Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier: pBWNDdWbY0smGsTbuU9dqtjRQYsK1YXo3yDjaH7sbbk=
Subject key identifier: 35:D2:79:AD:1E:D9:25:D0:CB:8F:69:30:B1:96:57:EF:7E:A8:62:DF
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 01976C622C7F863C5070840B8A621ECF0B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number: 1522
Signing time: Sat 14 Jun 2025 03:01:02 +0000
Manifest this update: Sat 14 Jun 2025 03:01:02 +0000
Manifest next update: Sun 15 Jun 2025 03:01:02 +0000
Files and hashes: 1: 0R4cTom2N3Ffy-a36Ai0y_lwR7M.roa (hash: Nepk/Ut8yLvwSKOE+VPPTDkKY+eqYlx1ya61v2fExqo=)
2: DO5JxSipVW_jSyusVYE1KNyV5oM.roa (hash: fTaf/BSF7U37w4OYShE1QwyUlpAokZv3Xb6JIFlzFT0=)
3: MHydlao-1yBTTsCdp3bBe4bDnkc.roa (hash: OnwOrVTgc/R+eeJsST7imMdVV9F4opbfB++sLNDhiX8=)
4: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: Kut0SpIofDLNw69s+L4PsAVXEKfLIXwlOSEcAtYQsz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:2c:7f:86:3c:50:70:84:0b:8a:62:1e:cf:0b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Jun 14 03:01:02 2025 GMT
Not After : Jun 15 03:01:02 2025 GMT
Subject: CN=35d279ad1ed925d0cb8f6930b19657ef7ea862df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:df:8b:08:95:38:e3:6d:68:36:09:29:4e:
f1:d3:55:84:72:7b:e9:ec:ec:55:2a:60:7c:f3:cb:
6e:7e:33:d9:5c:20:e4:e8:83:75:e5:c7:28:75:a0:
8f:9d:8a:28:65:19:6c:d1:61:fc:ea:9c:df:55:31:
5a:e4:c3:51:5d:22:a0:e0:38:75:a2:b9:65:01:91:
39:8a:69:8d:11:0a:4b:eb:93:be:5a:eb:d4:ba:87:
90:4c:99:23:85:a3:00:58:6b:b9:69:35:98:86:5b:
36:e8:11:1a:81:d8:ed:b3:c5:d1:12:72:ba:d6:5b:
40:95:d9:90:d3:fc:74:80:50:8d:5e:21:36:e6:56:
8f:70:f3:28:e3:8e:e0:4f:23:51:19:f2:d7:93:7c:
9f:77:3a:f4:e4:aa:03:74:ee:1c:43:d3:88:35:b4:
ce:01:f7:aa:7d:09:d0:94:15:ea:0e:84:03:c4:da:
47:cf:8a:63:f3:6e:33:fb:87:1b:c7:fc:c7:70:9f:
2e:91:87:7b:87:d9:bf:8f:a8:73:f5:e8:8f:32:5c:
d5:70:27:83:ce:d2:1f:62:a7:2b:24:57:17:85:5d:
b2:a7:0a:11:ae:98:3b:b6:10:78:8e:02:02:dc:09:
72:2a:45:9a:e5:5a:29:84:98:e4:7c:7d:91:3e:37:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D2:79:AD:1E:D9:25:D0:CB:8F:69:30:B1:96:57:EF:7E:A8:62:DF
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:ab:da:91:89:14:a1:2e:37:e2:82:eb:ee:23:7f:49:8a:a9:
2b:0f:18:a8:71:69:db:c2:96:1b:c6:bf:29:01:6e:e6:fe:9b:
ef:c2:44:0a:28:b2:8d:d2:55:7a:0b:e6:10:06:05:67:24:3d:
39:e0:f6:37:85:01:28:d9:41:69:a0:e3:c9:8e:54:f8:54:95:
b8:01:b5:a6:cf:03:c6:89:10:82:7d:6a:5d:4d:67:fb:62:4c:
9f:c5:17:a2:ef:96:49:04:35:64:46:79:e1:70:c2:82:4b:f8:
96:12:60:f1:82:f0:12:28:35:d0:9d:42:9e:6a:16:5f:3e:11:
26:a5:5e:9b:2d:1e:54:f3:82:9f:48:13:a7:c8:f2:d7:9b:f8:
f4:e1:9c:26:12:f8:c7:10:06:5f:cf:bf:f4:02:57:3b:aa:e1:
a6:73:81:f5:eb:18:48:a5:20:de:48:b9:c3:47:0f:b4:b8:f2:
e5:4c:81:a5:f5:c4:ad:1c:2a:8d:9e:fc:bb:ca:2e:b4:49:68:
e1:1f:a6:a5:6d:dc:b5:a5:cb:a6:28:4e:6b:b4:0e:60:a1:fe:
e0:29:76:c1:a7:56:9a:e7:cb:9d:71:52:50:4a:8c:d8:a1:7f:
7b:17:23:9f:20:11:3b:e5:55:1b:ea:95:d0:11:ce:10:d6:8d:
41:b8:4c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:16:26 2025 by rpki-client