1a:a9:cd:56:c9:1c:2d:89:78:81:f6:4c:bf:
1c:a7:91:7e:ec:06:ab:96:16:28:7b:c3:5e:5b:74:
0a:e8:2a:d5:5c:10:7b:d3:c1:27:87:44:b9:e7:02:
56:4b:ec:42:1d:f3:55:ad:1b:cb:c3:f1:90:7a:79:
57:fb:4e:6e:14:9e:65:0c:9d:0a:46:2a:54:00:89:
19:9f:78:71:9f:69:a3:40:f7:5e:08:d6:1e:cb:fb:
3b:84:25:45:7e:5d:44:d7:e2:45:cf:13:ac:b0:5c:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6E:21:2B:44:48:7F:51:F9:30:22:9C:AA:0D:24:7C:60:34:5D:9B
X509v3 Authority Key Identifier:
keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0b:18:57:26:0d:2b:0b:b2:74:f5:0c:95:31:2d:ee:ed:be:
63:1a:23:16:47:16:ed:81:01:11:8e:76:3b:88:38:12:25:74:
cd:31:a7:64:16:89:f6:b6:dc:4d:89:25:5a:50:81:0c:98:2a:
f1:5e:89:cb:2f:37:17:57:80:c3:f1:43:57:6a:64:88:e5:e8:
7e:1d:c7:84:e3:f3:84:bd:12:4d:47:4d:1a:da:e2:51:78:cd:
a5:4e:30:24:ff:6a:9d:12:7c:03:b1:23:09:7d:d5:cf:58:e3:
8e:d4:c1:6e:5d:2e:08:df:d8:9e:58:20:e3:b9:99:c8:3b:e5:
38:cd:62:e0:5f:ad:a7:90:89:9f:db:9c:3c:f0:45:2e:6c:4f:
b6:31:24:ba:a9:8b:f9:0e:ed:52:6d:8f:65:37:de:fe:7a:8f:
10:a9:50:e6:07:47:f4:f7:70:47:4a:7d:b0:7d:42:fa:55:aa:
87:b0:01:4c:98:5d:34:bc:88:4d:99:eb:93:b2:05:e5:a1:ef:
4b:65:23:2f:13:a6:6f:6b:2f:e3:d2:eb:53:de:de:5d:e5:ea:
9b:76:6e:14:c2:c6:47:34:f5:85:2b:98:c3:14:7e:a4:f5:34:
4a:bd:83:10:e9:24:2b:08:db:8e:17:ee:dc:50:71:a2:26:99:
00:f3:3f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:41:41 2025 by rpki-client