Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
File: iIx7lGQtLku_uVg62UH1HrjEVkA.mft (raw, json)
Hash identifier: NZu8Ij9P3f82Kse6mjEKs2X+6vY2wlWfPuOrqqFgJCM=
Subject key identifier: 0D:C4:1E:C8:3C:0F:92:AF:70:6E:1A:1C:41:87:00:74:A7:F2:55:DB
Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
Certificate issuer: /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Certificate serial: 0197B8FCB0FF71A9976EC84F5A2EE79C1926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
Manifest number: 0FB1
Signing time: Sun 29 Jun 2025 00:00:57 +0000
Manifest this update: Sun 29 Jun 2025 00:00:57 +0000
Manifest next update: Mon 30 Jun 2025 00:00:57 +0000
Files and hashes: 1: cuExqJqxDerCAtylcJmCrVbgef4.roa (hash: 598WR0Sv6MZYZg5mTZECmrWO2D4wIr/fUZ49xt8Yu9Q=)
2: iIx7lGQtLku_uVg62UH1HrjEVkA.crl (hash: W0a5LYbz5kgdRzTRZn2koVBhKO3yQgRW1W5iIp3FSMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:b0:ff:71:a9:97:6e:c8:4f:5a:2e:e7:9c:19:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Validity
Not Before: Jun 29 00:00:57 2025 GMT
Not After : Jun 30 00:00:57 2025 GMT
Subject: CN=0dc41ec83c0f92af706e1a1c41870074a7f255db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:ed:82:dd:17:e8:52:4c:63:fb:b3:b6:02:
f6:62:fb:c5:6f:b2:15:c8:73:4b:68:50:1c:fa:b5:
b0:47:cf:d5:3b:e0:b6:d2:d9:09:bd:f0:65:ef:01:
18:75:93:ae:4a:e3:dc:0b:29:a0:fe:ec:64:16:2a:
b2:85:93:57:22:40:f5:3b:37:11:2e:d0:49:18:91:
7a:6e:d5:45:9e:a2:fe:f6:82:97:e3:03:97:93:25:
fe:ae:f7:c3:8f:4f:fe:d3:79:e8:58:b8:38:66:b1:
b8:86:03:6e:d2:9f:df:86:c5:a4:bf:88:63:5f:23:
92:d0:32:7f:0c:c1:43:3f:8f:c5:9d:e8:7c:46:d2:
6d:f5:a1:50:c1:0a:8a:25:9b:3c:00:bd:76:7d:6a:
97:b7:4c:af:97:52:37:34:8b:15:bb:b4:b0:7a:85:
65:30:8c:b3:e8:e4:56:10:1a:65:69:27:aa:0f:a9:
42:6b:52:1d:80:cf:0e:20:99:4c:31:89:a6:8e:9b:
7e:80:98:7d:d7:73:19:dc:8e:e1:2f:50:7e:d1:5e:
62:df:22:22:90:0e:88:b0:d2:cf:1c:f8:9c:91:ea:
23:d1:9a:d5:e4:4c:3e:42:0f:77:5c:71:10:31:b3:
ea:da:d1:04:c9:94:8a:e9:bd:f9:3e:e9:62:98:13:
fb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C4:1E:C8:3C:0F:92:AF:70:6E:1A:1C:41:87:00:74:A7:F2:55:DB
X509v3 Authority Key Identifier:
keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c9:ed:7f:22:2d:72:03:b3:9f:bd:81:5d:0a:ce:78:ea:30:
bc:20:36:65:57:44:83:c7:80:7c:98:2d:69:25:6f:06:ac:aa:
d4:4f:55:52:ea:01:de:e4:ae:df:34:58:85:89:65:bf:0d:c7:
9a:3a:ed:3b:96:65:25:63:21:cf:d4:a9:91:b0:37:50:2f:ba:
be:a9:e1:1d:5e:9a:01:d6:0b:4b:2a:75:02:44:d9:16:c8:22:
7e:ab:69:98:2d:36:63:60:42:5d:92:9b:bf:4e:f4:48:60:6c:
7c:2a:86:ed:aa:ca:d5:95:81:8c:48:99:a7:2e:2a:2a:38:ac:
98:e7:53:c0:6e:f8:b2:d8:05:6f:a6:5d:7c:63:5e:45:0b:73:
61:c6:79:a5:e4:c8:ae:bd:26:5c:08:35:08:7c:76:45:c3:0b:
62:b0:57:49:be:fb:8b:2c:ca:a1:3f:12:55:07:9e:ec:c1:39:
d3:27:b3:74:33:4f:11:c9:d4:de:4d:18:a0:87:91:74:cc:a5:
d7:d9:21:2e:fc:8e:a3:20:cf:dc:82:39:16:9f:61:63:d0:d8:
b2:20:af:71:52:21:1c:d0:b1:de:52:d7:0d:6d:e2:88:6f:25:
2f:20:75:e9:ca:8c:b6:76:30:23:fc:4a:a0:9a:1c:8f:a7:35:
9e:d3:59:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:26:16 2025 by rpki-client