Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: YmtOdSNAonVp/HJ2+l3TjoUjTVNl/ZM4rm8FDTSQqNI=
Subject key identifier: B2:68:81:41:DA:44:62:7A:D2:92:96:91:C7:48:A6:72:4E:F3:95:4D
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 019773ADB5ADD16603A08155B532C0452F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 1598
Signing time: Sun 15 Jun 2025 13:00:53 +0000
Manifest this update: Sun 15 Jun 2025 13:00:53 +0000
Manifest next update: Mon 16 Jun 2025 13:00:53 +0000
Files and hashes: 1: JoFV0lmrgBVp2NchrwUNBCxFqPk.roa (hash: 6FTsXZns8p+PiPkKjnYlGHxMRtUZaiMCOOMvrqE4q2A=)
2: LXcAIZsJjKqYcEZ-B4QhCzqX1y4.roa (hash: qXMNjFLmC2o8C7/tTBWAvWSGp3iRQoR6PHBawFPFtHc=)
3: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: AhV0/sZIj8TdE/ZB5IEi9KuBsgNC1W57TD5MIhd/No8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:ad:b5:ad:d1:66:03:a0:81:55:b5:32:c0:45:2f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Jun 15 13:00:53 2025 GMT
Not After : Jun 16 13:00:53 2025 GMT
Subject: CN=b2688141da44627ad2929691c748a6724ef3954d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:fe:14:47:36:68:c8:40:3c:e6:54:71:0c:
a4:30:27:f6:09:e0:31:1f:e2:6b:80:3a:c4:c2:50:
41:a2:9d:20:bf:c7:d1:20:90:2c:39:6c:ce:f4:bd:
7c:e4:38:24:5c:69:a5:20:56:d4:ad:db:f0:3c:73:
69:26:e1:df:fb:0f:7f:10:b7:f2:c1:24:20:03:ba:
39:64:ba:6b:90:42:b9:5c:52:76:92:4f:cd:5e:0a:
28:09:bf:94:2e:db:8f:78:6d:0b:18:e8:65:0e:9f:
f2:58:9b:6c:87:aa:fc:4d:cc:8a:70:79:37:36:b3:
09:fb:fb:aa:85:a0:8b:1c:76:b1:b4:da:53:b5:ad:
fb:e5:d3:17:0a:d3:4b:fc:5b:59:2a:4a:7a:90:0e:
4c:68:48:32:39:fd:ba:7e:ee:33:89:b2:60:ef:e9:
2a:6c:06:75:81:b6:21:8e:85:67:23:29:f3:62:86:
d6:7c:b6:97:e9:91:21:f4:d5:f7:c3:bf:8d:f8:d2:
6e:cb:f2:5b:e0:59:99:87:a4:b8:d5:72:99:9a:67:
a6:06:f8:44:b6:f7:95:be:74:b9:b8:d4:65:d5:81:
80:4b:07:9a:9e:94:b2:b9:de:06:4c:4d:46:27:aa:
39:c4:39:7b:93:f1:1c:fb:9c:67:e3:85:d2:51:99:
72:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:68:81:41:DA:44:62:7A:D2:92:96:91:C7:48:A6:72:4E:F3:95:4D
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f5:07:c4:db:40:7a:f0:04:36:45:d7:bb:34:8c:41:ad:d2:
3b:1c:e5:ab:57:e5:03:fc:cb:dd:9d:d2:e2:19:c7:68:8e:90:
a7:14:d1:8d:a5:e7:04:29:66:16:e1:59:03:d5:80:45:e5:9f:
77:47:98:8c:4d:00:27:80:0d:3c:ed:78:fa:aa:f2:12:88:f6:
c1:02:56:f7:05:aa:16:41:33:61:c1:f1:79:df:e0:b0:75:cd:
91:ad:a0:3e:ad:37:63:48:e0:87:da:d0:cd:61:9a:23:ec:77:
55:91:b7:9f:35:ff:60:42:de:cc:5a:77:89:07:c4:21:07:c8:
1f:2b:78:44:f3:58:f0:88:44:01:be:4a:f9:c9:5e:fc:64:86:
90:c9:18:50:2e:d6:6d:a0:8f:23:e1:ce:2a:4a:39:96:81:b5:
75:c8:2f:95:a3:f2:d7:68:fe:7a:0a:6b:c1:94:8f:16:27:7b:
39:6e:22:49:69:d7:5b:24:fe:df:36:e6:86:fd:50:82:e3:4f:
c0:28:cf:63:df:fe:ef:a2:c1:e7:a5:b7:55:ff:fc:2a:af:82:
20:d2:e5:28:cf:50:a3:06:25:03:7f:1b:e0:0e:a6:f4:a8:4c:
d3:02:6b:0d:1e:04:34:bb:ee:52:b0:74:47:5b:bb:cb:f1:a8:
c0:51:7a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:04:05 2025 by rpki-client