Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
File: IwWuBiEvPC-PVzoLVJJEHljyHE4.mft (raw, json)
Hash identifier: UbZFo160XpR00YSZbUDsYuqjacqTkaHhEdKhVDrUh34=
Subject key identifier: F6:56:58:21:E0:50:57:E5:DF:FA:6F:6D:42:32:62:21:C6:91:F9:AA
Authority key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
Certificate issuer: /CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Certificate serial: 019769299D87AC49EA128F7F37B39943F26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 12:00:24 +0000
Manifest this update: Fri 13 Jun 2025 12:00:24 +0000
Manifest next update: Sat 14 Jun 2025 12:00:24 +0000
Files and hashes: 1: AYkoB-e1MzcctAIB25MUBAI3Gw8.roa (hash: RhXb3K21xkSfp4wHDHnklvRvJi1oEc1FzHYwM8s92WA=)
2: IwWuBiEvPC-PVzoLVJJEHljyHE4.crl (hash: Dglzxu5UoMemHyO+Aip+twGknCK+7mZLZz4DbBO1B44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:9d:87:ac:49:ea:12:8f:7f:37:b3:99:43:f2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Validity
Not Before: Jun 13 12:00:24 2025 GMT
Not After : Jun 14 12:00:24 2025 GMT
Subject: CN=f6565821e05057e5dffa6f6d42326221c691f9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:f6:68:77:92:ba:79:88:bb:5a:10:c3:e7:
e2:c3:68:50:46:ba:72:61:67:a3:83:6a:42:3f:8a:
e3:54:67:65:7b:3f:a1:c8:28:8f:e4:86:a4:4e:15:
1c:05:97:e4:6d:2b:b6:09:69:cd:da:ff:17:3b:84:
d9:ff:06:a1:b4:bb:fb:a0:e2:70:da:31:b3:84:9c:
46:24:ac:de:08:df:1b:71:c8:cc:3a:aa:23:c9:9a:
0a:cd:41:e3:25:2c:86:c8:ce:11:7e:bf:e6:08:d5:
77:ec:8c:30:8c:aa:8b:b3:56:58:2a:5c:8e:4a:84:
1e:33:f2:73:04:bf:89:a8:7f:30:1d:92:d5:fa:90:
97:5b:ea:f3:0d:77:32:9f:22:a0:2e:a5:a4:a9:c4:
e6:d9:53:9d:1e:c6:ae:0e:04:54:4f:d2:8f:73:4f:
9c:cf:f2:64:8b:84:f3:cb:23:00:b8:d0:4f:7a:41:
a7:1f:9f:26:25:09:e6:46:1c:58:69:e4:b8:73:12:
b1:f2:6c:7c:52:19:a7:45:da:ac:4e:51:a5:68:de:
52:a9:58:5b:ba:59:c6:90:5d:23:71:0f:41:97:eb:
59:63:83:9f:46:00:19:60:9d:94:53:26:d3:62:96:
cd:af:b6:58:74:93:4b:ed:2b:54:03:58:2e:6b:c2:
5c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:56:58:21:E0:50:57:E5:DF:FA:6F:6D:42:32:62:21:C6:91:F9:AA
X509v3 Authority Key Identifier:
keyid:23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:73:69:fe:0f:67:b0:6c:85:27:d8:6f:3d:dc:e4:a0:4f:d0:
44:ac:a3:3c:d4:9d:05:54:67:95:54:f1:19:7a:a5:66:5b:30:
ff:fa:85:1c:db:e5:50:81:72:fc:8a:4f:d7:57:61:60:51:51:
13:34:48:94:71:91:b6:2e:4f:ee:22:f1:d2:3f:8e:a4:e2:79:
9d:c5:15:0e:34:07:c0:43:d1:64:99:85:47:de:12:44:70:d1:
99:0d:8e:9d:bb:38:f7:00:57:3c:3a:de:59:48:cc:b0:4d:4e:
39:ae:3b:71:5d:50:47:22:46:c5:5e:35:66:92:60:e9:8d:96:
f8:d5:51:e0:1a:de:a7:2f:1a:15:fd:c5:6f:37:89:33:53:5f:
56:33:5b:dc:26:e6:91:c7:6c:45:32:0e:ca:81:23:8c:ff:8f:
00:8a:e5:82:19:c2:5e:50:c5:40:43:31:11:b4:22:e9:51:71:
ee:10:b8:c3:43:be:df:4f:4b:98:4d:a3:c0:59:11:49:4d:cf:
ee:d0:28:25:12:a3:f7:e8:9c:a7:99:41:26:f7:b6:0a:cb:7d:
3a:c9:a0:bf:88:e2:00:32:4b:05:a4:25:e2:41:d3:c4:f6:d6:
35:97:36:45:da:18:43:70:f2:c3:73:8d:db:72:cd:eb:de:6c:
83:68:fa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:47 2025 by rpki-client