Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: QmrCEaa2lM4GNZTuX8bR2AfXwpPusZUw1JRx7xvbAPU=
Subject key identifier: F0:90:8D:5C:0B:E4:C5:7F:C1:0D:BC:15:60:99:17:5E:B3:80:D2:21
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 01976961120BB34E043267A022651423A2C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 13:00:58 +0000
Manifest this update: Fri 13 Jun 2025 13:00:58 +0000
Manifest next update: Sat 14 Jun 2025 13:00:58 +0000
Files and hashes: 1: YOyr4rKnnzDrXdmtMOktrTLMhdg.roa (hash: 9XaoEGH44aifrIE9gnosDm/sLWWt90nSBonwPhD6BKU=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: zqi8X0Zo5zAwYHocdysxkQCkrsEmeL+fjDYjG/V3TJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:12:0b:b3:4e:04:32:67:a0:22:65:14:23:a2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Jun 13 13:00:58 2025 GMT
Not After : Jun 14 13:00:58 2025 GMT
Subject: CN=f0908d5c0be4c57fc10dbc156099175eb380d221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:da:85:f1:90:01:c2:b1:94:51:cd:e2:5d:
d9:22:7f:fe:2c:8a:82:b6:8b:44:14:7a:37:43:31:
ec:26:af:19:31:36:d6:ca:44:a3:a4:8c:8c:e4:47:
81:43:82:0b:62:12:fb:97:7c:04:37:20:0a:e4:5a:
b7:50:b2:94:7e:34:82:38:a4:a4:89:45:a5:c1:64:
a4:b9:9a:c6:91:e9:93:94:cd:1e:93:03:fc:47:89:
c3:69:8f:00:04:83:7b:28:ef:ca:28:9c:5b:99:13:
40:c9:84:d7:42:63:08:bf:9a:e9:a2:29:65:1d:86:
96:20:2a:73:68:72:ae:47:3d:64:06:dc:a4:31:e9:
15:48:96:4d:35:34:c3:5c:1d:a1:b8:5c:6f:79:67:
80:b6:f9:a5:d7:20:9b:e4:94:55:b4:e3:7e:0e:ea:
d2:d8:f4:79:2b:a7:e7:7f:12:a0:f8:2c:fc:56:5f:
c0:54:e0:4c:ab:c2:a2:6a:7a:54:37:49:48:54:45:
73:64:3c:57:da:9d:17:48:14:7b:be:f4:0d:d2:2a:
40:cb:92:54:7f:5e:65:8a:f5:b0:f8:46:cd:18:26:
a2:ee:13:4c:28:58:c8:2b:64:d1:ca:ed:1f:b3:82:
a5:49:b9:35:90:40:0f:c8:4e:34:b3:39:c5:9b:84:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:90:8D:5C:0B:E4:C5:7F:C1:0D:BC:15:60:99:17:5E:B3:80:D2:21
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6e:c1:43:15:5e:62:96:88:a0:a7:8f:65:93:83:f2:ed:ee:
03:f3:78:da:7a:86:63:6d:74:f9:1c:81:db:2d:91:e5:38:fa:
ee:a9:ff:80:22:59:45:9e:37:c7:3e:bc:31:5b:f3:1b:c5:13:
f7:d6:0e:b8:49:b0:19:ca:90:10:54:99:ea:9f:8c:b8:5d:35:
19:68:cd:52:c2:87:4d:ac:70:80:73:e4:15:63:4d:6f:6d:b8:
c3:87:69:63:ad:14:c8:68:0a:e0:b6:f2:83:a3:b4:d4:1a:d7:
2d:59:44:f6:57:25:b7:78:90:41:fa:9e:6d:fa:5d:35:dd:60:
45:b0:9a:fc:4b:14:dc:cc:85:28:3e:ae:19:e5:03:64:b5:6f:
0c:8f:d9:8f:5f:ad:e9:c7:d8:e7:9c:b5:d5:71:b3:b5:92:26:
4d:e0:32:0a:6c:b6:a3:dc:16:7d:f8:f9:2b:e9:b7:ba:22:e8:
21:3f:19:84:86:94:aa:95:34:a4:a5:59:1b:bf:55:20:1b:13:
35:39:4b:ce:03:42:4c:5a:bf:49:80:1c:1f:55:07:00:47:e9:
40:c7:9f:5d:2e:b1:c9:c6:80:02:43:db:d0:f2:aa:43:c3:f8:
99:a9:ca:33:24:e1:6f:70:a3:c5:1a:38:34:18:88:63:c6:fd:
68:cd:72:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:51 2025 by rpki-client