Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
File: iQH2c8aw_4g16gL67bpbSc8UIk4.mft (raw, json)
Hash identifier: Fg6qGmvrw6YIdGHUIkGuapuDwlCjnTk+l6oTIgtm7PU=
Subject key identifier: 82:B4:91:CA:20:DA:45:1B:E9:F6:AA:03:88:CC:5E:BA:96:0C:2D:7C
Authority key identifier: 89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
Certificate issuer: /CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Certificate serial: 019747B09516EBB0123DA00EFE486653355B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
Manifest number: 0C1A
Signing time: Sat 07 Jun 2025 00:00:44 +0000
Manifest this update: Sat 07 Jun 2025 00:00:44 +0000
Manifest next update: Sun 08 Jun 2025 00:00:44 +0000
Files and hashes: 1: LwODeFlTbNm331VlQw3cZjyD1Sg.roa (hash: 6xKklCkI+s1DbuNSCG9T6RXJeAeTq1fLNQfBDhNCOAU=)
2: iQH2c8aw_4g16gL67bpbSc8UIk4.crl (hash: vDJTH9G1k3VD337tXZG5E5EnwjOlnPKEL5XbTsADuHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:95:16:eb:b0:12:3d:a0:0e:fe:48:66:53:35:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Validity
Not Before: Jun 7 00:00:44 2025 GMT
Not After : Jun 8 00:00:44 2025 GMT
Subject: CN=82b491ca20da451be9f6aa0388cc5eba960c2d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:08:4d:c8:5d:3d:a1:b0:2a:84:8a:a9:df:
64:54:eb:93:54:5b:89:aa:84:40:1f:2b:0d:b8:93:
45:49:0c:54:c6:31:b6:e5:ad:de:fb:60:38:a7:c4:
07:85:aa:ee:de:46:6c:1d:b9:78:fc:21:50:df:29:
91:a8:1f:99:f9:42:f3:a6:b4:ee:20:cd:04:b2:97:
bd:66:56:c5:48:25:ac:56:68:f6:41:f4:53:d4:a7:
aa:4e:65:9c:27:5d:94:c7:df:02:02:0e:5e:d6:f0:
aa:f7:26:58:bf:06:ca:54:1a:b9:3b:da:46:a6:db:
8d:a1:ea:89:e5:77:57:51:5e:19:cb:5e:38:c9:52:
ef:86:cc:6d:d2:6a:dd:17:f5:a0:c4:08:e5:2d:a1:
b5:4a:c6:2e:19:63:61:bb:af:e4:4d:2c:2c:4f:78:
fb:d8:9d:29:f6:d2:6a:2d:8c:a6:9c:c0:53:6f:c3:
da:1e:e2:d9:ce:44:9a:52:f8:4d:13:d6:a4:37:34:
7c:a0:66:32:ea:1f:7a:cc:d1:e6:86:b7:ba:9f:6d:
29:17:45:86:d7:37:fa:d9:17:82:b6:a2:c3:e2:4e:
d9:bc:0a:06:f5:08:04:cb:12:6d:2e:64:06:16:40:
a7:6e:1a:0a:50:32:7b:83:71:6c:0e:e2:98:af:4b:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B4:91:CA:20:DA:45:1B:E9:F6:AA:03:88:CC:5E:BA:96:0C:2D:7C
X509v3 Authority Key Identifier:
keyid:89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b2:70:de:a5:43:1a:be:40:dd:fa:f3:1b:e3:fc:06:05:6e:
ee:e5:01:61:6f:f1:f3:1d:1f:59:5a:d7:85:87:e4:82:73:35:
f1:98:3b:88:0c:a3:0b:63:aa:a6:b1:f4:16:77:58:73:45:67:
16:12:cf:71:0f:80:b8:d7:ba:1e:5a:af:6b:c2:ac:2d:d7:48:
32:3e:19:4e:94:25:d3:1f:bb:36:c4:a3:30:17:b2:a1:20:86:
ad:27:bf:03:5f:4f:f5:12:45:b5:30:40:9f:4e:73:49:c2:35:
80:ec:01:f6:cf:58:f2:3f:54:74:1b:32:fb:7b:79:33:b9:72:
8e:70:a5:3f:26:f0:a3:22:f0:c7:73:55:70:11:ad:5d:5e:e1:
29:f0:9b:6a:73:1d:9c:22:b6:33:08:8f:2d:9d:09:da:9e:63:
8b:51:b4:a1:45:d4:42:43:58:e8:3f:8d:77:11:e3:dd:b9:87:
c9:5f:f5:46:70:73:d8:9e:b4:fb:03:dc:31:0e:d9:2b:3d:25:
0c:be:3f:db:33:28:c6:53:63:3f:9f:6e:f8:c2:ab:b1:49:32:
fa:c9:bf:bf:18:7f:5e:34:18:fc:3e:17:6e:61:37:03:da:2e:
d0:78:de:b7:da:67:be:79:74:1f:7f:8f:22:9f:23:73:9c:ee:
f6:3b:dc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:14:39 2025 by rpki-client