Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: KZG4sast8TyojxVarp1rOWBr3DvY6uWzIa77knW9LOw=
Subject key identifier: C7:A2:52:A6:64:5C:0D:A3:30:58:69:88:81:28:E9:5E:89:CE:D0:91
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 01976C98D3C2826C3AF92E58076477E60673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 1137
Signing time: Sat 14 Jun 2025 04:00:44 +0000
Manifest this update: Sat 14 Jun 2025 04:00:44 +0000
Manifest next update: Sun 15 Jun 2025 04:00:44 +0000
Files and hashes: 1: 5-1oK7ZffFqStfo7QWXqKcGuZfk.roa (hash: ae86GvhPxW1Ea0shedYB3VtmcIvsIfxJLLLA1E/5h/A=)
2: e4U8yl2fAVY2sT3p5fbr_erY7oA.roa (hash: 2KHYehyUkqT72mAQaz7HDc/red7uQn+krX6/aXcIZtE=)
3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: 1fjV5Pl0YqUzhbbSpexXj7DViBHXOw732bzBoVkJTII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:d3:c2:82:6c:3a:f9:2e:58:07:64:77:e6:06:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Jun 14 04:00:44 2025 GMT
Not After : Jun 15 04:00:44 2025 GMT
Subject: CN=c7a252a6645c0da3305869888128e95e89ced091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:9c:57:97:73:ef:22:ee:07:b0:a8:0b:a0:
5c:d7:90:29:4f:43:c8:d4:f3:25:24:fc:a7:9c:6e:
7a:0b:b1:35:e7:46:e6:f7:13:c1:01:c2:48:d9:1e:
f7:c6:ae:b6:a2:0c:0f:5e:70:6f:b5:dc:c4:71:47:
ee:2d:07:e9:79:b8:29:0e:10:45:74:2e:3f:63:d7:
1c:1e:4c:04:4a:44:3b:8a:72:92:14:a2:2d:4f:91:
ff:f9:6e:1d:79:41:6a:b0:86:90:95:c7:e7:de:42:
d8:0e:d7:b7:6c:af:91:7e:a3:5a:11:54:83:af:26:
6b:e9:c7:4f:c4:3a:c7:2e:c7:46:bf:f4:17:df:be:
bc:bf:88:c1:f6:f3:58:e5:8e:65:36:29:7f:34:3a:
9f:b5:e8:54:11:9f:a5:25:4f:49:58:99:4d:c0:7e:
1a:64:21:db:da:fb:ae:0c:e1:3c:b9:80:30:31:7d:
05:9b:fe:0f:e4:cd:05:82:2e:98:7d:1d:2f:ab:5b:
5a:a4:22:39:8a:28:53:fc:fb:0d:3f:6c:00:72:41:
47:fe:72:64:ec:46:eb:c3:18:f8:d5:38:61:83:a5:
d4:ab:aa:ba:1e:57:9d:e5:3f:63:2c:98:bd:73:03:
1c:a5:84:c9:ac:88:54:9c:9a:cf:5b:ea:48:fe:90:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A2:52:A6:64:5C:0D:A3:30:58:69:88:81:28:E9:5E:89:CE:D0:91
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:41:ad:d2:ec:24:a3:5d:bc:cb:78:56:54:a0:11:21:48:0f:
f6:53:65:ab:b5:1b:fe:e5:81:8e:ba:ed:c3:1b:80:77:07:dd:
d0:f2:c6:e8:44:84:17:95:11:7a:76:1c:0b:af:70:46:a8:32:
af:31:d7:6d:71:c8:5d:7c:56:52:74:e7:fd:a8:82:5d:30:cf:
af:47:92:6f:b4:2c:f2:e6:cf:73:63:6b:4f:5f:23:a4:42:6c:
95:8d:4f:80:b5:21:bd:c8:8c:05:8c:47:d5:fd:c7:3c:44:cc:
f4:65:d0:cc:96:0b:ce:c0:81:34:82:96:9a:4b:ff:42:73:3b:
fc:43:2d:4e:24:a8:2a:3f:ac:2b:8b:e0:95:24:08:76:c4:fe:
03:a9:17:b1:5c:44:73:0b:d3:83:02:6c:8f:5a:b6:0c:e9:03:
5d:c9:cb:b7:cb:31:86:08:be:78:07:05:ad:22:6f:85:fa:8e:
92:be:f8:14:a7:97:b4:49:97:c7:5a:3e:7f:87:55:56:21:c5:
39:da:52:e1:92:66:65:74:8f:34:e6:b2:2a:02:ce:91:b3:aa:
c1:ca:9c:00:a5:f1:33:c1:33:e1:f4:a0:83:d8:9d:98:f2:5c:
b6:17:4e:94:01:5f:e1:2c:ab:da:89:f1:4d:bf:3f:02:bc:c9:
95:04:c4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:35:28 2025 by rpki-client