Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: je0ytbvaGMYG+5XLOgJvJWsjwcIfuhtSqNCEuhiPP04=
Subject key identifier: 37:67:23:EA:27:3C:E6:CD:FC:CE:CE:14:BE:A1:A7:12:01:DC:FD:00
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 01976C98D6DA02AE94DD46F5CCB617A251BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 143A
Signing time: Sat 14 Jun 2025 04:00:45 +0000
Manifest this update: Sat 14 Jun 2025 04:00:45 +0000
Manifest next update: Sun 15 Jun 2025 04:00:45 +0000
Files and hashes: 1: 25GdIX8pGRrdAAaubJO0FxbYG-s.roa (hash: J7SjJPVMXuJzyuyQBNTx3E62SBRqK9gpWeifxFumUs0=)
2: 6WSzq5tklzrrb4CQ30LLV8NUx2g.roa (hash: UmnImARopszt+4WaNMMPCsufWGExd3hc37DvZdbg1tI=)
3: 8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa (hash: 0g/v1GDnSb/mpf5pKYYz9HEAiGcoNER98ihb6wrQqWo=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: /EoXdmnNpds9jkeZtISnwurmtbg6bnKog7m3PIJZs0A=)
5: OREDNoQ0vwPI3XM_zRsW3yzoE_A.roa (hash: 1cT3zKRDrAQDDxV5Rq7SD/mINGk0AiyR89E6Ur7LkVA=)
6: mQQXMqosDbrfiBBQFe3pss-9NtQ.roa (hash: qAb1oy5TaR+lNTajDgndtpEVHAu7ZMdgoTop9g6Wh6Y=)
7: uSaVwi6W5g3viY9NscHN3tqDzCk.roa (hash: t4D+qU5YVF27z4TGr3wG3ucQjp23my4+sKI2eFqOYYg=)
8: uumQQQ1viq_-gfcaqAufH6g_C7w.roa (hash: AM9mJlfYhSa7Wcw8Wx9nTWnnL8T0GQwXceLp5ft6/NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:d6:da:02:ae:94:dd:46:f5:cc:b6:17:a2:51:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jun 14 04:00:45 2025 GMT
Not After : Jun 15 04:00:45 2025 GMT
Subject: CN=376723ea273ce6cdfccece14bea1a71201dcfd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f6:2f:16:20:29:0f:34:e3:e8:9d:ce:5c:5a:
39:dc:a4:85:fa:8a:18:8f:9d:f1:3c:61:56:18:7b:
98:39:1f:56:2c:8d:d5:11:df:98:7a:bb:c0:bd:6d:
3d:46:b7:22:4a:e6:31:14:9e:55:f3:0b:e9:97:0c:
a8:6f:7d:13:6f:f1:a8:88:15:e1:74:b9:72:ee:cb:
61:13:79:8d:75:ba:ee:d2:b6:48:e6:f2:d7:19:82:
a4:9e:bf:3e:52:5b:fc:63:84:b3:7a:6c:d0:cc:70:
37:0e:f9:69:fe:d1:3e:a6:9f:92:f8:87:4a:d2:be:
0c:77:8d:10:a5:7d:55:d3:ca:3a:13:b8:9a:97:c8:
1a:a0:d8:94:8f:d6:ea:83:e8:0c:15:e5:0f:5e:f4:
b5:23:80:29:5c:4b:af:e5:d6:a4:58:7b:fa:9b:c9:
88:3b:a3:5b:4d:9c:92:7c:09:1b:68:ef:58:65:bd:
44:92:d2:06:be:23:0f:fb:76:b4:e6:98:28:5d:7b:
26:db:02:d7:b5:15:a9:77:65:11:e6:83:fb:ef:31:
7f:50:7f:88:56:51:54:d3:56:a8:3d:2d:d2:d0:53:
80:30:18:f3:9c:0b:06:30:31:d5:a3:98:94:a2:29:
83:d7:df:7a:48:90:e1:a6:89:58:b3:fe:db:7b:20:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:67:23:EA:27:3C:E6:CD:FC:CE:CE:14:BE:A1:A7:12:01:DC:FD:00
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e0:c2:5d:d1:51:d6:10:2b:b9:a1:47:21:14:96:b4:16:e7:
a6:f4:33:4e:f1:cd:03:4d:c0:0d:f0:00:90:2e:5a:8a:03:bc:
a0:94:18:b9:01:20:f1:96:47:e0:0a:9e:40:a4:83:e1:fa:ce:
9e:86:d4:63:0e:a1:95:68:9b:7b:bb:05:5d:05:92:a6:dc:06:
5d:ff:0d:a8:7c:e5:08:97:02:77:a8:40:2a:f9:a2:c0:24:4d:
d9:50:66:41:41:e3:07:36:8b:62:d6:c1:81:96:fc:40:64:f9:
5e:9f:d2:01:02:67:4b:41:d2:6f:58:53:43:46:7b:20:8f:95:
1e:60:0c:ae:d2:e8:04:18:f2:c6:8f:58:29:a9:f8:f0:5b:d1:
03:50:72:9b:36:bb:38:99:6d:4e:2a:e0:98:ec:cd:db:b6:87:
27:b1:88:ca:e8:f2:f4:8a:4d:87:d6:58:52:95:23:88:b0:c4:
be:5a:65:cf:05:8d:8b:0f:c8:c3:1f:7b:96:59:87:9b:f3:29:
a5:30:5e:fd:fd:72:11:f9:03:91:81:85:fd:24:e4:bc:b8:ac:
01:73:77:d4:69:d8:31:aa:2c:23:f7:02:7e:ef:ac:70:2f:1b:
00:25:f6:e7:2b:4b:93:8a:c0:27:9d:51:0e:30:7b:2e:ad:5f:
5c:b4:5c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:59:22 2025 by rpki-client