Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: ZS35uEmBXmVEmrFXirhLh0ngD68UdlDCE+fq0OK+nCc=
Subject key identifier: 98:31:A1:BF:8D:7D:9E:1E:02:C7:73:6B:AF:70:B6:69:89:0A:FE:18
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 0197700CD2F0967C2C59023D1A633915FE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 0D3F
Signing time: Sat 14 Jun 2025 20:06:17 +0000
Manifest this update: Sat 14 Jun 2025 20:06:17 +0000
Manifest next update: Sun 15 Jun 2025 20:06:17 +0000
Files and hashes: 1: abKcOp3qmm4ybUnw1tBA-G8yOrc.roa (hash: /klckxmc/giyHaniwWbEf+LlQIwRtUPvFDW14KDXips=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: sBxQo1L2X4kxNbxoXTEqI2UCdbxurRAPA0RvSqDd960=)
3: wwvXwr9r97YSNmNGZc9ySQ1_n6Y.roa (hash: 0W0dMiygG/vBFetZXEBlHUxoM8tIClWjEIo09OeTw+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:0c:d2:f0:96:7c:2c:59:02:3d:1a:63:39:15:fe:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Jun 14 20:06:17 2025 GMT
Not After : Jun 15 20:06:17 2025 GMT
Subject: CN=9831a1bf8d7d9e1e02c7736baf70b669890afe18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:39:89:d2:be:91:4d:72:f6:39:8c:11:d1:
dc:90:82:1a:ac:34:42:08:92:b6:3d:92:99:46:9b:
07:29:95:e1:2e:bb:0e:fd:b2:5c:70:f2:4e:e8:db:
0c:b5:fc:1f:a1:1f:1a:4a:fe:4f:20:f7:f5:67:06:
9a:5c:2d:bf:8f:b6:8e:dd:9f:2c:79:19:f7:d0:76:
16:b5:13:86:3a:03:23:1b:2f:33:58:a3:60:dd:86:
46:c1:ed:ce:68:3c:4f:3a:86:03:0f:19:b7:ce:59:
da:07:15:7d:80:9e:33:1b:99:d6:53:11:f7:09:fc:
d9:17:fb:89:17:58:f6:f2:bc:1a:f0:94:07:13:66:
4a:c1:b5:c3:c5:17:b3:df:68:48:7c:a0:07:46:6b:
ae:a2:b9:ad:a3:ed:7f:05:22:31:d6:d4:d5:35:5a:
f2:9c:ad:bb:f0:8b:55:d5:8c:e6:74:62:a8:6a:02:
37:61:9c:d0:c7:a6:f6:61:f1:3d:88:89:a7:06:e6:
71:3b:d4:7a:6b:58:94:fd:cd:8a:3e:ad:6c:b5:d1:
1b:9f:e7:5f:2e:67:7e:3f:97:06:93:e9:f8:b1:74:
9a:bb:79:c7:35:4e:67:6d:42:d2:18:4f:8a:02:e6:
fd:c1:c9:bc:2e:7b:b5:c2:bf:d7:66:da:c1:ee:27:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:31:A1:BF:8D:7D:9E:1E:02:C7:73:6B:AF:70:B6:69:89:0A:FE:18
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:72:d9:c2:48:b5:9a:7f:0e:fc:ca:54:ab:6a:0d:da:c0:1f:
8d:d4:cf:04:bf:35:ec:c1:e5:88:3e:2b:53:1f:b9:1a:81:b2:
33:01:0f:17:20:b2:d0:ac:0a:97:68:22:7c:5a:9e:5d:9c:2f:
dd:24:51:71:a0:f0:1c:b8:d4:16:e9:fc:c6:4c:43:51:0e:3d:
d5:bb:cc:6f:41:dc:8b:04:4d:4f:a0:76:51:e5:50:c2:a8:43:
17:71:45:2a:48:bc:cf:11:ae:cf:92:af:c3:2d:67:aa:79:02:
5d:a1:50:6b:61:0c:da:5f:a8:0b:91:ee:0f:de:88:68:7a:de:
40:37:3e:2d:78:4e:fe:6f:d9:28:ec:a8:df:69:46:6c:6e:97:
27:24:57:a7:c2:97:c4:a5:69:fb:4d:a9:5c:d6:18:73:c4:c9:
6e:0d:d3:a8:c1:e8:1d:d6:cb:f0:42:54:ac:ef:d8:85:42:e6:
1f:c1:af:07:96:69:e7:8c:8b:1b:db:d3:d5:9d:59:86:4a:e9:
82:57:c4:e2:e6:1c:82:dc:b0:fa:7f:a4:f1:27:92:f5:50:85:
c7:7b:0a:24:25:aa:45:1d:b4:21:c4:2a:90:4b:43:bc:34:81:
c0:20:8e:e4:9f:7b:8b:44:10:6b:aa:93:33:7d:7f:12:c0:69:
ed:3e:e9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:00:11 2025 by rpki-client