Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: h9H1yxtmoKwUKaua8Cal/T8WvlNvyjuZqTHOIoRaybs=
Subject key identifier: 59:6C:5D:AA:E0:7E:F3:93:F0:37:0D:9C:7B:23:21:FD:38:AD:F9:45
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 01987908BE52261B95A4F7FE067847461781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 14C5
Signing time: Tue 05 Aug 2025 07:01:12 +0000
Manifest this update: Tue 05 Aug 2025 07:01:12 +0000
Manifest next update: Wed 06 Aug 2025 07:01:12 +0000
Files and hashes: 1: 25GdIX8pGRrdAAaubJO0FxbYG-s.roa (hash: J7SjJPVMXuJzyuyQBNTx3E62SBRqK9gpWeifxFumUs0=)
2: 6WSzq5tklzrrb4CQ30LLV8NUx2g.roa (hash: UmnImARopszt+4WaNMMPCsufWGExd3hc37DvZdbg1tI=)
3: 8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa (hash: 0g/v1GDnSb/mpf5pKYYz9HEAiGcoNER98ihb6wrQqWo=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: 0ORLVbFF2BG53WhzV3ZsciHaGJLrG+Y0EvZQtyj7f98=)
5: OREDNoQ0vwPI3XM_zRsW3yzoE_A.roa (hash: 1cT3zKRDrAQDDxV5Rq7SD/mINGk0AiyR89E6Ur7LkVA=)
6: mQQXMqosDbrfiBBQFe3pss-9NtQ.roa (hash: qAb1oy5TaR+lNTajDgndtpEVHAu7ZMdgoTop9g6Wh6Y=)
7: uSaVwi6W5g3viY9NscHN3tqDzCk.roa (hash: t4D+qU5YVF27z4TGr3wG3ucQjp23my4+sKI2eFqOYYg=)
8: uumQQQ1viq_-gfcaqAufH6g_C7w.roa (hash: AM9mJlfYhSa7Wcw8Wx9nTWnnL8T0GQwXceLp5ft6/NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:08:be:52:26:1b:95:a4:f7:fe:06:78:47:46:17:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Aug 5 07:01:12 2025 GMT
Not After : Aug 6 07:01:12 2025 GMT
Subject: CN=596c5daae07ef393f0370d9c7b2321fd38adf945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dc:0a:27:22:80:14:27:8b:08:4f:e2:14:4e:
81:32:4c:05:05:9d:32:22:fe:8a:78:a5:92:e5:e2:
b7:bf:be:cb:67:0b:03:f2:17:9e:be:af:56:f5:73:
f4:2f:3f:cc:e1:74:8b:ad:e3:1f:6c:ed:5a:65:08:
ad:64:49:94:67:f1:22:2c:ab:5d:a3:69:04:04:cc:
93:94:d5:34:00:a5:a0:11:ac:6b:96:71:29:fa:62:
27:e5:6a:92:18:0a:55:a2:cc:5d:ea:d1:31:47:74:
50:30:95:20:20:2e:29:8e:95:c3:37:c1:66:96:1e:
4f:ab:ec:23:e9:88:4b:3e:84:95:14:ce:6b:32:b1:
14:18:6e:da:fc:a1:8d:cc:74:2a:a3:57:ae:0c:3a:
f3:bb:b4:80:21:70:9b:e2:0b:fb:2a:38:36:f1:69:
93:85:dc:b1:f4:79:ec:6c:f1:25:51:5f:ec:d0:10:
71:64:23:08:50:09:ad:37:24:eb:96:c2:95:5b:88:
79:b0:9d:06:7d:2d:1f:11:b9:81:a4:13:ea:d5:71:
b1:0a:1a:89:52:20:07:88:b1:0b:b1:66:a2:a6:87:
39:79:83:ba:4d:8c:dd:5c:09:58:51:d7:db:31:ef:
cf:2c:6c:69:f1:0c:0b:af:0b:a6:27:7c:cc:3a:b7:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6C:5D:AA:E0:7E:F3:93:F0:37:0D:9C:7B:23:21:FD:38:AD:F9:45
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:af:61:51:37:1f:9c:25:a7:62:e0:16:ec:71:82:32:d1:d9:
cf:c2:19:c4:b8:56:21:35:bb:9d:c0:38:67:27:13:86:b6:20:
3a:44:14:8d:c4:1b:3f:aa:f1:91:fe:06:e5:21:af:eb:91:a8:
45:fc:b1:f8:bd:1b:e5:7d:f3:e3:dc:8b:bb:67:99:6e:16:fc:
49:13:08:f1:51:4f:0d:70:5f:d2:58:b4:ac:01:c8:53:8e:95:
3b:cd:82:60:0b:34:d9:3b:86:42:67:f5:71:90:ea:a3:48:cd:
79:0c:8a:cc:ae:83:c2:7e:fa:f1:b0:b8:68:12:6e:11:8a:0a:
92:bb:a8:c3:51:ff:37:f2:4a:e3:e6:e1:08:84:29:79:8f:21:
08:d8:da:7c:51:41:32:e5:b0:d2:af:6c:dd:08:e4:72:37:fa:
80:33:ac:87:f6:ed:b0:24:d6:57:47:d8:18:12:5c:88:3d:0b:
0a:eb:03:09:18:19:36:5c:9c:2a:18:31:7f:fc:0b:7a:53:0b:
76:2d:c2:ee:8b:ba:42:91:81:4b:85:73:5b:19:c7:3b:f2:9e:
71:a3:20:1a:bb:59:83:71:ea:0d:ce:0a:26:ae:a4:d7:fc:e2:
c8:8e:cf:fe:28:4e:fe:d4:9b:4d:b8:9b:a3:fb:6e:03:46:1a:
7d:fa:7b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:26:14 2025 by rpki-client