
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
File: iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft (raw, json)
Hash identifier: e9+/FGtUp2b2DVRDPuflDFTWBgcMy/iQ7MMF2uOIb5w=
Subject key identifier: 4C:AF:8C:7B:E9:E4:74:6A:BB:34:81:24:66:EA:B7:A3:FD:CA:AB:3B
Authority key identifier: 88:E8:82:BF:96:4F:70:92:C4:3C:DC:F7:55:0D:E9:56:2C:26:A0:28
Certificate issuer: /CN=88e882bf964f7092c43cdcf7550de9562c26a028
Certificate serial: 01976997AF60B236CD6E56DCD78CC96A4D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
Manifest number: 01DD
Signing time: Fri 13 Jun 2025 14:00:37 +0000
Manifest this update: Fri 13 Jun 2025 14:00:37 +0000
Manifest next update: Sat 14 Jun 2025 14:00:37 +0000
Files and hashes: 1: UZVUY94sqKLEh0icWoOQh0bntwI.roa (hash: vpvG9SY3H1VjvlXeI35sSNyZFm3fdFFooAVPM0TU2c0=)
2: iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl (hash: WrbivKgvAUycy2w/sL0sSe2E4QrAnX5Tsqhsb4QHOvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:af:60:b2:36:cd:6e:56:dc:d7:8c:c9:6a:4d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e882bf964f7092c43cdcf7550de9562c26a028
Validity
Not Before: Jun 13 14:00:37 2025 GMT
Not After : Jun 14 14:00:37 2025 GMT
Subject: CN=4caf8c7be9e4746abb34812466eab7a3fdcaab3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:81:18:0a:da:6c:cb:86:20:25:7e:92:87:65:
e9:7e:17:9a:11:d8:54:51:a2:0d:5b:26:cc:37:2e:
ff:b3:93:0a:eb:73:38:30:73:21:b7:d6:1a:ff:89:
41:bc:b5:d7:1c:ff:de:58:8a:10:e7:c7:c5:5d:81:
0c:b4:7b:b5:fe:1a:2d:09:95:83:fd:09:d1:57:c7:
5a:97:71:3a:fc:42:d3:49:ce:6f:ae:75:3b:e9:98:
c0:00:0d:b9:f3:a3:13:fb:23:99:f5:fe:be:32:55:
d6:e4:f4:4d:5c:59:0a:32:0c:6b:69:c9:06:f8:ff:
d8:f9:c4:7d:dd:c8:4f:1d:0b:10:76:75:eb:f0:f3:
21:f7:2c:06:8d:21:59:ac:84:07:50:d7:61:0e:1e:
96:4a:1c:de:86:dc:80:2b:c4:3e:c1:7a:da:70:e2:
08:7d:bc:60:5f:f0:ac:8e:0b:e3:d3:a6:ad:0f:f9:
5d:01:3e:19:74:c2:59:62:26:81:54:9b:c7:22:d6:
69:a4:cc:24:89:73:3b:57:01:a6:b1:01:bb:cd:9d:
a2:72:d9:97:f4:ed:d7:0d:03:bd:e3:f3:d7:f0:d0:
9b:e2:08:6d:e2:c8:49:64:56:c1:7f:58:f4:65:e7:
9d:25:51:b4:46:d6:7d:c7:8f:4a:64:47:8e:a4:5b:
40:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AF:8C:7B:E9:E4:74:6A:BB:34:81:24:66:EA:B7:A3:FD:CA:AB:3B
X509v3 Authority Key Identifier:
keyid:88:E8:82:BF:96:4F:70:92:C4:3C:DC:F7:55:0D:E9:56:2C:26:A0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:de:b5:bd:aa:48:12:1d:73:04:dc:87:bf:c6:75:aa:e0:f6:
fb:0b:8d:e5:d1:c4:2c:5e:7a:80:5a:17:e8:2a:e7:84:ba:07:
b5:a2:50:5a:8a:1a:0d:32:ed:7f:6d:ae:19:60:27:88:65:85:
2a:ba:a1:a5:77:2f:b1:9d:dd:6b:84:98:b6:54:3d:aa:47:32:
a7:92:ec:1f:b9:03:52:bb:c6:e2:e9:10:2f:9a:37:20:f5:cc:
12:d9:c1:0f:4e:ff:61:28:67:93:06:be:cc:e3:5d:a6:3e:29:
a8:e5:c7:f3:a1:1d:86:bf:ea:14:e8:7f:8e:cc:24:c4:91:c6:
cf:a2:8b:40:3e:7f:ab:18:11:c6:ca:09:5b:5d:d2:2c:ad:6f:
2f:15:e8:e2:0d:7b:ab:7a:a2:9a:bf:ef:48:b5:f3:fa:f5:26:
c9:6f:d6:a6:fc:9e:9a:80:13:00:8c:7d:4b:f2:8d:9f:d7:6b:
45:4c:9d:36:34:7b:bf:e5:93:72:88:86:b2:8b:54:a2:4e:e7:
d1:c8:ec:16:4a:38:0d:9d:a3:16:67:21:7a:af:d5:ed:f9:26:
e8:76:d3:ee:e3:7f:5c:b9:1b:58:de:54:b0:5b:72:88:0e:c0:
2d:76:b3:66:ed:11:b3:e0:eb:0a:ba:7f:ee:8a:8c:74:75:bc:
f7:9e:ca:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:24 2025 by rpki-client