Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier: IEXT12tIFyMeGXEGp28WxiNeBLdF59g7nMgFizuH4VY=
Subject key identifier: 47:96:53:54:45:29:0F:8F:4E:5B:1B:0F:1B:0D:CA:3D:95:59:D0:BB
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial: 01977075FEA3130E6B11F3FE6F35691B144A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number: 0EFC
Signing time: Sat 14 Jun 2025 22:01:10 +0000
Manifest this update: Sat 14 Jun 2025 22:01:10 +0000
Manifest next update: Sun 15 Jun 2025 22:01:10 +0000
Files and hashes: 1: glHtLecTNUxeR4oxupaJRTlQLos.roa (hash: tjH899kftJHgu4JmkbHHTA84WKPpmWW00cLzLNo7wBg=)
2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: Blq9jVrAf+4Yn/cO2LIepXAguoBYxNHsk/eqsunZfHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:fe:a3:13:0e:6b:11:f3:fe:6f:35:69:1b:14:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
Validity
Not Before: Jun 14 22:01:10 2025 GMT
Not After : Jun 15 22:01:10 2025 GMT
Subject: CN=4796535445290f8f4e5b1b0f1b0dca3d9559d0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f9:76:4b:b1:0d:19:e4:f2:66:ae:d8:f1:3a:
f3:c0:51:23:94:d8:51:63:8e:58:f6:85:42:f8:e1:
98:7c:10:e8:84:f5:9a:88:c5:0a:bd:5c:6f:da:e1:
d9:ee:e5:28:b3:62:fb:72:20:1a:ca:32:71:55:61:
67:0f:5c:7d:dc:d7:72:79:ac:47:ad:3e:60:1c:d2:
4c:46:58:49:3a:45:19:a1:2c:dc:ef:e1:95:b8:14:
07:03:74:aa:72:57:09:f5:5a:dd:71:7b:bb:e8:89:
85:ea:82:ba:a4:cd:e8:18:4c:60:6e:78:13:9b:7a:
5d:04:42:57:15:af:87:55:51:98:ad:51:f3:4b:dc:
2b:28:cd:52:f4:49:d8:c1:93:75:9f:dc:33:61:37:
e7:22:ec:0e:98:0b:1b:00:51:55:29:9d:66:d3:09:
a5:10:30:9c:aa:77:98:18:83:8d:26:ea:69:90:fe:
74:c7:4c:60:67:d8:1f:c3:ed:6a:a8:dd:25:f8:81:
25:31:d6:20:ea:80:8b:54:d1:4a:4b:76:85:a4:ee:
13:5c:c3:1d:b4:8a:83:2f:12:47:fd:80:68:61:5d:
35:0e:e1:a5:69:56:0f:f9:1e:63:a5:8d:a0:48:bc:
6e:ca:2f:74:f6:f1:24:91:d7:d0:cb:1a:22:11:57:
42:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:96:53:54:45:29:0F:8F:4E:5B:1B:0F:1B:0D:CA:3D:95:59:D0:BB
X509v3 Authority Key Identifier:
keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f0:cc:88:79:58:e3:7a:fd:d4:9c:a8:9c:48:35:b6:de:38:
4b:21:8c:de:53:5e:5f:f4:bb:0a:73:e3:03:fe:81:74:d6:47:
bd:1a:92:48:78:16:2f:1d:83:92:fc:92:d6:a2:d2:ba:ba:2c:
4b:a7:49:87:c3:f2:86:04:b0:b6:d1:4d:e7:de:bb:9a:39:77:
79:70:70:75:6b:f9:c9:b3:22:25:f9:e3:71:4e:51:1e:5a:b1:
a0:5b:fe:c0:0f:50:aa:70:78:25:74:4c:e3:10:07:56:e7:2f:
aa:45:65:0a:dc:6d:11:53:28:69:ec:c7:3e:bb:ff:da:40:67:
ec:25:a2:27:48:55:51:9b:6e:38:30:ed:30:bd:4c:a8:68:c7:
1a:31:cc:b6:e5:39:bc:1d:d3:ce:e2:b8:71:cf:a8:29:86:81:
bd:8c:0d:91:f8:da:7b:3c:aa:9d:ea:00:48:5d:4f:d9:33:66:
2a:be:29:26:b0:29:42:cb:55:7c:86:60:b9:21:b9:f5:8a:e0:
e6:d2:44:59:08:64:c8:79:77:99:09:16:b0:c8:31:45:f2:39:
15:61:ad:13:b8:fd:55:7d:ed:da:42:19:f0:2d:d7:4a:91:0d:
d0:ec:9b:df:5d:b7:02:83:f1:0c:f3:8a:e8:0c:e8:7d:86:39:
c2:a0:e0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:43:17 2025 by rpki-client