Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File: IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier: Uq4MYyxmDrayhQUKmg6cMicFDLpA9aZreJEr2lKEBhw=
Subject key identifier: A9:BA:F1:1A:04:6C:7A:89:4C:5E:9D:1A:BE:6C:F3:B5:CF:C6:68:67
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 0197778A5E444ED3511B4BA33A70B08C9B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number: 15CF
Signing time: Mon 16 Jun 2025 07:00:46 +0000
Manifest this update: Mon 16 Jun 2025 07:00:46 +0000
Manifest next update: Tue 17 Jun 2025 07:00:46 +0000
Files and hashes: 1: B6aGxUDSSan1LbYvufjyd3IQLUs.roa (hash: dwUg5aBoWkQufw+jFxFp1hxo39/3rnNdCzkl0XPMgUM=)
2: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: MQ4/0eEqNo+afOaMMy2GO3ws84mHtODkeM6q3vZkHM4=)
3: P1ooM0tRadnnfs7yPA4JyGHOu90.roa (hash: qt3kTikonByn5yyGAReXdJ6ZcgQBVF+qY0HIxFsZ/us=)
4: P2j-hUrnI_G8_z_xhTDbKbOjagw.roa (hash: KXKpMQn72rg2fYHpKvlZTFcp58U/Tju8WHXUSLpo2kU=)
5: RC7wgRAs2o4H2l1TLqn8NZUndUY.roa (hash: SCrWR5DUqk0ILJy6T4Si10/+i7OXDOm/wTyU6YmTVRU=)
6: TU-tMONGCT3DfIZWWAUdCOe9_Ro.roa (hash: F4YEB/jOyjkaM49IR5P9MseesiwqC68DyQAyT79ZX1E=)
7: jNrtD4zRsZVN6RiJAEomlUdUZdA.roa (hash: KgT9cW1vNdUm5rrXt6b08EWBC589TMe3HgUs7IKuzA4=)
8: vNOS5vUWCqJEMFsm4Huo1TSEvCc.roa (hash: yDPHPi4lOHCdMJ+/kRIvQ07jiloiQq/r5yFG565XkNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:5e:44:4e:d3:51:1b:4b:a3:3a:70:b0:8c:9b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Jun 16 07:00:46 2025 GMT
Not After : Jun 17 07:00:46 2025 GMT
Subject: CN=a9baf11a046c7a894c5e9d1abe6cf3b5cfc66867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:af:be:f0:62:4a:b0:a0:68:e8:5d:ab:18:0d:
d1:c1:60:94:94:2a:06:1a:0e:6f:c3:60:44:e5:cd:
4a:00:e3:c4:21:81:43:db:af:d1:40:6a:52:a8:b3:
33:5e:62:47:61:f3:fb:45:0f:b7:2f:37:2b:3e:e3:
89:e2:1c:c7:b0:d6:1b:4f:48:0e:a8:cb:e1:ca:2a:
19:44:92:cc:1f:d9:4a:aa:55:0f:1c:5c:9f:f2:fb:
a7:9a:8e:07:25:37:2f:96:33:18:9e:fc:e5:44:fc:
98:36:c9:9b:c9:e0:bc:7d:42:26:96:a7:c7:67:9a:
fa:f9:47:98:b1:df:9d:9a:87:bb:27:e2:00:e2:06:
70:de:2f:06:56:40:6f:4c:51:a6:18:80:ba:2a:1f:
f3:0a:40:69:f9:f8:fd:f7:c8:47:46:f1:aa:ec:91:
c2:8f:a9:fe:73:69:d3:e2:9f:f3:2c:14:5d:d7:2a:
3a:2c:fc:fc:67:8a:cd:bd:92:07:81:52:c1:f7:25:
3c:13:b5:2b:c8:c7:f0:9a:e4:62:a4:2d:75:26:7e:
9b:18:67:fe:bd:3f:f0:26:20:a5:c8:f0:24:24:32:
60:12:13:1d:cd:25:6c:eb:8d:1e:4b:3e:63:35:23:
7b:cb:4c:04:9a:68:1b:58:55:a5:d3:e4:70:6d:56:
43:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BA:F1:1A:04:6C:7A:89:4C:5E:9D:1A:BE:6C:F3:B5:CF:C6:68:67
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5a:bd:1f:ea:27:e6:6d:13:5f:3a:50:75:ce:5e:44:6a:5a:
86:97:90:1e:be:c1:b4:9f:c7:72:88:3f:65:35:30:e7:e3:85:
72:bf:d2:37:0a:96:6c:6f:e1:da:b1:98:e6:48:7b:f9:8b:23:
df:ea:f4:d5:d5:65:3f:ab:e8:e0:61:3d:c8:f5:0b:cd:48:1b:
5a:41:31:a1:a5:7c:b3:60:60:ef:b2:ed:84:b1:db:f1:94:c5:
f2:bb:8a:db:d2:27:35:8c:88:71:c2:5f:5a:ef:17:c5:6a:04:
39:b4:7f:eb:fe:1f:3d:d7:a5:cc:19:d1:ef:5b:87:eb:b6:47:
2e:60:3d:3b:5f:b1:40:c6:e5:c1:1f:8e:41:bc:1f:4e:24:71:
27:2f:bd:e3:e9:c0:f7:d9:8b:e4:de:09:af:8e:2c:c9:2a:b3:
39:6c:96:55:89:02:c3:90:0a:63:05:06:18:00:a2:ae:eb:ca:
2f:90:0d:36:8a:aa:ea:8a:7f:c5:87:66:01:9a:29:ba:7a:69:
f9:b2:37:61:1a:be:a8:71:4f:15:da:dd:d4:d6:75:aa:6c:93:
b6:8d:a4:3a:c3:72:fc:28:d2:37:65:b4:bb:f8:8f:b5:c7:11:
1d:b3:1c:a1:63:6e:4d:bc:5e:aa:97:b2:58:6f:2a:b5:b3:f2:
31:ef:4f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:56:21 2025 by rpki-client