Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
File: iib0dtYIYlrR_gblK5dKn2bwFBo.mft (raw, json)
Hash identifier: d9Z038xHximSG/0uENgJnO3lZNYWagzgI0u4XqjdnY4=
Subject key identifier: EB:62:30:57:8E:96:4D:02:C1:E8:1E:28:52:0F:BF:CC:58:A8:31:7E
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial: 019771511441745C01380B9387B26E93B799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
Manifest number: 1595
Signing time: Sun 15 Jun 2025 02:00:28 +0000
Manifest this update: Sun 15 Jun 2025 02:00:28 +0000
Manifest next update: Mon 16 Jun 2025 02:00:28 +0000
Files and hashes: 1: VGVyrg_KWe6qJVf2EFW5rg282l8.roa (hash: no1Xp/fKJZHQHLgUjaAU6HFgcxae88YxDTT3wdaVfTw=)
2: iib0dtYIYlrR_gblK5dKn2bwFBo.crl (hash: Zoh8iKafH9NpHKRwitJFsN8KAA7SS1Qumm+ZqbKjlkw=)
3: jmjQM-Af7YixW0lhj7IQRUe7D0c.roa (hash: Tb54ESX/F3Guxq8pdf9XF/gmXcXHx+T4/bKA3b9RF5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:14:41:74:5c:01:38:0b:93:87:b2:6e:93:b7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Validity
Not Before: Jun 15 02:00:28 2025 GMT
Not After : Jun 16 02:00:28 2025 GMT
Subject: CN=eb6230578e964d02c1e81e28520fbfcc58a8317e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:09:d0:94:3e:bf:bc:c2:5a:0c:76:02:27:
5a:54:75:21:28:0f:ee:03:16:e5:a7:7f:5e:48:ed:
9a:04:cf:7e:c2:72:fb:a6:2d:46:da:28:53:54:a6:
e0:3c:91:bb:3c:d3:2c:9d:24:4d:be:79:63:07:fa:
31:2c:76:60:8f:cd:29:c6:aa:68:14:23:dc:7d:1f:
7f:60:15:9d:93:06:7a:05:96:1a:4e:de:6e:e3:8b:
5c:c6:7d:ab:6c:ab:6b:75:40:9c:3b:00:e8:80:22:
bd:82:70:f1:b4:0c:f1:a9:36:a4:07:6d:e0:f0:c4:
8a:fd:66:25:9b:c4:73:a2:af:7f:20:7a:97:ab:46:
40:db:d0:2e:89:6a:83:ca:3e:a8:1e:49:85:22:16:
47:e9:a5:e1:87:1e:5c:bf:88:4e:eb:3b:aa:ab:69:
2c:0d:84:9d:71:16:b0:38:18:7e:96:ba:ae:97:4d:
c2:62:5c:f1:d7:b4:a3:e9:6a:3f:96:f0:22:89:19:
64:e0:30:c7:26:d5:e3:55:39:5b:20:79:27:1a:23:
cc:10:c9:23:81:33:73:13:ba:06:63:b2:25:a8:d4:
59:78:33:df:4b:4a:c1:dc:f4:9a:9c:1e:78:56:e2:
09:0c:29:e7:4d:73:e2:41:33:11:e9:36:9a:06:10:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:62:30:57:8E:96:4D:02:C1:E8:1E:28:52:0F:BF:CC:58:A8:31:7E
X509v3 Authority Key Identifier:
keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:48:b9:e3:52:75:88:1a:d2:ca:a7:6c:10:54:c0:f5:42:f8:
27:81:3e:b2:d0:92:87:c1:b5:cf:10:1f:d8:7a:7e:f5:03:7d:
80:50:70:c5:51:41:ae:70:cc:7b:6e:84:61:ba:73:1f:cf:68:
70:70:af:8c:25:fc:f1:b8:57:1a:51:f7:0d:4f:6e:aa:d3:34:
0b:6f:81:fa:4f:ba:e4:f7:8a:51:3a:ed:51:06:82:8a:65:a0:
64:76:34:35:f7:a9:97:95:aa:2f:7a:53:05:b0:0f:bb:f8:42:
15:77:77:41:19:ff:e8:be:dc:ca:b5:98:e3:85:a6:28:02:b5:
cd:10:29:3f:7f:b7:a7:cc:36:cb:53:fe:39:ba:9e:c8:71:21:
fe:f4:e5:e4:5f:92:43:bc:53:3f:7d:86:d8:a4:a3:6d:b8:e8:
f8:1e:c5:0b:3b:26:06:af:ab:f7:0b:ec:86:6d:40:1d:d8:46:
8c:5b:3e:aa:26:4b:d1:6e:9c:6b:f4:41:07:d3:3f:d9:86:2f:
49:7b:99:53:ba:a5:78:e0:e8:99:0d:f9:02:35:ba:17:10:e9:
33:2c:d9:75:a6:18:83:c5:34:30:84:f7:16:f6:95:60:8d:59:
f4:8e:e1:94:db:18:7d:0c:fa:a4:6b:54:52:a6:08:ad:00:e8:
96:a4:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:12 2025 by rpki-client