Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: 5VI55sy60nwVVlSyQZvu4xc1BgFqB0S4pRu0oE57HEU=
Subject key identifier: 61:CD:BC:50:56:34:99:3F:8D:B4:CD:73:74:01:27:FC:08:5A:F4:D9
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 0197B93414071709EFD2028099FC20ABD21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 15BC
Signing time: Sun 29 Jun 2025 01:01:27 +0000
Manifest this update: Sun 29 Jun 2025 01:01:27 +0000
Manifest next update: Mon 30 Jun 2025 01:01:27 +0000
Files and hashes: 1: JoFV0lmrgBVp2NchrwUNBCxFqPk.roa (hash: 6FTsXZns8p+PiPkKjnYlGHxMRtUZaiMCOOMvrqE4q2A=)
2: LXcAIZsJjKqYcEZ-B4QhCzqX1y4.roa (hash: qXMNjFLmC2o8C7/tTBWAvWSGp3iRQoR6PHBawFPFtHc=)
3: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: gbIzTlcct5ae3o6Pt2zsAFhehkl8UjZi83/F8o+jAcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:14:07:17:09:ef:d2:02:80:99:fc:20:ab:d2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Jun 29 01:01:27 2025 GMT
Not After : Jun 30 01:01:27 2025 GMT
Subject: CN=61cdbc505634993f8db4cd73740127fc085af4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:94:c7:74:2b:7f:33:07:30:82:e8:52:52:
d5:25:4d:b6:ad:72:fc:d2:01:fc:89:75:9e:7b:7c:
17:f4:e4:87:3b:6b:c6:42:69:bb:ea:f2:1e:3a:07:
e9:b3:bd:33:b1:03:59:94:98:5a:ae:e4:a5:4a:27:
ff:bf:76:cb:cf:e1:16:35:a1:f6:db:05:81:70:e9:
b6:d8:5f:8b:cf:73:a6:af:2c:0a:a3:95:e2:8f:f0:
87:1a:dd:8d:e2:7a:88:3b:dc:33:57:49:21:25:30:
fa:23:fb:bc:c7:a3:0d:08:ca:7d:d5:43:66:e9:90:
5a:d6:dc:ea:73:8b:22:51:c2:cc:c1:52:80:2a:7a:
59:aa:36:76:81:85:fe:c8:c9:3c:c4:67:31:80:ac:
10:0e:28:28:7c:d0:64:be:ae:85:33:4f:71:49:ac:
27:9d:65:82:b2:30:61:e2:e7:05:c4:7a:b6:31:36:
ed:8b:62:ac:70:98:68:36:24:a6:db:e2:45:82:ae:
e4:7f:c1:9c:a7:fa:d1:60:32:3f:1a:18:33:6b:ad:
58:e8:7a:9a:1e:7c:1d:cf:e5:56:df:b3:63:6d:27:
e3:05:43:c3:8e:4a:bf:18:68:9a:b9:d4:3b:1c:e4:
c2:63:62:fa:96:a0:b0:2c:94:31:2e:c5:19:66:58:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CD:BC:50:56:34:99:3F:8D:B4:CD:73:74:01:27:FC:08:5A:F4:D9
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ca:45:a4:ed:7a:33:e3:9a:97:74:83:28:ad:96:8e:29:05:
02:f2:dd:f2:ec:53:34:a1:a8:4a:82:7e:17:02:93:47:dd:b8:
84:a8:2a:4c:e4:73:4f:94:67:45:66:47:98:10:9f:2d:96:ad:
a8:65:e4:fa:1c:b6:08:77:3d:67:ef:df:57:99:54:1b:ec:6e:
aa:37:fa:70:87:b8:66:9e:5f:85:31:03:09:81:e3:cc:35:ff:
fa:ca:54:24:8a:96:a4:d1:2f:22:9e:e7:96:33:4d:b9:55:c5:
21:be:51:c5:68:ab:95:b0:fd:c5:b1:de:fc:b5:1a:50:fa:71:
6b:84:0a:7d:7b:ac:bf:92:f0:a1:b0:a0:97:4e:20:33:67:c2:
38:61:03:10:3d:16:e1:b4:e7:20:ef:2e:30:bc:c6:85:0e:78:
b0:7f:9d:13:08:95:9b:34:0f:a9:ac:84:36:16:b6:97:0c:60:
aa:06:f9:d1:41:b7:39:24:86:1e:2a:75:72:f6:57:86:12:9d:
d7:e4:dc:97:5f:d2:93:a4:c6:4b:e3:db:90:f8:dd:41:f8:a6:
ad:47:44:58:22:e0:59:40:c1:37:f5:f3:24:ca:c9:a7:ef:aa:
09:87:83:19:94:78:63:ae:0f:7f:cc:20:04:2e:a2:e3:54:21:
53:04:b1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:43 2025 by rpki-client