Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: DPc8Mzg/bhHWZXRVVS8viMSQphepLXOwvQahI1HCoCU=
Subject key identifier: 72:DA:C3:86:48:81:16:E9:90:4D:CB:F7:F9:F1:DF:A4:59:B5:8F:94
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 0197B745A305775C5F13CDCDE8C36C478027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:01:23 +0000
Manifest this update: Sat 28 Jun 2025 16:01:23 +0000
Manifest next update: Sun 29 Jun 2025 16:01:23 +0000
Files and hashes: 1: 0tVPRt7zVqUIIvmXairhGKRXv0U.roa (hash: dhSo1lkIbUUIXrPA3/k2AFZiXI7dxBUbTf590V+gQts=)
2: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: EPl1vjUWQ+bJyZw15X1RfoLko0vZ8/gaeSheYtiLgt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a3:05:77:5c:5f:13:cd:cd:e8:c3:6c:47:80:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Jun 28 16:01:23 2025 GMT
Not After : Jun 29 16:01:23 2025 GMT
Subject: CN=72dac386488116e9904dcbf7f9f1dfa459b58f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:e6:07:ec:1f:a7:cd:38:d3:54:e2:69:31:
e3:eb:bd:36:63:ca:ab:33:6a:82:74:85:88:fb:d8:
7a:b5:bb:7f:c3:4e:af:a3:73:76:14:9c:f9:a2:a5:
00:7a:ee:6b:16:d3:45:87:59:ae:da:37:85:3c:6d:
7b:79:b8:44:1b:5c:a7:74:33:6e:08:2b:8f:70:36:
68:6b:19:ab:7d:91:6e:c4:cd:68:e6:00:db:65:3d:
13:51:f9:9e:c2:9f:1b:1d:2d:55:74:80:28:ba:f2:
9b:ff:5a:28:8e:65:81:d6:ad:42:f3:7c:15:fa:26:
c5:e9:83:14:60:f0:f6:bb:f6:cd:8c:38:b0:f6:48:
b9:ac:66:d6:cb:2a:6e:54:c9:c7:c9:fb:45:9f:79:
b6:74:33:62:c2:d0:b4:59:8e:0e:6d:b9:c0:09:f6:
04:2b:e6:c4:36:aa:8f:44:65:52:a5:44:0e:7f:09:
2c:3c:f4:74:fa:a1:62:9f:c9:59:b2:c7:cd:43:72:
19:38:24:fe:4d:68:29:cf:b2:d5:cf:f5:3a:bb:c7:
ef:db:57:90:47:2b:f6:85:bc:52:79:a8:01:d4:c3:
db:f9:06:17:15:11:1c:6f:d9:d6:f2:52:35:3d:aa:
c7:9c:ad:44:82:fa:0f:73:f3:f2:d1:a7:87:95:eb:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DA:C3:86:48:81:16:E9:90:4D:CB:F7:F9:F1:DF:A4:59:B5:8F:94
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:08:e5:03:ff:81:c1:1c:97:de:02:ea:38:a5:07:5d:a8:41:
9f:31:cf:3d:b9:1d:44:19:ba:e0:e3:17:c2:44:18:13:02:22:
56:09:d5:89:74:3c:77:bf:c6:c7:67:e7:ee:29:d4:0e:44:04:
62:58:25:26:62:d6:88:56:b6:bd:85:b5:56:98:19:4f:ad:71:
44:e1:c1:a4:f1:a9:0a:7a:23:80:7d:4d:6c:b6:16:5c:6a:74:
fa:d3:99:e4:54:f3:e4:e4:0a:b3:d6:da:bc:6f:58:bb:cc:0f:
b6:43:25:a3:33:a1:63:16:94:19:dc:2f:7a:90:bb:9a:92:a9:
86:14:17:21:ba:ec:f3:6e:36:80:1d:46:96:18:98:ff:03:f3:
05:4b:46:c9:84:3a:66:06:91:eb:36:70:01:1b:27:f1:0f:aa:
93:00:c3:f2:78:0e:e4:3b:c5:8d:a5:6a:f8:c5:b8:41:d5:77:
91:74:52:e8:b1:cb:8f:e4:91:c4:02:d7:c2:53:af:cf:9e:c4:
59:b4:17:90:83:3f:43:3c:64:80:2c:b7:55:01:ca:8c:dd:91:
2c:32:66:26:e1:b6:46:da:26:ae:13:81:5a:cf:1b:9b:d5:a7:
70:11:03:e3:cc:62:46:a2:44:28:e8:55:a3:17:96:c1:9b:17:
9e:95:6b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:28 2025 by rpki-client