Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: 9W0s6EK706gANOyCaUpTdGgfyBY1vI4KuaZ+FQcprKY=
Subject key identifier: 0F:21:F3:A2:EA:B7:34:42:A0:F7:C0:42:3B:BD:0E:E8:BB:7F:EA:1F
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 01978C91C4DEF41B79D7EAD6D4E41AA534A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 0E08
Signing time: Fri 20 Jun 2025 09:00:52 +0000
Manifest this update: Fri 20 Jun 2025 09:00:52 +0000
Manifest next update: Sat 21 Jun 2025 09:00:52 +0000
Files and hashes: 1: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: Ea1BSIfzVVeolwqVO/vTbjNrC6JOMu/1AygcfEewbTc=)
2: t9nkji_Xq4DRGMttbRDw-jVfqPI.roa (hash: MJaMfbYXB+V545skyyIWbRiW1FYp9UFjL+ooREdIKpc=)
3: x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa (hash: bx0oE168u4Tmbz20f8oi8B9aCfZBYtjemV0iReEb4PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:91:c4:de:f4:1b:79:d7:ea:d6:d4:e4:1a:a5:34:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Jun 20 09:00:52 2025 GMT
Not After : Jun 21 09:00:52 2025 GMT
Subject: CN=0f21f3a2eab73442a0f7c0423bbd0ee8bb7fea1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:5b:24:86:b2:dc:fd:e8:eb:91:83:54:f9:
67:bf:d8:1b:c5:b3:86:15:a3:d0:e5:44:df:8d:83:
3d:65:1e:75:7c:e0:d1:0d:05:aa:81:f5:6c:85:51:
d9:d6:65:76:a3:58:f0:c3:9c:09:a4:ff:68:95:5d:
b7:75:78:00:48:7b:05:07:9d:4e:7a:5b:fd:bd:06:
d2:63:c4:98:fb:31:ee:ad:68:20:d0:de:df:ab:8f:
21:69:e6:36:f3:bf:08:27:5a:3a:93:91:9a:9b:6a:
86:0f:bd:b7:e0:6a:c4:ca:27:e0:ee:cd:8a:2c:2d:
8a:aa:80:f6:43:7e:0c:14:0f:0f:90:fe:ce:e2:5e:
7c:5b:24:37:02:97:ea:a7:7e:2f:43:14:1a:ad:20:
da:21:45:76:87:2a:22:dd:6d:04:ac:6b:19:ff:8f:
a5:69:e5:7c:ac:d5:6d:d9:af:22:4f:97:3c:b6:44:
b9:00:55:37:72:d6:d2:d6:20:2f:39:66:f4:c1:d4:
21:93:50:6c:2a:b0:3f:01:87:b4:4b:63:3b:87:04:
34:43:f6:39:d7:f8:33:18:4f:f7:67:5b:21:ea:69:
a7:19:1a:d8:a0:a9:b4:b2:34:7e:b9:d4:81:bc:fe:
2a:8e:d5:93:69:d3:2f:f9:da:af:28:18:e2:71:f4:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:21:F3:A2:EA:B7:34:42:A0:F7:C0:42:3B:BD:0E:E8:BB:7F:EA:1F
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ae:f8:de:23:16:88:0d:dd:03:69:98:65:b0:b2:fe:a5:57:
61:4f:69:4e:90:da:d4:75:9b:fb:99:10:ea:4d:37:f2:9a:6b:
05:17:09:a0:45:fb:19:20:4e:c7:53:6a:26:a3:04:ff:55:92:
d6:ba:54:9d:31:7d:32:dd:fa:23:c6:1c:8c:05:99:c9:a1:33:
44:f9:5b:1c:62:03:21:1f:e2:83:0e:a3:07:64:10:88:76:50:
0d:36:f6:3b:bb:60:77:38:6c:22:da:0d:f2:60:ea:db:ad:8e:
9f:99:a7:b7:bf:74:37:f7:eb:7b:c7:6d:bf:a5:9a:e7:66:92:
9b:f1:f7:f5:39:bf:ae:32:8f:75:d8:43:1c:b4:05:b6:84:a7:
7d:50:ee:32:b2:6d:7e:8b:d1:4c:c1:f5:d1:9a:3c:94:e6:a2:
ae:f1:16:9f:ae:28:b1:10:35:26:04:d9:81:b9:99:e6:ec:78:
ca:5f:dd:db:9e:c2:83:0c:65:61:77:bb:9f:4f:83:d2:0e:60:
46:8f:c6:4a:c0:92:50:6d:dc:49:01:83:c7:cc:83:59:09:17:
be:50:41:f8:16:24:e5:11:dc:ef:0e:44:e7:81:e2:6a:df:bb:
77:51:41:94:84:eb:39:cf:94:df:da:dc:f0:17:4a:cb:f6:c9:
59:dd:b5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 12:54:38 2025 by rpki-client