Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
File: iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft (raw, json)
Hash identifier: 9nRdsPcsuftG0tqEopSulLpia3Mp5kyFKanOO1FHLDE=
Subject key identifier: D7:42:33:A0:3C:21:2D:81:42:6C:3D:61:3C:7A:D6:28:0A:25:BE:9D
Authority key identifier: 88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
Certificate issuer: /CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc
Certificate serial: 01976F9A25A86C84482AE95C1968DE2CF06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
Manifest number: 0438
Signing time: Sat 14 Jun 2025 18:01:02 +0000
Manifest this update: Sat 14 Jun 2025 18:01:02 +0000
Manifest next update: Sun 15 Jun 2025 18:01:02 +0000
Files and hashes: 1: XBo1pVVrARNWOJzVGLIS7aXEyvs.roa (hash: LHmi+bbPW6X6RSAyxvQlIttnolx/pGqPJGLDRqAXVIU=)
2: iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl (hash: BaX2EWMiiR25472g+O5QO5M4aNhDSg4/2KGNu0s1Eio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:25:a8:6c:84:48:2a:e9:5c:19:68:de:2c:f0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc
Validity
Not Before: Jun 14 18:01:02 2025 GMT
Not After : Jun 15 18:01:02 2025 GMT
Subject: CN=d74233a03c212d81426c3d613c7ad6280a25be9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:46:7d:97:c9:a7:44:b1:57:6b:66:f4:b2:
67:d6:1c:56:d2:48:d3:a8:04:4c:c9:c3:bf:46:cc:
a8:50:32:d2:b5:8d:16:87:5f:8e:11:b3:65:6d:47:
59:5c:59:7e:d4:35:bb:a6:54:b8:22:ce:5c:79:eb:
50:84:4b:95:8e:b6:13:74:4f:15:b6:3a:eb:d5:8c:
8e:37:39:da:11:2b:ca:22:c6:ec:a0:46:4d:2c:3c:
cb:76:ae:24:10:62:29:9b:40:96:d5:20:1f:90:ae:
34:39:c3:a8:61:76:61:f5:b3:8b:f4:3e:af:a4:47:
a6:7c:c3:7e:b5:49:82:0b:6b:f1:5a:54:5f:2e:ec:
13:70:46:41:63:08:c1:f3:9d:10:49:d0:89:12:17:
9d:f1:f8:0e:fb:37:db:58:74:0f:00:ac:e5:4d:93:
7c:ab:36:d8:3b:66:05:14:08:a0:99:4f:fd:b8:fd:
3d:22:dc:65:4d:c3:3c:69:28:26:bd:dc:46:44:1b:
e9:f2:34:da:d3:5f:c6:09:cc:8d:0a:5d:d3:97:d6:
ee:54:ea:bf:95:a8:d8:b8:1a:66:69:38:63:81:d1:
5a:d8:4b:1b:57:f5:15:8b:2f:ed:1b:08:d1:b0:d5:
c7:e4:8a:0b:e1:cc:70:e8:dc:f4:15:05:4a:8b:33:
11:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:42:33:A0:3C:21:2D:81:42:6C:3D:61:3C:7A:D6:28:0A:25:BE:9D
X509v3 Authority Key Identifier:
keyid:88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1d:f5:59:9b:dc:5d:c4:47:ad:29:65:6d:b1:2b:e0:f8:2e:
d0:70:f1:f5:9b:a8:4b:8a:34:e9:f5:a8:d4:b4:0f:53:57:9a:
b4:a2:c4:51:d8:15:72:a7:c1:6f:87:1b:17:36:b9:1b:e6:7b:
58:7e:5e:27:c4:fd:b3:c1:0c:30:b2:d6:7f:07:58:a7:2c:33:
3e:b0:dc:98:11:00:47:2d:4c:40:90:66:20:a1:9d:29:a8:dd:
6b:e5:b9:72:78:d4:fc:3f:a9:b3:ed:b4:f1:d5:0c:f0:c5:44:
8e:da:dd:98:68:cd:71:d1:ec:64:be:8a:e8:e9:92:19:47:27:
2b:e3:83:a7:22:cc:25:d4:c5:51:66:51:0f:65:ba:73:63:b2:
8b:2c:43:e6:52:d2:34:15:a8:b4:2e:fe:e3:7b:17:1d:2d:69:
f5:48:9c:06:11:8a:1c:55:74:7b:f0:c9:77:9d:e3:79:a7:64:
1f:a4:70:d4:56:73:ef:89:48:2f:84:cc:9f:9b:b6:56:cd:e3:
5d:1b:2b:a5:c6:9f:44:ba:6a:97:39:1e:11:b0:37:d6:ce:e3:
33:3f:3c:6c:86:a0:a7:52:1e:e6:54:28:f6:38:f1:75:9d:e7:
91:b9:04:a0:38:3f:aa:74:e8:da:ae:0d:4f:50:16:79:3f:ee:
e8:d2:d7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:54:38 2025 by rpki-client