Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File: iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier: 5GPLg+C+mvkphVVjGe/DD++yIZaYKXEHSK00AVMnAdE=
Subject key identifier: B9:A1:74:0A:95:5B:9C:78:3A:FC:E6:67:99:BF:2A:9F:26:CE:98:4E
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial: 01976D3D60C51567F8C4C49FA6EF0DC49615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number: 0C46
Signing time: Sat 14 Jun 2025 07:00:28 +0000
Manifest this update: Sat 14 Jun 2025 07:00:28 +0000
Manifest next update: Sun 15 Jun 2025 07:00:28 +0000
Files and hashes: 1: NGjcJESkWKoe17DLj5CiFkjFkhs.roa (hash: GPilr/syUwSnDgvatxbmfR2uNG9m+2J2hRVuK9V/K4A=)
2: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: MvigDNgw5JI5lJsfVtQ7aNRLQso4eiAA2SzM12P1L14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:60:c5:15:67:f8:c4:c4:9f:a6:ef:0d:c4:96:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Validity
Not Before: Jun 14 07:00:28 2025 GMT
Not After : Jun 15 07:00:28 2025 GMT
Subject: CN=b9a1740a955b9c783afce66799bf2a9f26ce984e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:62:c5:29:c2:b5:95:47:16:92:19:e8:6a:
2d:fc:80:3c:29:fe:83:0c:8c:d9:53:fb:e3:65:a6:
d7:fb:97:a9:a9:ea:8b:39:2d:e0:97:b0:80:e9:6c:
28:9d:ad:c5:f1:9c:50:7c:1c:e3:1f:ef:45:1f:67:
36:5c:b6:87:d2:ee:5d:02:7e:48:05:24:6e:41:0c:
ba:c8:ec:a7:82:70:a7:8f:37:65:65:05:22:67:75:
22:ea:1d:ec:06:68:57:ef:3e:b9:6f:1f:b7:3d:48:
9d:e6:9b:1d:91:54:f7:05:ea:a7:bf:e5:02:89:f5:
0a:01:09:23:62:f5:3e:75:96:b1:e9:bc:6c:fa:70:
93:30:eb:ed:81:7e:e4:2e:7d:43:cb:9d:86:17:5e:
a7:e8:89:5d:23:2f:b4:88:73:6a:db:f4:c5:50:ee:
96:39:82:cc:f7:5b:74:ea:84:a5:a3:56:88:5b:74:
e6:aa:72:61:04:b4:77:b6:9f:ea:e1:03:82:b6:f7:
0b:d5:96:00:d2:00:d6:56:1c:74:6d:19:68:cd:05:
7c:10:42:30:b3:de:6c:dd:a4:18:df:d3:ba:a4:d4:
99:5f:e6:dc:6c:66:79:c2:e5:fa:fe:0b:68:a2:8e:
e7:66:55:1a:18:6c:bf:98:9b:43:14:21:a4:33:fe:
02:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A1:74:0A:95:5B:9C:78:3A:FC:E6:67:99:BF:2A:9F:26:CE:98:4E
X509v3 Authority Key Identifier:
keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:41:93:cd:a2:a9:d0:25:58:b3:ce:38:a4:2a:43:1e:0d:5a:
e4:00:7f:5f:18:a7:f9:81:a0:c7:68:e3:da:04:34:19:b1:ee:
b8:64:f8:de:16:60:b2:96:46:7b:8e:47:d2:48:9e:d7:2a:0d:
bd:50:b0:be:24:08:17:db:4a:91:ac:47:78:8a:03:86:8a:31:
30:28:6e:17:8a:2c:4c:6c:4f:c5:36:db:b2:f6:3a:05:ab:1d:
25:27:16:19:f4:f9:1c:20:44:ee:6d:92:88:fa:86:ca:34:2e:
f4:c8:3b:f8:33:2a:c4:ff:e4:a0:1b:f7:97:fe:21:ca:d7:90:
ca:b4:6b:1a:81:91:54:24:5d:42:2a:6b:a5:31:e0:91:cf:11:
36:cf:5e:95:e4:79:bb:95:cb:66:e7:da:7a:a6:f6:18:07:77:
44:e8:07:02:c2:a7:96:f5:52:d9:2b:79:c7:96:bd:df:84:db:
8f:67:49:3b:95:d2:96:6f:4a:ce:ec:01:af:a2:bf:15:25:84:
66:5f:68:a5:60:9f:c7:14:c0:c6:c8:e2:9e:94:c7:39:6b:ef:
1f:cf:43:89:98:6d:49:f6:7e:e8:2a:3b:93:bb:54:01:9b:88:
fc:d6:40:ac:6a:28:1a:ea:d0:6f:a9:43:94:ea:c0:e7:5c:b6:
56:64:38:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:12 2025 by rpki-client