Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
File: i58lgoNRffGYWTiOE7rRrgJopfs.mft (raw, json)
Hash identifier: V6PSCsHbQMvBxBAeWRp82h5HDSbqtD2FyUCkLQn7NWc=
Subject key identifier: B7:14:47:9A:8E:3B:97:57:6B:07:78:79:66:FE:2F:B0:6A:9C:FB:E5
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial: 01976DAB8590B3EC0524150DE6CC61F9FE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 09:00:46 +0000
Manifest this update: Sat 14 Jun 2025 09:00:46 +0000
Manifest next update: Sun 15 Jun 2025 09:00:46 +0000
Files and hashes: 1: aUEo_6I1NIoEpJrfmKA_-34y2x4.roa (hash: qf/pPhy348tojuz4A7OR24KHAsQ8d6peWd65flxSoJ4=)
2: i58lgoNRffGYWTiOE7rRrgJopfs.crl (hash: uCzhYjuJYV6QwiGaV6M7Kgc0pDhcVuiHs+WK25IXXZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:85:90:b3:ec:05:24:15:0d:e6:cc:61:f9:fe:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
Validity
Not Before: Jun 14 09:00:46 2025 GMT
Not After : Jun 15 09:00:46 2025 GMT
Subject: CN=b714479a8e3b97576b07787966fe2fb06a9cfbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:e2:cb:54:d2:7e:d0:62:f4:00:a9:3b:60:
40:78:15:f4:9c:bf:65:d5:3b:b7:25:85:67:66:af:
11:64:25:77:74:e1:49:5b:37:62:e5:6c:7c:c2:eb:
a5:aa:a7:da:2f:46:51:35:2a:48:f2:a6:b2:b3:e2:
d8:70:4a:8a:e0:e1:63:0a:c3:28:89:ab:36:f0:16:
20:6a:82:1c:cd:2a:a0:2a:1c:65:4b:6c:c0:14:cb:
e5:ec:2b:f6:92:0b:14:61:2a:db:c1:13:21:21:a5:
9c:96:51:b2:2e:d6:f5:af:c9:f2:24:25:e0:47:1a:
e9:08:ab:19:bc:13:ca:f9:78:2a:a3:77:03:f3:a0:
5c:af:a6:79:99:b8:18:f0:99:9f:67:5a:b7:4f:40:
a1:dc:dc:b1:9c:01:05:22:1a:04:1d:5a:40:1b:6b:
b0:7c:fb:f0:f1:df:7d:95:4e:c8:6b:5d:f7:a1:e7:
70:05:2c:dc:3c:90:5d:a0:e3:cd:2d:d6:05:2f:c8:
8e:23:c6:60:16:19:c4:34:66:da:94:04:2a:8f:32:
7a:d7:f7:7b:9a:61:5e:81:02:62:ad:56:a0:a2:4c:
89:a6:d7:94:71:da:80:4b:2a:63:c4:6f:53:03:03:
e7:44:44:08:62:9c:eb:94:8f:b1:1e:ab:1d:d4:ff:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:14:47:9A:8E:3B:97:57:6B:07:78:79:66:FE:2F:B0:6A:9C:FB:E5
X509v3 Authority Key Identifier:
keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ec:7a:c5:b2:85:c4:bb:e7:4d:a1:54:52:35:f1:22:02:c9:
de:4a:4d:7b:ae:8d:b5:55:ac:7e:4f:ca:9a:d9:60:bb:5e:29:
db:2d:31:fc:38:71:a5:50:9c:6a:7a:eb:18:dd:36:94:2d:56:
2c:31:9f:5d:ca:39:e6:70:2d:48:df:6d:da:9b:0c:90:02:7c:
50:f8:67:3f:e4:25:ba:65:cf:9c:ef:c2:f5:c9:86:98:34:01:
f8:46:d6:2f:7f:84:01:2d:87:56:13:37:b0:1d:62:ed:11:28:
40:25:19:93:84:e6:5a:e1:d1:d3:6d:0e:e4:89:32:58:d5:b4:
56:8e:11:5a:a8:99:54:a1:ff:3e:f6:af:51:f5:0a:99:4f:f3:
c6:8f:af:a2:f4:dd:1b:b9:d0:30:af:be:75:dc:64:59:cc:10:
8b:d5:bb:f5:ac:e2:42:d3:01:91:58:19:0e:80:1e:53:ef:3e:
50:fc:21:8f:98:f0:d7:dd:be:87:e0:d7:04:e7:bf:bc:01:16:
0d:94:32:8a:03:ba:d3:a5:02:44:dd:bc:13:5e:df:b9:3e:a5:
e5:b8:e6:41:cd:23:fc:7a:52:fb:50:15:cd:a3:6d:6f:f7:18:
ed:96:e2:ac:14:95:de:b6:4b:4f:52:e1:50:b5:6b:61:64:d9:
fd:12:cf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:03:27 2025 by rpki-client