Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft
File: iqaY-D40KcieNMjy77WxIBoY_Pc.mft (raw, json)
Hash identifier: fg9sVqQTo1z7a5TGb04IeuOOZUa85IDLzssKphAqFFA=
Subject key identifier: F6:CF:78:45:9E:E5:14:FC:41:92:75:1F:7B:89:F4:BB:A6:06:3D:80
Authority key identifier: 8A:A6:98:F8:3E:34:29:C8:9E:34:C8:F2:EF:B5:B1:20:1A:18:FC:F7
Certificate issuer: /CN=8aa698f83e3429c89e34c8f2efb5b1201a18fcf7
Certificate serial: 01977A1D85887ABC73FB25331D12F2D732CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqaY-D40KcieNMjy77WxIBoY_Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft
Manifest number: 1599
Signing time: Mon 16 Jun 2025 19:00:44 +0000
Manifest this update: Mon 16 Jun 2025 19:00:44 +0000
Manifest next update: Tue 17 Jun 2025 19:00:44 +0000
Files and hashes: 1: Eklv5iMrpdIb57nofb-2LDtZiMo.roa (hash: yKALUmc+NQQTzWDEWN3x1mf1BWmjZYZaxlqX1YAmy08=)
2: iqaY-D40KcieNMjy77WxIBoY_Pc.crl (hash: fuq0Wvc6P6KZxSq/nNi5pPjehZVJFG/qOf1eJMyg5sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqaY-D40KcieNMjy77WxIBoY_Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:85:88:7a:bc:73:fb:25:33:1d:12:f2:d7:32:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa698f83e3429c89e34c8f2efb5b1201a18fcf7
Validity
Not Before: Jun 16 19:00:44 2025 GMT
Not After : Jun 17 19:00:44 2025 GMT
Subject: CN=f6cf78459ee514fc4192751f7b89f4bba6063d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:49:03:7a:75:f1:00:92:0c:91:f0:07:14:bf:
be:44:ef:fe:7b:17:05:a1:4b:d7:c6:cd:b6:3f:68:
00:28:f5:bb:c4:cf:ce:70:24:3f:f6:c9:7b:2f:e5:
a0:9e:63:9e:b7:65:81:4b:4d:a4:f3:16:27:a2:04:
2c:be:2a:03:5c:98:c2:3f:3b:9a:94:cf:d4:af:b2:
f6:c0:7d:bb:ea:26:1f:ea:57:62:7b:da:48:a8:43:
49:cf:f9:07:5d:d7:38:d8:6b:61:6b:59:b9:9e:2a:
c6:6b:57:db:cf:c7:e3:bc:7d:c4:f8:d9:5c:a2:ac:
84:2f:67:c4:cf:8e:5b:2b:a1:4b:66:3e:90:c3:76:
45:4d:28:22:df:65:45:7e:60:eb:8f:25:51:31:b6:
95:a7:d1:eb:ca:d7:1c:48:e5:ab:bf:b8:18:26:20:
65:9e:d2:82:2a:5e:10:8a:68:7e:06:48:52:1d:89:
a1:fa:7e:39:56:40:8e:7a:44:7c:ef:b3:85:63:9e:
ba:85:cf:c3:3f:a4:e8:95:5c:ca:14:b6:d2:9e:ae:
99:3a:6a:63:81:2d:e1:d6:65:a9:7c:cf:ad:97:cd:
8a:7c:cf:4d:a0:04:c6:e9:d1:7c:71:cc:89:07:66:
e7:c3:03:67:d5:77:1e:e5:be:30:9b:fc:e8:38:76:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CF:78:45:9E:E5:14:FC:41:92:75:1F:7B:89:F4:BB:A6:06:3D:80
X509v3 Authority Key Identifier:
keyid:8A:A6:98:F8:3E:34:29:C8:9E:34:C8:F2:EF:B5:B1:20:1A:18:FC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqaY-D40KcieNMjy77WxIBoY_Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9d:45:ae:d2:29:3c:dd:8b:7a:fd:31:c4:e5:64:62:d5:7f:
ba:54:38:ed:de:f4:00:2a:98:57:68:88:a1:1b:15:17:a4:da:
98:9c:29:59:1d:74:31:4b:d0:8b:e4:2b:e4:17:4c:3c:d0:8a:
03:1b:ad:71:a0:fa:5b:2a:3e:f8:d0:b2:87:2e:54:72:f0:ab:
a3:d0:96:ea:d1:da:dd:8a:78:a0:92:f9:cf:96:9f:5b:de:86:
a4:f3:3d:7e:4c:88:86:99:2b:45:94:df:40:43:61:b2:b5:39:
cd:d1:c1:b6:2a:e4:85:b5:da:da:02:8f:f2:c2:28:c1:7b:bb:
27:d2:6b:da:6b:81:0a:53:54:7d:95:4f:e0:e6:b9:e4:0d:2a:
82:a3:14:71:fb:c1:2e:d7:73:41:10:26:ba:bc:14:94:20:a7:
7c:1d:51:65:9c:4b:a4:df:61:fa:9d:bb:60:c1:74:2a:fe:47:
fc:cc:c8:a5:2b:32:c7:b7:9e:4f:98:ee:4d:aa:f9:32:6f:0a:
eb:5d:2d:2f:80:05:27:78:91:07:9f:f7:49:46:6c:a5:d1:0f:
d8:62:dd:a3:83:b7:e9:eb:90:2a:0c:27:b0:f7:d8:f3:4d:b2:
da:3e:94:63:4e:36:9e:f3:2c:d9:f6:c3:50:2f:26:d1:a7:e1:
77:24:9c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:15:40 2025 by rpki-client