Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: 0Gxxh45pSjWKB/g5AWTxtf8UwUBAD8/WTei4bT1H0nM=
Subject key identifier: 7C:60:0A:40:B8:8C:F2:4C:05:B7:EB:E9:F3:6E:B6:81:C7:EA:14:93
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 01976BF3E99E6CFFB8FBBF3560C34DA1CECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 01:00:36 +0000
Manifest this update: Sat 14 Jun 2025 01:00:36 +0000
Manifest next update: Sun 15 Jun 2025 01:00:36 +0000
Files and hashes: 1: 0tVPRt7zVqUIIvmXairhGKRXv0U.roa (hash: dhSo1lkIbUUIXrPA3/k2AFZiXI7dxBUbTf590V+gQts=)
2: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: bagq8H1LsAeer3Ke+uEZMa6/cpa4JhzFxOH7aN3AU5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:e9:9e:6c:ff:b8:fb:bf:35:60:c3:4d:a1:ce:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Jun 14 01:00:36 2025 GMT
Not After : Jun 15 01:00:36 2025 GMT
Subject: CN=7c600a40b88cf24c05b7ebe9f36eb681c7ea1493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:06:fa:4e:69:34:de:fc:13:ee:31:e9:6c:
e3:21:23:d1:f2:ff:1a:28:01:a2:9b:00:92:e3:5c:
ae:2d:b8:eb:f7:5e:64:06:82:b5:19:c6:0a:23:c1:
52:d5:c1:32:7a:3f:8a:ce:10:a8:de:f6:f1:b4:91:
04:e5:b0:29:43:86:16:67:e3:b8:6c:69:a8:84:a7:
36:26:23:35:24:65:4e:02:59:e2:4f:00:23:ab:ce:
7c:f8:85:18:07:7c:8c:42:f4:84:35:23:5d:f0:70:
04:de:88:5e:88:2e:7e:15:77:17:3f:13:3b:32:74:
34:c6:69:51:4d:e5:4a:49:b5:58:76:5b:5a:87:05:
c2:46:92:85:fb:b6:af:04:e3:1d:37:de:0b:0f:71:
4f:2e:4b:7a:de:82:e2:d7:be:b5:ff:9b:25:c9:a1:
4c:db:be:77:fb:de:1c:cd:4c:30:3e:bc:f8:55:4e:
3d:62:67:aa:b3:9d:1d:dd:0b:f0:e8:a8:e8:a6:b4:
9a:f7:d9:bc:37:75:f0:2f:cd:53:e6:b0:91:d3:41:
64:92:a5:55:f5:05:4d:cc:c5:5b:51:9a:89:f6:3e:
75:26:cf:1b:0f:8b:c4:fc:df:06:44:48:98:7a:f7:
93:50:d4:95:4e:cb:de:25:e4:0b:cd:4d:83:98:05:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:60:0A:40:B8:8C:F2:4C:05:B7:EB:E9:F3:6E:B6:81:C7:EA:14:93
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fd:85:68:df:ee:c0:c5:83:aa:8d:ee:00:78:61:62:dc:8e:
71:6c:85:49:0c:96:3b:89:5f:c5:17:01:de:3d:b9:4d:53:fb:
1d:79:ad:ba:6b:67:8a:ad:a7:10:17:74:4d:72:17:06:50:25:
ae:18:27:78:05:c7:af:5b:ac:15:09:7e:b4:a4:5a:37:8b:d1:
a0:96:56:36:0e:bd:eb:65:1d:1c:9c:b4:40:35:d4:ff:44:9e:
e0:ad:83:c7:4e:30:af:51:3a:3a:85:8b:2a:de:1e:27:2c:86:
ab:2e:97:97:59:68:2e:ce:52:e1:d0:8a:95:b3:56:e7:f7:da:
09:02:28:6c:4f:0a:be:d0:e3:99:d1:d7:0a:02:c6:22:da:38:
f1:f6:65:b6:1b:46:db:75:fe:67:e4:bc:34:a6:4d:a4:e1:51:
99:6f:04:d3:78:8d:9d:4b:41:28:f9:ef:8d:9c:cb:e1:fe:23:
b3:48:f3:f9:52:5f:87:15:29:81:d0:7b:98:85:54:10:bc:17:
fe:ff:25:27:09:45:a4:49:2a:04:6f:cf:80:38:2c:2b:d2:8a:
08:f8:51:7e:a2:5a:4d:23:f3:b7:0d:6d:82:87:a2:ff:52:98:
60:4a:b4:99:1f:da:03:5b:54:49:cd:e0:38:2f:a6:e5:57:21:
45:10:6e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:12:58 2025 by rpki-client