Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: bmD08ZxvHWmj7TX0Ly1+YDgF2kixW79sNRCNVbXwZTA=
Subject key identifier: 87:CB:83:C7:85:FC:04:22:77:90:7C:F6:E0:CC:8D:0E:B8:F3:E5:32
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 0197892298B50F930F2962B852E9C53F2E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0B0A
Signing time: Thu 19 Jun 2025 17:00:35 +0000
Manifest this update: Thu 19 Jun 2025 17:00:35 +0000
Manifest next update: Fri 20 Jun 2025 17:00:35 +0000
Files and hashes: 1: 18pU9OUJZfEjtQtM3d6KCEE-wf4.roa (hash: g9Yx6RdVIwFFC/gP3XLwi8dipV0AyWlMkba67EAqwI4=)
2: f2nWyu3vigJSlBOetOrjZwH1G1A.roa (hash: UMryrqtW8NDhWGWT0rJw80JqEFYALJXz4j6oSIXBhd4=)
3: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: 5rj4kUa+M563AT5+myTLK6RVAA0/p8ueKE154CrFqMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:22:98:b5:0f:93:0f:29:62:b8:52:e9:c5:3f:2e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Jun 19 17:00:35 2025 GMT
Not After : Jun 20 17:00:35 2025 GMT
Subject: CN=87cb83c785fc042277907cf6e0cc8d0eb8f3e532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5a:26:89:e0:ec:a9:80:da:82:d1:6e:05:39:
6a:1e:d5:7b:0a:47:af:59:75:9b:37:7c:56:e6:9f:
ed:81:28:d4:61:c9:55:8a:38:97:99:20:58:95:97:
c7:67:14:46:73:de:28:96:91:95:9a:1f:6f:50:5a:
59:73:ad:e6:3d:35:d6:f0:83:ce:6a:ad:61:60:3a:
11:30:6c:4b:65:cb:be:11:03:77:75:49:fb:7d:64:
af:73:ff:5e:c5:67:81:48:1f:7e:f8:83:1d:04:5a:
61:98:2e:f2:1c:c9:30:0f:ac:91:e6:4d:9c:23:57:
ad:1b:a2:8a:fc:4c:1c:81:53:7e:8c:c3:75:3e:de:
93:a5:3f:6e:0c:6d:8e:f7:0d:0b:ad:71:06:1c:b4:
de:04:82:d3:1e:bd:f0:a9:86:4f:35:de:ba:c5:c9:
63:3a:bc:f5:2d:58:73:b8:fe:eb:01:54:3d:bf:8a:
99:e5:21:50:ed:16:65:2b:bc:18:e3:70:a9:68:c7:
48:16:d6:eb:14:3a:7b:f0:79:69:f5:6f:24:b0:80:
6e:61:53:63:8c:4a:5d:3a:a6:ee:2a:fd:dd:48:39:
ec:4e:fb:23:ed:2c:41:03:04:21:99:f3:dc:4d:7f:
fa:fa:91:62:ee:15:50:c3:be:b9:92:f5:7a:56:c9:
8f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CB:83:C7:85:FC:04:22:77:90:7C:F6:E0:CC:8D:0E:B8:F3:E5:32
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2c:c9:01:ef:03:d4:1d:e7:5e:f2:b0:3a:27:dd:bb:49:2e:
f7:c4:a3:25:e0:22:c5:ae:b5:b4:ee:d9:b2:e5:ff:1f:37:b7:
57:14:16:da:08:96:8d:cb:c1:99:81:d7:3d:35:6e:8b:35:17:
fe:6f:73:29:1b:df:0b:08:08:9c:46:63:1c:82:67:e6:ec:ea:
9c:ae:7f:09:a5:78:21:6a:87:3f:46:67:8e:48:16:df:03:c5:
67:d4:f5:09:06:f1:ea:56:eb:ba:3c:c0:bb:fc:ce:a1:00:bc:
b4:85:55:6d:81:4c:15:68:77:c4:8b:2f:5d:62:f5:73:49:29:
d0:7e:a6:52:74:eb:8a:6c:10:c3:d8:e0:3a:12:ca:d6:ac:aa:
4c:91:ef:43:46:1b:77:83:45:8f:20:f2:93:35:1a:62:96:e1:
ff:a2:76:8c:3f:ac:1d:ab:0e:78:5d:c8:40:9f:cc:e7:b2:b9:
a5:d7:a7:00:0b:5f:6e:b6:8a:7a:91:52:52:6f:c9:bb:97:20:
48:f2:f3:1d:a3:c9:1a:42:63:5e:92:b6:17:65:97:0e:fa:b8:
db:63:e8:85:b5:f2:1c:c6:13:0c:17:e7:5b:13:64:74:9d:9f:
e4:21:d1:f3:6f:c9:db:0f:cb:f7:78:8b:67:93:06:ae:06:9e:
eb:04:55:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:09:51 2025 by rpki-client