Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
File: iYh94B2LHL1Qt126yRM59mF6TYo.mft (raw, json)
Hash identifier: xA617s1i+cpUAEhbfw04sHIFT6oDzDEhpb77dHKo9P4=
Subject key identifier: 3D:C5:E7:94:6E:8E:29:28:BA:8B:09:E1:12:AF:83:05:63:4E:AE:CE
Authority key identifier: 89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
Certificate issuer: /CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Certificate serial: 01976BBD689D0F223D4C0B90E826A1EFD67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
Manifest number: 1464
Signing time: Sat 14 Jun 2025 00:01:04 +0000
Manifest this update: Sat 14 Jun 2025 00:01:04 +0000
Manifest next update: Sun 15 Jun 2025 00:01:04 +0000
Files and hashes: 1: iYh94B2LHL1Qt126yRM59mF6TYo.crl (hash: 3B60Fs8RonBu2MnPwjxhQRQa2CgBIFvrD4wNovrjhVY=)
2: jAe0olQrTlqlwekCa7zU__XvOnI.roa (hash: lpxqZITJHJnTC06LkfUlinyvWGfnxykj2N1zFv1cD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:68:9d:0f:22:3d:4c:0b:90:e8:26:a1:ef:d6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Validity
Not Before: Jun 14 00:01:04 2025 GMT
Not After : Jun 15 00:01:04 2025 GMT
Subject: CN=3dc5e7946e8e2928ba8b09e112af8305634eaece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:93:dd:64:c7:98:1a:56:06:d5:1a:fa:2f:7c:
77:a2:5a:e6:f8:7d:be:5e:b7:9c:71:85:38:fe:3f:
76:b8:9d:4e:84:60:19:6d:71:26:73:32:26:c7:ea:
32:57:55:6e:44:57:fd:68:4c:00:ba:07:ea:49:bd:
34:f7:00:48:41:1a:39:1f:a5:ea:9a:e3:a7:b4:c9:
97:7f:63:eb:bf:d6:84:5f:f9:9e:95:61:45:6c:35:
0c:4a:c2:9e:06:88:22:97:52:64:a7:3a:cd:d1:8f:
f9:7a:2e:a8:c3:e1:c4:5a:98:dd:05:1f:a2:04:99:
35:a3:df:b0:90:5e:71:e1:28:a0:3a:cb:e8:7e:f3:
f4:5a:42:99:01:d3:96:d5:06:e9:b3:f4:d3:83:96:
0d:9c:62:fd:1d:b7:79:09:9c:b3:da:49:dd:9a:b7:
e7:5a:0f:a3:ea:86:47:03:29:53:36:2c:a9:0e:e6:
98:e6:ba:6e:49:2d:3a:43:ed:f2:e7:1f:66:cb:d4:
d4:ef:54:b7:3d:5b:97:67:f7:e1:70:86:c7:16:61:
e8:ed:64:5a:88:1b:73:e8:2d:29:df:3c:98:41:11:
98:5c:0f:36:12:cd:29:d9:20:db:62:af:0e:e3:3d:
da:07:f0:8e:90:49:b0:2a:2b:13:f0:03:2f:82:f3:
92:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C5:E7:94:6E:8E:29:28:BA:8B:09:E1:12:AF:83:05:63:4E:AE:CE
X509v3 Authority Key Identifier:
keyid:89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e5:83:81:4b:e5:b6:c8:3d:bb:9b:33:63:6f:50:9b:bf:4b:
7b:f7:6e:30:12:0d:9f:03:6b:99:3a:31:5e:22:84:cf:44:20:
26:1f:b8:b1:95:4e:76:1c:1f:d8:c3:ec:fa:ab:e2:04:62:c3:
e1:3f:87:33:73:12:e5:4d:73:84:23:b9:b4:3e:d0:37:7c:1a:
c0:a1:82:59:0c:30:91:34:17:24:fe:41:ec:66:f3:fe:60:3c:
82:09:af:2a:86:04:07:84:02:5d:5c:ec:07:e7:9b:ca:f7:c8:
37:24:b4:b4:db:06:32:33:9f:d4:a1:27:de:2e:86:b1:15:21:
ed:61:e9:ee:3d:b8:cf:e3:32:2a:d8:c0:d9:eb:1a:ab:cd:49:
9e:b1:9e:cf:17:91:a8:2e:f5:3d:63:b6:98:75:9d:e1:d9:34:
4b:03:74:22:a8:b1:01:3b:eb:4c:43:52:5a:db:ba:8c:26:91:
73:bc:53:f7:f6:fd:26:06:e3:8b:ef:03:e1:86:7d:85:d6:31:
9a:22:ea:e0:b9:29:4f:d4:43:ba:b3:10:b9:9e:25:8a:da:e7:
09:f4:e1:a8:dc:a4:4a:91:9a:5c:68:12:c8:20:68:4d:10:1a:
af:b5:94:b7:eb:1a:c4:34:9d:e3:4d:a8:e9:f0:99:ea:e9:91:
34:75:65:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:42 2025 by rpki-client