Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
File: iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft (raw, json)
Hash identifier: AeBL+id4ch12nDF7H+yhUgg2Lcohifro+aiD6NltTk4=
Subject key identifier: 4C:E0:58:2E:39:65:7D:76:8A:8E:95:E1:87:46:86:5A:38:93:A5:8D
Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Certificate issuer: /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Certificate serial: 019769CE609CC088B268A62B0C9EEBF83D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 15:00:22 +0000
Manifest this update: Fri 13 Jun 2025 15:00:22 +0000
Manifest next update: Sat 14 Jun 2025 15:00:22 +0000
Files and hashes: 1: RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa (hash: pKnXAopaFCsi1rLxZMLLXoTv9xoOBoXWRjgeegBslqw=)
2: iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl (hash: CLtI+oGgifJebNeMrhEfFAdBHe09qUL9BmVM4P1Rscs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:60:9c:c0:88:b2:68:a6:2b:0c:9e:eb:f8:3d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Validity
Not Before: Jun 13 15:00:22 2025 GMT
Not After : Jun 14 15:00:22 2025 GMT
Subject: CN=4ce0582e39657d768a8e95e18746865a3893a58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:ff:0e:68:27:d7:7f:eb:a1:9b:95:ea:d1:
6e:21:28:db:78:35:21:08:71:12:7f:29:11:90:82:
e1:cb:70:74:3a:70:3b:e0:31:17:fa:ed:cc:90:8f:
80:64:20:8d:a0:da:b4:08:f0:d2:6a:93:a4:90:0e:
55:ee:bc:6c:2a:14:f4:2b:e6:ff:db:e5:33:7b:03:
c8:e0:6a:d5:2c:bd:cb:78:31:59:0f:8d:53:db:88:
2d:a8:81:e9:dc:6c:ed:18:5c:d2:b2:67:38:9e:4c:
9f:e2:ff:c0:6e:4a:10:6f:e3:b7:52:1f:54:3d:83:
64:95:c7:48:9a:f6:15:04:d3:ea:8c:f8:9e:cb:d2:
c4:a6:b1:ac:6f:cd:2f:d0:a0:07:88:c9:ef:f4:de:
0f:52:ec:f7:3a:d5:d1:cc:1d:09:d6:78:64:e7:d7:
ea:d7:4a:7b:81:35:c6:50:99:27:15:1b:36:3e:4e:
04:1f:10:05:79:fb:8c:ed:6f:a3:3d:93:c4:bd:9c:
87:2e:56:d6:85:68:8f:23:db:21:6e:df:94:5d:f4:
b3:82:6a:1d:cb:9e:71:04:0b:38:10:ea:8d:4d:ac:
24:6c:c9:1e:dd:bc:a6:0d:f1:ab:67:0e:4f:70:5e:
a7:c2:57:c3:24:58:fc:db:48:92:6b:da:c2:93:c3:
d8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E0:58:2E:39:65:7D:76:8A:8E:95:E1:87:46:86:5A:38:93:A5:8D
X509v3 Authority Key Identifier:
keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5a:39:a2:0e:ff:f9:88:be:aa:ef:94:43:97:c7:d0:04:8b:
c5:dd:24:ef:32:db:20:91:e1:a0:ca:dd:78:03:f1:99:9d:a5:
07:ff:f4:19:38:0b:3b:36:72:50:6f:50:2c:b0:82:45:11:51:
04:43:0e:b3:e5:d1:49:8b:ae:ab:7c:de:71:a3:b3:2a:82:7f:
ff:54:7e:6d:28:36:8d:a2:ce:27:40:88:af:67:89:ad:ca:cf:
eb:ff:18:f3:d6:c1:23:e7:5d:e7:ba:b8:76:d7:c4:99:c4:63:
a5:e9:4d:b1:fc:ae:15:49:4e:40:34:82:89:d4:e0:03:80:8c:
59:14:5f:70:49:3f:c1:8b:8c:82:9b:41:ed:dd:a9:62:3b:88:
6c:90:d2:9b:b0:db:a2:e3:f1:44:e6:c0:f7:ab:24:96:d7:23:
98:e5:27:85:0b:fa:2f:52:d8:7c:f1:59:a9:e0:22:4b:b9:d9:
a4:72:f0:a4:02:49:ec:f8:84:89:c0:6b:e9:8a:ba:f3:c8:e9:
f5:84:f4:b4:c0:96:a4:de:f4:3d:c3:21:39:f9:5a:74:22:bd:
59:3d:a6:aa:1b:95:8b:9a:5e:60:79:40:6b:bc:30:c0:8c:43:
d0:34:30:ec:f0:f2:98:c3:03:90:e8:5b:f8:96:66:a0:9b:1d:
2f:18:b6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:57 2025 by rpki-client