Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
File: iy4NGE_1UzdchHw41N_NzeEhn9M.mft (raw, json)
Hash identifier: MCiz8aTibRUi82ySQslCGm5VlTsME89kHiNCTLcLohA=
Subject key identifier: 8F:54:01:01:F4:25:AA:00:4B:57:A0:42:34:E9:02:A5:92:7F:CC:BF
Authority key identifier: 8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
Certificate issuer: /CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Certificate serial: 01977AC2156E5E0A59FEA62001E8EC195CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
Manifest number: 0F84
Signing time: Mon 16 Jun 2025 22:00:29 +0000
Manifest this update: Mon 16 Jun 2025 22:00:29 +0000
Manifest next update: Tue 17 Jun 2025 22:00:29 +0000
Files and hashes: 1: QhkZtHC-GArPwLlJouzdeKz4vt4.roa (hash: rYjbbMwu5klxqw8Z2ve99sKM+e3vXg5MSUYMGvpUeAw=)
2: ek-bgKo0V51DyYfh9FUoM-CKgO8.roa (hash: aPF/FaJvXVYEUFEnZVNFtJQGYrjiMzQAcdLekCScrys=)
3: iy4NGE_1UzdchHw41N_NzeEhn9M.crl (hash: 3Q519eegWrHGaArZVVN/L3C/v0pMfKCporH8LwGR34g=)
4: jjb9-8iXZGVpIaiYLG1b0CgDmDQ.roa (hash: aXW8Frrn0CPPaBr+F5uNOjUESeabRZzpMHqeAGAbYRY=)
5: tyr7YT-XlbKvyQI5Aiw1lqcEPZ0.roa (hash: A8rtdyJ9paAEirlby1av+cQ7baYrwbelcvz/vsvt2z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:15:6e:5e:0a:59:fe:a6:20:01:e8:ec:19:5c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Validity
Not Before: Jun 16 22:00:29 2025 GMT
Not After : Jun 17 22:00:29 2025 GMT
Subject: CN=8f540101f425aa004b57a04234e902a5927fccbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7c:34:8c:dc:19:1d:42:08:09:2f:93:2a:26:
1f:38:95:85:84:e6:2a:5f:ba:a6:8f:57:60:ad:79:
74:69:7a:e8:7d:01:ed:e4:19:8c:90:f7:0c:92:a0:
73:cf:c1:b4:b3:5c:2f:67:a6:82:04:58:6a:1d:43:
21:67:73:33:07:46:d3:00:c3:dc:73:e9:cc:e5:ce:
d3:20:d7:59:cd:b7:80:12:08:d0:6b:72:bd:82:e4:
bc:8e:80:30:b0:84:f2:35:32:57:db:4f:8a:aa:07:
9e:ad:e0:34:3c:78:b8:5c:9b:8f:d0:5c:ab:75:55:
48:b2:f4:81:e9:7e:95:b0:1f:8b:bd:c6:9c:38:ab:
cf:59:56:05:a7:3b:29:83:2a:c7:35:fb:44:44:ed:
d3:b2:16:de:a7:5b:49:b7:9e:ed:2c:8a:4d:fd:72:
4b:b0:8b:b8:5b:35:59:9b:c7:37:e8:0e:e7:9c:90:
21:98:72:98:f5:ad:78:e7:46:f5:1a:0a:4b:c1:65:
cd:50:8f:6f:a0:9c:4e:73:a6:ce:92:15:cd:7e:0c:
25:c9:a2:0e:ff:ce:b6:5e:80:d3:3e:fc:25:ab:83:
3b:0f:2e:d6:0b:ef:f4:4f:87:e1:90:0a:77:0c:90:
68:12:af:a4:bf:26:1a:56:23:2a:5b:cd:24:89:9f:
e0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:54:01:01:F4:25:AA:00:4B:57:A0:42:34:E9:02:A5:92:7F:CC:BF
X509v3 Authority Key Identifier:
keyid:8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bf:4e:b7:43:84:8f:b9:d0:57:ae:8f:19:53:48:51:1f:c2:
89:e6:6e:9b:e6:e0:48:06:63:f2:a8:90:0c:76:0c:6a:d7:72:
f3:2f:28:63:66:6d:1b:fb:ee:1c:38:62:4a:3f:0e:e5:f6:df:
d0:4f:98:bc:73:5e:95:a1:15:55:c0:77:cc:75:71:4a:70:50:
43:7b:e9:d9:3d:90:2e:ba:07:f4:9d:b9:4d:44:ff:50:25:4f:
b2:97:4b:76:d9:3d:77:a9:7a:4b:6e:c7:8d:49:59:d1:2e:26:
f2:8c:48:82:03:a7:34:76:bc:32:96:a4:8d:8f:79:d9:1d:95:
cd:26:b3:a4:b8:29:44:2c:e4:5f:f8:fd:22:c8:e6:e0:81:2e:
32:59:96:57:d7:a7:41:21:6d:eb:87:5b:7e:5e:be:83:be:29:
fc:d0:bb:f9:f3:65:84:db:c0:5f:07:d0:59:fe:ab:a7:86:c0:
70:97:6b:2e:1a:6b:7d:a5:ca:64:ac:93:e9:cb:c1:6a:02:8f:
92:18:a4:d4:43:c3:1b:43:bf:8b:7c:99:64:51:d6:30:54:22:
c6:0b:95:4f:e2:14:b1:d5:53:a5:df:d9:7b:d5:5f:24:92:f0:
f7:b0:a9:18:ba:14:1c:90:a0:4f:eb:27:6c:46:c4:f7:a0:73:
ee:75:b5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:34:12 2025 by rpki-client