Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: LiOvcGBt5FwdSsI66yHRWeSC7YCghw87lQe1gZwD4Bo=
Subject key identifier: AA:DA:72:53:60:6D:69:E3:5F:B6:84:70:E6:2B:C6:6C:70:32:79:F8
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 01977E9FCA9907A1F9957788AFD4CE1EA41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 06BA
Signing time: Tue 17 Jun 2025 16:01:30 +0000
Manifest this update: Tue 17 Jun 2025 16:01:30 +0000
Manifest next update: Wed 18 Jun 2025 16:01:30 +0000
Files and hashes: 1: XWaEMNo4oCmJKw7xuT_lUqU1a9o.roa (hash: vlh1Ps1w/BBZ8U+fD5oVlO0yHpfRUnw+NHa2xAJ40qE=)
2: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: kR2Ni+K192ID+cXtDB2j2OwcKFODw+MQ8ubvzqfmoXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9f:ca:99:07:a1:f9:95:77:88:af:d4:ce:1e:a4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Jun 17 16:01:30 2025 GMT
Not After : Jun 18 16:01:30 2025 GMT
Subject: CN=aada7253606d69e35fb68470e62bc66c703279f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:4f:6e:ee:78:fd:2e:e5:17:b9:fc:73:3d:
a9:d9:06:61:2b:88:25:81:6b:b3:3b:1c:08:91:d1:
3c:93:b0:27:03:d3:2e:7d:fa:2a:2a:fa:6c:e9:a1:
7c:e9:da:50:56:97:37:dd:cf:35:33:ba:87:27:85:
24:e4:f3:0a:77:7f:4d:3f:9a:6e:94:cc:1c:0b:8d:
8c:e7:30:da:ea:f7:b2:52:85:85:0a:7c:cd:69:ba:
ea:d5:dd:96:2f:a9:b6:16:de:7c:97:8d:35:a4:6d:
5d:b2:8c:33:48:f0:2b:61:8b:35:14:c4:87:09:7e:
13:32:ec:07:86:ad:2c:d4:af:77:10:67:09:6c:f1:
f2:4f:a8:7f:b3:c6:34:43:ef:dd:17:99:e5:5b:13:
6f:22:5e:74:3c:69:db:73:4e:fa:32:59:24:77:48:
3d:e1:47:c2:4b:7b:c7:da:51:0f:32:da:08:de:92:
c1:8e:21:ec:3b:3a:70:52:e5:d4:85:c2:9d:82:1c:
1c:cb:bb:e8:b7:7d:96:81:42:69:39:74:5b:9c:d8:
d3:9b:71:67:93:de:67:58:df:c8:33:5a:a2:03:7f:
c4:6f:da:7f:7c:3d:93:2c:76:84:f1:1e:81:1c:51:
be:48:49:98:81:60:cd:45:80:c5:ce:6e:37:02:ee:
62:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DA:72:53:60:6D:69:E3:5F:B6:84:70:E6:2B:C6:6C:70:32:79:F8
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bb:2b:25:53:58:23:76:3b:e3:1b:5c:0b:3d:80:ed:f8:42:
55:a2:d1:cc:cb:e5:f0:94:11:0e:cb:b1:61:c1:4e:82:46:15:
54:3c:e8:08:ac:58:5e:e9:66:6e:f7:16:d8:f1:49:a7:f7:ae:
41:18:54:b1:02:08:07:c6:fe:62:85:37:3b:0e:a0:c5:77:dc:
90:2f:83:74:d9:1f:25:2d:8d:84:99:a3:50:ad:01:da:83:46:
c2:cf:91:29:6c:c5:2c:6c:aa:72:62:2f:c5:d8:f3:fd:19:c8:
49:71:de:c7:70:5d:da:33:2d:e0:14:18:8f:6e:c8:35:59:60:
44:28:18:d2:a3:05:0e:1d:e1:83:6d:1b:65:46:9c:52:84:39:
64:47:67:fd:c7:05:b8:d5:2a:a6:0a:41:1e:50:ff:fd:4b:6a:
83:ae:d5:9e:69:e0:52:b8:c0:4f:22:d5:a0:f9:c2:25:a7:92:
77:d5:e7:90:54:e9:c5:9c:18:1f:d2:40:60:cd:14:a7:02:bc:
80:cc:26:5f:e1:39:dd:69:65:83:16:11:7b:42:ce:c5:57:3c:
47:33:bd:e6:e7:71:44:ef:44:52:f8:0d:37:fa:11:88:cd:bc:
2b:d1:7c:14:65:aa:39:bb:bf:e2:9b:2e:12:3c:5c:f8:01:ba:
36:26:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:12:32 2025 by rpki-client