Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
File: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft (raw, json)
Hash identifier: B5AVcsRVEbdr+NN7vYym3Bri5bbwdxq9Nez8mT/nSoI=
Subject key identifier: 82:A9:45:DE:35:6A:60:9F:CD:04:92:D0:48:7F:FD:64:26:AC:A8:14
Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
Certificate issuer: /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Certificate serial: 0197B77C5BCB3658225D154CA613639D3837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
Manifest number: 12D7
Signing time: Sat 28 Jun 2025 17:01:09 +0000
Manifest this update: Sat 28 Jun 2025 17:01:09 +0000
Manifest next update: Sun 29 Jun 2025 17:01:09 +0000
Files and hashes: 1: hIJG4JYkLEhwraYEYvL-fraByuk.roa (hash: 5YFKdkA5FRK1IPjfHxOUcAbA5SZ2reBZq68WODkSIGA=)
2: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl (hash: 577nM8rLERVhij3dgGwUixxnvFuHiXBOf48ow8OQP3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5b:cb:36:58:22:5d:15:4c:a6:13:63:9d:38:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Validity
Not Before: Jun 28 17:01:09 2025 GMT
Not After : Jun 29 17:01:09 2025 GMT
Subject: CN=82a945de356a609fcd0492d0487ffd6426aca814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:66:be:42:e0:e2:d6:97:27:f7:3b:fa:fe:
8f:4f:e3:77:14:b9:59:22:0f:49:82:e2:58:79:96:
df:35:fe:b5:ef:aa:4e:2c:1b:5e:e8:a2:10:65:f9:
cf:c2:86:c7:6a:81:80:a3:3c:a7:d7:88:aa:a5:ea:
c6:c8:af:56:c2:72:99:ab:fe:77:30:97:36:18:d7:
39:87:3e:99:c3:71:11:d4:13:7d:57:8a:2a:cb:b2:
f4:2b:05:37:46:8d:1e:4c:f9:04:22:04:fe:df:05:
38:41:4c:6c:9f:c4:92:66:6c:ec:09:2f:d4:48:8f:
34:49:9a:9f:65:77:5e:38:45:9e:8b:a7:79:1f:20:
5f:24:85:1a:3c:d8:8d:02:41:76:b1:bf:28:bb:3c:
1a:ab:91:a8:5c:c6:3a:65:17:5d:8d:bc:0a:8a:c4:
da:7f:26:b4:a4:1d:3d:bc:6e:49:c3:8b:60:04:82:
40:fb:7d:d8:43:a6:4f:20:50:4d:0f:d2:3f:d6:d6:
64:64:3b:97:d8:f5:6c:54:f2:30:9c:07:28:da:88:
b8:24:59:2e:e7:21:ff:de:c4:e5:3c:f1:a3:fd:0f:
86:ce:ef:18:8a:dc:d7:65:d6:11:e6:11:d4:4b:94:
bd:12:fe:02:62:f9:d5:ec:a8:6f:45:7a:93:c8:20:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A9:45:DE:35:6A:60:9F:CD:04:92:D0:48:7F:FD:64:26:AC:A8:14
X509v3 Authority Key Identifier:
keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:74:5b:e4:6c:91:b7:e7:d7:8a:c8:0f:67:df:34:18:2f:58:
27:07:63:35:72:31:08:d1:e7:8d:5f:1e:fd:34:ff:ff:c2:37:
de:d1:3b:bc:e0:98:78:88:c8:25:b1:8c:92:02:01:80:d1:5f:
e7:45:ce:74:d7:53:a9:9f:26:28:b7:f1:4e:03:1c:cd:9f:05:
da:ca:47:7c:7c:37:40:fe:e1:1b:50:2e:b8:e2:f3:34:a3:41:
c4:a7:e9:f7:9a:29:b8:be:0f:fe:44:c6:24:95:79:92:0e:f5:
0e:e9:e6:b5:cd:8a:a2:cf:35:36:d4:15:92:f7:24:cc:29:d9:
a5:21:5a:b4:a2:fd:09:4a:2d:56:b5:49:19:3a:88:a1:9f:df:
a7:f8:ee:9e:41:10:4f:1f:d3:08:f4:c1:39:c7:f8:e0:47:49:
e9:84:94:9a:9e:a8:3d:f2:11:98:4c:86:17:77:90:23:d9:41:
cc:08:78:c0:54:e2:4e:87:44:d9:db:59:b5:63:75:25:9e:f7:
a7:db:2c:82:ea:9b:f3:a6:ae:b9:44:b0:66:77:13:cd:5d:6d:
70:5b:c4:35:76:75:43:ca:f8:73:01:6f:c7:7c:b9:3b:08:b5:
02:bb:61:76:fd:55:dc:1e:65:82:e9:ab:c8:3e:8f:47:a8:a6:
4d:7f:be:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:22 2025 by rpki-client