Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
File: iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft (raw, json)
Hash identifier: wJMtyx/GLQVRtPYEmDDPB/Pzfm6Z82ortPgETlRNB9Y=
Subject key identifier: 40:F1:6F:36:05:85:93:86:A5:F9:17:2B:04:0C:9B:22:5B:BC:84:B2
Authority key identifier: 8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
Certificate issuer: /CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Certificate serial: 019768BBCFFC928465A0426D15069D68A026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
Manifest number: 0E5C
Signing time: Fri 13 Jun 2025 10:00:28 +0000
Manifest this update: Fri 13 Jun 2025 10:00:28 +0000
Manifest next update: Sat 14 Jun 2025 10:00:28 +0000
Files and hashes: 1: 03mz0LQjzt1ORtulSs8-RgKcMnM.roa (hash: o7HH4upfGHhmSB89uCr8oSYNHbC8ZdA+S7MeD1sbYe4=)
2: 2Qr14eAD37nuU_5fo7_UeplXIWU.roa (hash: usgUNw1aFsserU4Vh7SHZUsSrOPQTJ2Wa8CALhVnFWI=)
3: XcS7NtVySUtUzIKZEZ4PM2dCvo0.roa (hash: RI3/B49k5u7aP42xJ7PCHqmPzqodpebWnjl4/ch5Tn4=)
4: iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl (hash: kOusAd3pq94evWnQZeMx9RePJ8oD//167jOIfqrmREI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:cf:fc:92:84:65:a0:42:6d:15:06:9d:68:a0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Validity
Not Before: Jun 13 10:00:28 2025 GMT
Not After : Jun 14 10:00:28 2025 GMT
Subject: CN=40f16f3605859386a5f9172b040c9b225bbc84b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:38:ba:7d:15:5b:17:df:af:3f:d9:16:50:
5b:4e:9b:61:45:0a:67:3d:0c:d7:3a:7e:51:76:da:
08:a6:de:5b:ed:e0:e3:ae:20:0b:99:e0:5c:f3:72:
24:f6:39:7f:d6:0f:78:58:66:7f:fa:9f:eb:28:d4:
1e:39:7b:ba:bb:e1:9c:8a:70:e0:6a:0b:ad:79:ac:
a0:51:f4:1c:c7:c3:ca:97:07:6b:63:01:8c:1c:ad:
3e:a8:4c:b8:ca:49:9c:9a:c9:52:3f:2d:60:5b:a0:
d8:f9:78:0c:3e:e6:b5:c5:a2:e4:14:49:56:84:e0:
fa:78:ca:f1:ab:34:b1:2e:c2:0e:55:de:1e:0a:59:
e5:f0:29:3f:c5:ef:81:b1:df:a6:5a:16:55:95:49:
06:16:7c:d6:b8:3d:d7:04:9a:18:32:a4:34:b9:46:
c0:1d:d6:49:0b:41:ec:3b:ef:7a:14:e5:83:27:a7:
16:e5:33:28:8b:09:b7:16:4c:a8:12:2b:df:be:cc:
e4:40:2c:c8:8d:fc:9c:40:92:dc:7a:89:1e:c2:bd:
78:17:6c:53:ef:7a:c8:0d:70:10:f2:6a:31:3c:37:
92:6a:ce:43:95:84:9f:a0:26:1b:ec:80:54:4c:1c:
d8:f9:56:33:3e:ee:6f:9c:a9:aa:d4:a6:86:46:27:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F1:6F:36:05:85:93:86:A5:F9:17:2B:04:0C:9B:22:5B:BC:84:B2
X509v3 Authority Key Identifier:
keyid:8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:16:13:01:d4:1b:de:eb:30:f5:c5:79:67:74:89:87:3c:0c:
28:74:ae:67:8d:dd:77:a8:f6:66:fa:d8:08:c5:f3:97:e2:af:
75:8f:28:bf:cd:5d:b0:74:95:dc:2e:58:ca:fa:a3:ee:a1:92:
56:6c:7c:02:ee:4b:53:b1:d8:d5:f3:75:73:7d:7c:ed:c3:f1:
c2:f9:5c:8e:c5:01:a5:ce:7b:d1:02:30:79:b5:89:4d:20:d2:
b1:c2:e5:70:56:29:17:39:73:56:9f:c1:c3:f7:cb:d9:33:fc:
da:cf:37:26:51:60:38:e0:ed:01:d1:e7:04:a3:4e:da:dc:22:
bb:95:ae:56:ea:4a:66:95:f0:1f:77:8d:e4:d9:84:82:80:d8:
f7:ed:70:2c:ff:49:94:f7:ef:80:df:a2:ba:bd:b9:c3:5e:45:
0a:c4:9c:01:2d:f1:1f:80:6f:6e:b4:5c:e9:b8:1d:7b:99:58:
1e:46:9b:5d:c6:ed:3c:eb:51:9a:66:f3:b9:c1:51:da:98:8a:
d6:7d:c9:69:d0:8a:ea:bb:4c:d3:f1:36:20:3f:bf:aa:26:4b:
7a:36:0b:13:1d:d1:fa:86:a4:f8:e7:23:2b:77:2b:c0:96:3c:
b0:88:3e:70:ad:78:a9:eb:97:cf:db:f7:79:31:2a:3c:4a:4d:
1a:72:98:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:38:58 2025 by rpki-client