Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json)
Hash identifier: OItsOhWfE/fN4HCTauTDzpNwPYRQkbAGUda8x/75cAs=
Subject key identifier: 8D:31:EA:C5:B0:B8:43:A9:F6:02:DD:BE:75:65:6B:5C:4D:75:84:23
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 0197B7B343FE1EE8D0B4F8B2F14A1298ABC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
Manifest number: 082C
Signing time: Sat 28 Jun 2025 18:01:08 +0000
Manifest this update: Sat 28 Jun 2025 18:01:08 +0000
Manifest next update: Sun 29 Jun 2025 18:01:08 +0000
Files and hashes: 1: EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa (hash: WGOFdfPIgmzQx9aGUgM6u6XYxnkTJOLa0M2Z4HLrsFA=)
2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: oGlbwFkO14l1rS13XC11OmjxPY4rlgU85TAXPZlfANQ=)
3: TaMd7DA-6NrsYwAIJaSvClB4fpo.roa (hash: dkRPf4s5CoCdHNuMtPMADul0c0mdFRvVK8/5OUkpYlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:43:fe:1e:e8:d0:b4:f8:b2:f1:4a:12:98:ab:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Jun 28 18:01:08 2025 GMT
Not After : Jun 29 18:01:08 2025 GMT
Subject: CN=8d31eac5b0b843a9f602ddbe75656b5c4d758423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:36:f3:25:8f:33:d7:7b:8c:c0:39:f1:b2:
19:28:28:f4:1d:2f:b5:58:ea:79:54:c8:c7:c2:07:
f0:fe:01:a2:8f:13:f2:73:55:0f:69:2b:6a:fe:25:
8e:31:38:28:c4:f7:1c:91:79:07:a5:c0:ce:27:76:
08:4a:9f:23:c2:c4:b3:a6:46:99:e0:d1:2c:34:e2:
ca:89:5d:e6:ea:b2:93:5b:7e:12:1a:e6:40:03:55:
60:d0:92:34:0b:81:b9:ae:32:00:42:29:ba:66:d7:
10:13:be:9a:4a:70:e2:70:55:0d:a2:18:ee:11:0b:
9a:ba:0d:17:1e:b6:f6:73:9b:8e:85:3c:8d:c3:9f:
69:4d:0b:b6:27:d5:e7:32:05:90:e7:01:53:de:0f:
17:60:66:08:e7:bd:4c:6b:51:c5:8b:db:08:16:07:
8d:12:e9:c9:24:43:d9:6a:8d:ee:0e:74:82:c1:46:
8b:17:fc:55:2e:93:31:7c:f6:b9:32:4b:56:6c:3f:
37:5b:d8:04:bd:5b:15:d1:31:22:47:3e:dd:d5:21:
5c:e7:a6:95:c3:d5:a7:2d:a7:b5:60:09:b8:d5:fa:
20:09:72:f7:9c:2a:74:4c:06:c1:23:45:7b:ef:04:
fb:a9:87:71:4c:7c:83:00:ec:0e:52:c6:5e:1d:64:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:31:EA:C5:B0:B8:43:A9:F6:02:DD:BE:75:65:6B:5C:4D:75:84:23
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c3:02:93:c5:3f:fb:b9:b9:d6:c8:99:61:f1:be:17:56:9d:
0c:d8:eb:a8:ec:43:ab:ad:b2:f6:3c:5b:8e:c2:22:f0:e9:2d:
5f:f2:8f:2f:ec:7a:0c:e7:5d:b2:c2:33:89:5c:61:46:01:b5:
e9:1b:5e:02:ca:50:82:28:fa:3d:bd:a5:db:14:f4:4d:c0:1f:
6d:c1:18:43:80:6f:0f:26:c2:85:be:f9:13:8c:77:34:8c:4c:
76:e7:ea:40:73:d2:af:33:2d:e8:0f:a6:5b:79:4d:2a:66:bc:
c2:ed:bc:19:f0:5f:7a:63:6e:b7:3e:97:f5:46:d9:b9:3b:ce:
93:03:bd:37:a3:aa:b9:98:26:55:65:60:60:31:ba:19:40:14:
a0:6a:d7:25:63:b3:c2:1f:6a:21:bc:c3:b6:98:af:22:5c:a4:
b0:71:2d:ad:d8:5f:c1:ce:14:b8:1c:f7:e4:26:d8:c4:b7:4c:
60:f1:45:2a:ac:9c:18:94:73:76:47:82:05:47:33:8c:35:9e:
df:86:54:7e:74:ca:fe:40:f8:94:05:77:38:81:8f:4e:1d:85:
17:3f:53:59:27:6d:14:3e:12:79:ab:f5:86:9d:13:99:0a:47:
77:4b:b7:de:da:5a:2f:61:0b:ea:44:16:57:d1:7c:18:de:68:
cc:53:35:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:04:30 2025 by rpki-client