Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json)
Hash identifier: ogqObqgDsYj0jwWyBflcI0dw2z1vY0x7BfxhYKkpcM4=
Subject key identifier: 3A:E3:81:4D:B2:DE:F5:8B:04:20:80:7F:BA:B4:18:34:E9:45:B1:41
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 01976A73B9E6D5AA8B47CF043E83390ACA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
Manifest number: 1594
Signing time: Fri 13 Jun 2025 18:00:58 +0000
Manifest this update: Fri 13 Jun 2025 18:00:58 +0000
Manifest next update: Sat 14 Jun 2025 18:00:58 +0000
Files and hashes: 1: ExfUqNEW3Lyq9Nl7Jq22WcfJ1rw.roa (hash: 6SjZfPEMGV4QZNr6XzSlmm+VNkfjjPfYSSMSKKIpL5E=)
2: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: tBzLm3FX6mvzBF6xBW+6ILwq/LoBWiUqalIXp/fPYiQ=)
3: vuckuXbmedLIJWITtJ1gJzQY8X0.roa (hash: BujWwxtiu31OcVkERDwp6qXjCF/qZpedTzNgbY+R4ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:b9:e6:d5:aa:8b:47:cf:04:3e:83:39:0a:ca:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Jun 13 18:00:58 2025 GMT
Not After : Jun 14 18:00:58 2025 GMT
Subject: CN=3ae3814db2def58b0420807fbab41834e945b141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:30:8e:d4:9a:30:c1:1d:f4:f2:ba:f3:0a:6a:
98:b1:75:80:50:ef:19:7a:64:6f:41:33:5c:f4:68:
e1:5b:68:48:58:52:c2:ac:93:dd:e5:4e:c8:84:88:
9b:fc:b3:13:7a:f8:3a:5e:85:5f:67:5e:22:51:c1:
02:38:d7:25:19:9f:9e:b6:55:9b:6b:83:78:fa:8d:
d1:91:68:5f:81:18:9c:7a:60:4d:ae:6b:f6:96:de:
b3:a3:34:0b:b8:f3:d9:2e:65:44:0a:2b:54:96:c6:
ae:fd:8b:fb:bc:4c:2a:08:1a:d6:a5:db:af:cf:8c:
6d:e0:2a:3f:4c:74:81:31:a9:c2:e9:9b:19:72:0e:
33:21:3a:7f:04:2a:ac:d0:40:ad:7e:01:b7:1c:66:
25:39:d9:59:e6:d3:21:a1:ce:f4:36:fc:f9:e4:ca:
9b:d4:db:c5:80:9b:82:48:82:c5:4e:01:74:2c:56:
71:26:c3:b9:db:fa:9c:42:6e:b3:84:20:24:6b:11:
13:eb:a3:ff:d0:43:a5:ac:98:a8:e8:5f:bb:f3:11:
68:31:c6:42:29:30:a0:c8:77:52:63:8e:c6:73:3f:
7b:1b:68:87:9f:74:90:a2:1a:20:7a:61:b5:4a:b7:
e1:9e:66:b0:d6:12:c5:fa:c6:64:49:48:2d:af:e0:
e4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E3:81:4D:B2:DE:F5:8B:04:20:80:7F:BA:B4:18:34:E9:45:B1:41
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:46:5b:9b:ea:c0:a2:4f:b8:f7:78:aa:5a:d3:1b:4d:e1:c3:
15:0f:43:ce:92:2e:3d:77:97:11:b0:00:47:1c:4e:9f:71:f5:
f1:59:28:05:8e:a6:12:f0:ca:1e:21:dc:2d:71:67:c0:94:da:
f9:f7:f4:a6:8b:3b:6d:1a:67:47:48:a9:55:3d:a4:e9:cf:d8:
5f:7b:1b:cf:da:54:4d:5a:0f:03:e1:77:5c:f0:42:03:2d:7a:
0e:90:a8:67:51:fe:b1:e8:ab:ae:3b:18:a1:38:42:2d:9e:d6:
7f:8b:5d:8e:15:66:9a:db:08:43:33:2e:22:02:0e:34:4b:0e:
d8:7c:99:ad:2f:86:9b:3b:3d:3b:9b:10:f3:b2:74:94:56:4d:
df:da:75:37:69:71:31:53:d1:52:59:10:2a:02:8f:a4:f5:46:
28:b9:a8:da:97:4c:d8:86:16:03:f4:38:35:e4:50:5d:7c:73:
50:be:9c:84:fd:78:ad:c8:f8:fd:77:ef:1f:89:f1:08:b3:d2:
97:0c:86:2d:b1:ab:36:74:2e:26:02:f7:e1:44:7e:64:91:05:
42:88:1f:ff:18:9c:b9:a9:ab:cc:a6:73:9d:fb:10:5a:75:25:
21:d4:20:c0:2c:8d:55:c9:09:31:8f:0a:d1:65:8a:e1:15:e2:
d8:4c:53:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:14:10 2025 by rpki-client