Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier: qcsjHBTnIOZUNd7PKeyZMAsOU892yMSUeOlCCvYFHCI=
Subject key identifier: 98:D4:3F:3B:6A:E9:DF:F8:85:10:E2:C5:A7:78:E6:F3:EA:D4:03:31
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial: 0197692A139E22554FF285E7FBB2F7AAE202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number: 1547
Signing time: Fri 13 Jun 2025 12:00:54 +0000
Manifest this update: Fri 13 Jun 2025 12:00:54 +0000
Manifest next update: Sat 14 Jun 2025 12:00:54 +0000
Files and hashes: 1: TuA6dq5RUfQK0g-nhGPwelxAp8s.roa (hash: A068hT4+Hwiukpw4NAI0ekcWki3f2qgAy0smH/qbl44=)
2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: dWiFlRzYf9D/dmgrsb2zvk2rOFhMvL9VB1AWolfS2Ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:13:9e:22:55:4f:f2:85:e7:fb:b2:f7:aa:e2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Validity
Not Before: Jun 13 12:00:54 2025 GMT
Not After : Jun 14 12:00:54 2025 GMT
Subject: CN=98d43f3b6ae9dff88510e2c5a778e6f3ead40331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:26:30:5b:d6:ad:c5:d0:55:2f:0f:b7:22:
6f:17:82:b7:59:4a:8a:07:7f:bf:11:ac:5f:3f:58:
18:21:03:20:fb:24:88:2e:07:37:0b:82:59:aa:26:
32:b2:2b:bf:19:d3:f0:41:6d:8e:7a:93:de:c0:5a:
f5:87:15:aa:2c:42:33:c4:4c:cc:c8:b7:7b:79:aa:
4f:5a:92:0a:d5:41:1d:72:32:ad:da:5c:24:2b:ef:
ad:1a:c1:7f:d3:ad:52:6a:6c:7d:97:ab:a2:ac:95:
f6:65:72:f5:c5:e3:69:ab:67:37:f7:60:a1:8b:5f:
21:6c:fa:bf:81:b9:a2:a9:12:52:c4:17:59:3a:69:
de:09:54:26:95:df:8d:6e:dd:ab:d8:22:ab:92:d5:
01:a0:be:8c:06:4c:4b:8a:99:ff:17:7c:92:64:37:
48:cc:42:38:0f:27:a1:80:ce:72:c7:32:82:fb:41:
2a:ff:91:0a:5c:2e:74:0b:62:d8:c2:46:b5:34:cc:
32:be:df:26:c9:49:f9:2e:49:4e:d5:f1:ef:72:89:
4b:f3:00:f8:7f:cf:a2:91:a6:10:d8:8d:af:92:f7:
a5:61:19:47:a9:53:8e:32:03:a6:5f:8e:16:d2:0a:
fc:c6:20:2d:20:85:d8:6f:e0:f4:60:7e:21:16:7b:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D4:3F:3B:6A:E9:DF:F8:85:10:E2:C5:A7:78:E6:F3:EA:D4:03:31
X509v3 Authority Key Identifier:
keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6e:79:54:b8:6d:11:c3:15:fd:16:c6:1b:ab:af:90:33:4b:
93:7c:7a:7a:6f:be:71:59:37:7e:db:48:f3:24:d4:1a:03:6c:
fe:d9:a0:65:07:ba:b5:17:79:37:55:ed:96:b3:7a:7d:c1:ea:
3c:b7:43:3a:68:3d:b3:48:16:b4:67:4d:ea:e6:23:d1:80:83:
76:a2:8d:2b:42:33:47:96:5c:8a:5c:01:3c:d1:66:22:56:9c:
70:c3:f4:d1:2d:26:f9:a6:06:a5:a2:4f:de:7c:47:88:14:63:
e4:89:cd:27:bd:4b:58:43:49:ac:8c:37:3c:37:ca:d2:e9:d6:
5c:13:34:b6:44:6d:84:ad:11:93:de:ac:a2:b5:76:71:41:f9:
dc:36:1e:75:80:06:61:b6:bd:dc:85:36:d6:2c:38:b3:4a:38:
2c:e0:36:6a:0e:c3:da:35:a4:aa:04:2a:42:d7:4a:7f:fe:2c:
8e:58:88:c9:7d:ec:62:21:80:c2:52:87:2e:fe:a9:8a:6d:0a:
51:26:be:63:62:c9:35:fd:01:36:8e:91:34:b7:8f:5d:57:92:
37:f6:be:87:7f:b8:12:76:8a:fe:1e:54:da:73:4b:49:23:7e:
89:1f:de:7b:22:e8:c0:6e:51:d9:a5:b8:dd:3c:78:7b:2b:fd:
bc:74:17:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:35:53 2025 by rpki-client