Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
File: iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json)
Hash identifier: Bh15EE8k6YseiqE1jDz81+lF7Z7Fr9RpkBn2/EX+f6Q=
Subject key identifier: 15:6C:28:0F:F8:C6:D1:B8:41:74:1A:D8:6A:C9:C7:CD:CD:91:2C:BE
Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Certificate issuer: /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Certificate serial: 01976A3CD731AD7BB2CC44161909E7DD2E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
Manifest number: 08A5
Signing time: Fri 13 Jun 2025 17:01:01 +0000
Manifest this update: Fri 13 Jun 2025 17:01:01 +0000
Manifest next update: Sat 14 Jun 2025 17:01:01 +0000
Files and hashes: 1: J2gFJxTXec_tCl5fYmT5ueu90dA.roa (hash: eqh0jr48WZnOgc9VcsakSv2fxPv1f923UQBSwi0u554=)
2: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: FaJ7KnOZNaOJ5OD0pt2z9UtnqQ3rE4Tn9d0z+nVO/Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:d7:31:ad:7b:b2:cc:44:16:19:09:e7:dd:2e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Validity
Not Before: Jun 13 17:01:01 2025 GMT
Not After : Jun 14 17:01:01 2025 GMT
Subject: CN=156c280ff8c6d1b841741ad86ac9c7cdcd912cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:f2:e7:fe:34:a0:31:b0:f7:b3:e4:f2:ca:
c3:ac:d8:d0:67:f0:ab:5e:9f:4d:f5:e7:4c:99:b0:
91:14:0f:93:5b:10:52:2e:f4:a0:f0:48:f7:b0:a6:
db:3c:f1:53:e3:dc:fa:f8:59:91:e5:f2:78:01:f9:
2e:7d:32:38:dd:b3:e7:bc:51:a4:a2:08:1b:2c:88:
81:ec:f0:c0:6f:38:30:6f:0b:39:01:86:83:a6:a2:
ed:02:f7:db:63:08:86:da:f0:0d:ee:af:11:94:a6:
94:fb:e8:11:24:86:3b:9e:4b:20:a1:9d:82:5c:4c:
0c:61:76:b8:44:13:b1:3b:11:d2:61:92:24:a5:c3:
6f:c9:95:53:ec:17:06:37:de:03:cd:94:04:43:d8:
4d:da:45:a1:8e:d5:97:84:37:f8:d2:16:9e:08:4e:
8b:ac:37:d5:18:c0:2f:2a:bb:ec:1b:8d:5d:29:97:
65:42:5f:fb:51:82:45:f4:28:78:f7:ac:7b:7d:d0:
08:cc:ae:be:5f:8e:08:06:84:ce:6a:78:ba:3f:59:
4f:4c:d9:2c:a1:7e:da:7d:1c:34:32:69:76:f2:2c:
1c:36:73:e0:0f:8a:f3:a1:52:11:07:9a:62:a9:4f:
f2:7b:be:d0:14:47:21:4b:86:82:a3:21:50:ff:12:
c0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6C:28:0F:F8:C6:D1:B8:41:74:1A:D8:6A:C9:C7:CD:CD:91:2C:BE
X509v3 Authority Key Identifier:
keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:43:ea:4b:57:19:1b:93:74:c1:65:6d:2d:d3:28:1e:79:0e:
dd:55:52:bf:36:f9:bd:6e:20:c6:37:d0:28:8f:6a:d0:1d:f3:
50:00:4a:b6:17:b8:14:29:3d:73:ce:9b:47:de:2c:eb:6f:21:
f0:6b:59:b4:63:1e:3f:b6:c0:52:0d:5b:75:d4:48:88:64:ec:
3a:d1:f4:ed:2d:25:da:13:ef:15:45:79:0d:df:d6:6a:1e:44:
2e:05:98:62:42:7a:4a:62:64:e1:b5:0e:d9:3c:30:85:61:b9:
33:24:59:d6:c3:20:06:5b:3a:96:d7:ae:31:e7:a1:0c:9c:0c:
0a:f1:c7:5d:41:e5:23:94:d8:ac:0e:8d:61:65:00:21:ec:37:
86:14:02:b2:8d:74:96:2f:44:a3:58:02:19:e6:50:c9:e4:a9:
ad:d1:44:44:82:6f:0e:bf:15:2f:7c:81:a3:22:8b:f1:d4:69:
b9:74:ca:f7:ad:43:ac:3d:61:b0:82:cb:0a:f8:71:34:4f:da:
2c:85:4c:52:5c:d1:20:f0:f2:9b:1b:31:6a:e1:fa:b7:f7:f0:
54:8b:1a:b5:fc:a0:68:89:87:5a:78:33:78:ca:02:9f:3c:85:
f7:d6:2e:9b:1e:ba:49:c6:2c:07:f6:29:ec:8f:0b:7b:3b:dc:
91:78:74:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:51:26 2025 by rpki-client