Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: VFZ0m1XMAFHS7wmAuJQwgTLEDdl2Hrb5Ue0nmpIl7X0=
Subject key identifier: E8:CC:1D:06:9F:E0:70:A9:69:39:99:FB:19:4F:D5:72:68:83:FA:74
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 0197474273DB4E7462DE3F6C4983B2CFFAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0AA4
Signing time: Fri 06 Jun 2025 22:00:26 +0000
Manifest this update: Fri 06 Jun 2025 22:00:26 +0000
Manifest next update: Sat 07 Jun 2025 22:00:26 +0000
Files and hashes: 1: Io8_rALEkRmJyvwQSYZoU_nTQg0.roa (hash: IdvBLL1znSmthNlumpub/fXZwL7C6UNAlVvYWPg9Tzc=)
2: fp-LIMQ80k5YBVtTaX91n-J89eo.roa (hash: ItqEQhJ82EwpqjGgmH+0CXCKGMVgFNbNle1pM5dmqlE=)
3: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: rh6p4AAvRw6TfvNalN1nKt8/WpViWn5BOhyekLFd34U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:73:db:4e:74:62:de:3f:6c:49:83:b2:cf:fa:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Jun 6 22:00:26 2025 GMT
Not After : Jun 7 22:00:26 2025 GMT
Subject: CN=e8cc1d069fe070a9693999fb194fd5726883fa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a0:0e:df:14:9d:9f:20:93:f1:e3:97:97:b7:
d1:8d:df:59:f2:2c:c2:cb:59:69:56:26:a6:eb:31:
ca:6a:d8:c1:bc:74:40:08:96:01:bc:3b:f4:eb:db:
5d:ee:f3:14:34:bc:7c:35:f8:69:1e:02:cd:15:27:
46:51:58:95:3a:d3:e6:be:8d:1f:4c:84:91:65:53:
93:34:9d:99:27:72:33:45:3b:24:d7:2f:a3:86:df:
1c:31:e8:aa:db:3f:d9:9c:fb:19:67:5d:d4:78:87:
72:fb:2b:55:4c:58:38:3d:f0:ba:cb:12:d4:e5:2c:
17:10:d9:41:ce:c3:7c:67:84:db:63:8f:a2:fc:cd:
87:12:af:77:b0:17:3d:57:8d:64:ad:15:e9:c3:da:
80:de:bf:6c:a9:cf:84:7a:0e:8b:0c:e9:0b:b7:79:
38:00:bd:1c:cb:43:9c:26:62:1e:fa:0d:73:bc:e5:
ab:b0:36:8e:6c:89:ac:33:35:d3:46:e4:c3:47:4a:
e4:f2:3a:20:2f:93:b7:44:f6:a3:67:04:23:f4:63:
52:8c:62:7e:39:51:c4:8d:92:94:a9:21:65:4e:53:
f6:47:a2:c1:5c:d7:ae:86:d1:6e:d8:ee:57:81:e4:
da:83:e1:02:81:99:2b:b3:2b:e2:96:c9:eb:44:80:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CC:1D:06:9F:E0:70:A9:69:39:99:FB:19:4F:D5:72:68:83:FA:74
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1b:8e:33:27:38:e6:23:70:88:13:cd:29:e0:23:08:e8:b4:
84:d2:ed:78:c9:78:22:cb:05:b8:54:82:b4:17:1b:b6:34:f4:
8e:96:43:9a:cb:93:16:a2:59:c9:e8:38:da:c0:4b:65:5c:d6:
fb:b9:af:a1:67:f9:fe:d9:21:98:74:a3:9b:26:01:d9:52:27:
44:6e:38:4c:c6:83:d4:f8:77:3a:b2:54:38:d6:42:be:e9:49:
3d:7b:c6:70:d0:66:4a:a0:88:40:c6:83:47:31:13:54:24:23:
b3:4b:29:b6:68:b7:a0:23:f6:69:7d:bb:39:06:5f:b3:76:10:
3d:f6:ad:3d:68:0d:dd:64:1b:f5:c2:06:1e:d9:a5:65:69:1f:
bb:1c:b9:f6:07:99:d3:61:41:8a:e7:8d:fb:66:33:95:5b:6b:
fa:3a:08:de:56:5e:a6:9c:aa:c0:86:dd:97:48:79:86:a7:79:
22:f0:56:10:00:c4:44:9e:80:50:81:2e:07:00:7c:7e:43:76:
f6:98:b8:53:b1:b8:4c:4b:5c:44:ec:52:10:26:75:ec:02:77:
bd:8d:70:af:77:bd:fd:86:45:f1:c0:59:cb:e3:bc:52:d2:ae:
8e:ad:1e:bc:ab:7a:9a:fc:98:de:b0:8b:88:91:56:16:dc:d3:
00:63:6c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:11 2025 by rpki-client