Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
File: iWkzRGOKywU2WC-rCJh2V472vFY.mft (raw, json)
Hash identifier: xz8/PpmNAuj/8Xlw8rB1Q1FysrJ26EuWiReIv4ngoz8=
Subject key identifier: 02:6F:09:09:00:F3:36:C1:83:79:1D:A8:5D:D3:D0:4D:10:8D:D2:83
Authority key identifier: 89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
Certificate issuer: /CN=89693344638acb0536582fab089876578ef6bc56
Certificate serial: 01974A7AA7A0492F70D1358DB3172D9CE32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:00:41 +0000
Manifest this update: Sat 07 Jun 2025 13:00:41 +0000
Manifest next update: Sun 08 Jun 2025 13:00:41 +0000
Files and hashes: 1: fCZrKI-6j3JypnfEm5_gs1n5dFw.roa (hash: iZ/p7v8ZHeoQxTyUiH1KnvRb3hj8zk8sCV0wmzxeW2k=)
2: iWkzRGOKywU2WC-rCJh2V472vFY.crl (hash: eyPKaDsipMTCiLFVPpVGHkcBjic8F3oHHk2ze0XpPQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a7:a0:49:2f:70:d1:35:8d:b3:17:2d:9c:e3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89693344638acb0536582fab089876578ef6bc56
Validity
Not Before: Jun 7 13:00:41 2025 GMT
Not After : Jun 8 13:00:41 2025 GMT
Subject: CN=026f090900f336c183791da85dd3d04d108dd283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d0:7e:5f:73:d2:43:5e:db:a7:53:78:8a:58:
95:35:b6:60:f1:f1:6f:e8:37:09:38:3e:9e:9c:7d:
d4:83:ae:b1:99:34:f0:05:ea:0d:7c:9a:3c:57:b0:
25:92:46:d8:55:ba:a8:2e:d9:5f:8a:3c:38:df:5a:
44:2d:fd:d8:21:fa:35:a3:90:f4:ab:fa:2c:ce:ee:
43:a5:ae:fc:45:01:f6:03:a8:7d:9a:8e:57:b4:85:
bb:d7:4c:4d:64:45:b4:b0:bd:53:a1:36:5d:99:07:
92:6d:36:3b:d7:e2:66:43:27:c4:96:4d:a6:32:da:
88:fd:62:92:3c:81:b9:1f:17:d5:d5:fd:07:fc:74:
a7:64:07:90:e5:65:cf:d9:4a:ea:5c:ac:96:94:5e:
09:46:94:68:63:3a:de:a9:5f:e9:63:59:4d:0b:c8:
9d:71:0e:29:a9:f4:5e:7f:7e:c6:a6:b7:a6:cb:35:
e9:f9:a3:c9:9f:18:6b:04:89:0c:30:f7:7c:0f:26:
87:81:0b:6b:29:a6:e5:0c:fb:b0:af:ce:f2:c5:45:
df:ee:fa:4c:9e:31:84:76:45:ff:21:5c:9f:c3:f5:
de:d4:91:b4:a3:1b:bc:2d:8c:2c:8a:c3:86:61:ff:
d4:71:5c:9b:15:c1:6a:02:09:39:f6:99:0a:6f:67:
cf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6F:09:09:00:F3:36:C1:83:79:1D:A8:5D:D3:D0:4D:10:8D:D2:83
X509v3 Authority Key Identifier:
keyid:89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d7:f0:c1:fd:22:47:db:b9:36:ea:9d:5e:ef:df:25:38:8f:
98:13:77:65:8c:9b:b5:78:d9:53:17:bb:2b:57:6f:90:c1:2f:
27:77:86:67:4c:e7:ff:01:8f:6c:5f:a0:54:e8:b1:b5:f5:21:
de:50:6e:9e:50:c6:81:c4:41:3e:8c:36:fe:71:df:b7:68:bb:
54:49:4e:e6:dd:76:d3:84:49:f3:f7:cf:26:a6:ac:af:f2:1e:
5b:16:b4:bd:6f:81:db:54:01:65:0c:f1:d0:59:ff:27:8c:40:
ff:5f:2c:27:32:0d:56:4b:11:08:7e:64:7e:d3:89:2b:42:ab:
08:87:71:16:b5:00:62:92:36:d4:f5:0a:67:54:75:c7:ae:4c:
4b:a3:83:5a:67:e3:49:c1:c3:2a:42:c0:da:4b:bd:8e:57:2d:
38:a2:a7:06:c2:a6:0f:42:e0:2e:0f:bf:a2:fb:53:fb:0f:1f:
09:e5:5e:2d:5a:f8:d8:34:96:77:66:13:33:ab:c1:ce:16:bf:
b9:4d:c1:e2:4d:6d:bd:38:1e:38:86:a8:54:d7:31:b4:e9:89:
6c:45:13:f1:b7:34:09:76:00:09:46:2d:cb:76:bf:94:32:07:
15:31:9e:d0:54:3f:a1:06:bd:65:19:f7:20:31:f6:49:04:da:
f6:3e:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:22 2025 by rpki-client