Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: 5o0bxBVXuYUuz0QrTTKQ6C1a4D8T3IF00hJ6y8HzxtA=
Subject key identifier: 8A:23:38:EA:BC:B0:5D:1B:42:AE:E7:BD:9B:4E:5C:D3:C5:59:EF:0B
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 019774F752716E25064830DC45478036E318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 0C64
Signing time: Sun 15 Jun 2025 19:00:54 +0000
Manifest this update: Sun 15 Jun 2025 19:00:54 +0000
Manifest next update: Mon 16 Jun 2025 19:00:54 +0000
Files and hashes: 1: N-nPI1g49f7ETAzdIo5yjbOdZtM.roa (hash: qC00kLedLYSFjjH9iYQzP0HBmWb73ml/Yv/mqD1i4KU=)
2: fv0GFD_AZHwLWR5yvJcFyEMzZds.roa (hash: +P74mB+NlndUj38u1gR6So/MVR2zQW1aNy+V6Ba/PBg=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: ZqSD92h8eIAJAvKuDxG0gqZqtD2VPlUDsx/c6kIBHZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:52:71:6e:25:06:48:30:dc:45:47:80:36:e3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Jun 15 19:00:54 2025 GMT
Not After : Jun 16 19:00:54 2025 GMT
Subject: CN=8a2338eabcb05d1b42aee7bd9b4e5cd3c559ef0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:40:89:bd:46:0a:b1:69:14:7a:78:23:99:
f3:7c:6c:9e:a0:8e:dc:b2:22:63:24:54:49:78:69:
1a:17:46:f1:0b:ff:de:de:89:4f:a1:02:d6:4c:79:
1a:4e:b2:26:f6:35:70:68:f1:76:d2:3e:29:79:4b:
b8:15:09:d3:9a:e8:35:e6:3d:e7:50:a8:12:84:15:
4a:54:a7:e0:92:f3:f7:3c:7d:8b:70:c9:8e:43:7b:
17:11:38:3e:ce:4e:a7:7b:0b:21:50:8c:f4:3a:55:
25:43:14:a4:b1:a1:85:05:69:46:1d:b0:81:fa:48:
12:56:a0:d8:0c:7b:14:8f:23:42:4a:fa:61:4f:87:
de:8c:77:cd:f1:bd:47:e8:aa:4c:fe:a1:29:b9:4c:
18:19:4e:a1:a9:3f:2a:0e:f7:5b:22:df:ee:91:72:
5e:dd:68:6f:69:f1:dc:c7:71:4d:b7:8e:b0:47:67:
75:22:8c:fa:b6:00:92:00:76:8e:6a:da:ac:ef:21:
05:07:a6:ba:1e:b2:b0:16:f5:d3:36:e6:49:cb:bf:
07:8c:4c:96:00:5f:cb:a4:0b:0f:3c:95:f7:8f:ea:
ff:12:25:46:79:e1:42:97:16:83:dd:d3:0a:cb:03:
13:8f:78:91:c6:29:47:ad:22:19:28:f4:23:20:ef:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:23:38:EA:BC:B0:5D:1B:42:AE:E7:BD:9B:4E:5C:D3:C5:59:EF:0B
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ee:b5:52:29:0d:cf:79:cb:07:0b:ca:1e:6b:a5:e5:1f:57:
86:aa:d0:48:7e:f1:df:3f:08:e2:80:40:84:09:4d:e2:0d:b7:
af:66:34:58:6b:64:9f:96:8a:b9:09:bc:b1:d5:dc:b8:8c:b9:
2e:28:12:ce:ad:00:97:50:14:9b:14:d9:8e:27:9e:82:2b:ef:
86:6d:1c:6a:6e:8d:ed:02:e1:f1:31:00:82:f4:48:9d:88:a6:
55:14:51:d2:af:f1:b8:e8:f4:d6:43:78:bd:b7:1e:9d:4a:9b:
84:77:07:cf:61:07:d5:7a:f9:cf:a6:61:48:57:51:5a:bc:c8:
40:80:60:25:0a:cc:07:c2:76:d7:a9:c4:de:f0:e7:43:69:46:
4b:a9:0c:26:23:2d:78:38:26:11:b5:fe:99:b3:e5:ea:92:12:
10:f2:01:24:63:3e:ae:91:76:58:c8:62:b1:07:86:3c:f1:d0:
6d:0c:b6:7a:c7:ce:6b:43:18:f2:bb:d0:80:57:59:83:49:26:
8c:84:80:99:dd:2c:21:37:a3:4c:89:57:a2:69:83:2e:0f:fb:
22:76:62:6e:b2:fa:c9:05:3c:59:b5:3e:91:90:20:a0:5b:33:
bb:fa:2d:16:83:2a:86:13:18:dd:48:4d:f5:af:05:d1:f8:ec:
81:73:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:02:44 2025 by rpki-client