Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: ZVa1Gm3XlsOVK0/EAHuALl2MuJOCF53fxFZh4//N/i0=
Subject key identifier: DD:41:21:39:16:4F:6C:62:8C:9F:6A:99:1E:EA:38:EB:50:E8:1B:26
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 0197B8213C99A89A3322F1860787105AA2D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 0D65
Signing time: Sat 28 Jun 2025 20:01:15 +0000
Manifest this update: Sat 28 Jun 2025 20:01:15 +0000
Manifest next update: Sun 29 Jun 2025 20:01:15 +0000
Files and hashes: 1: RZ_4-lCargPhDnsOSk7--hEov_g.roa (hash: gD59YlfjEOMaA7jKCDG57LDieQBZUtUGKFnW719fGG8=)
2: abKcOp3qmm4ybUnw1tBA-G8yOrc.roa (hash: /klckxmc/giyHaniwWbEf+LlQIwRtUPvFDW14KDXips=)
3: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: Sm5uTwoU/dI/YsAgHAC1PTKZe7+kVtlRR1Cs70wgCsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3c:99:a8:9a:33:22:f1:86:07:87:10:5a:a2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Jun 28 20:01:15 2025 GMT
Not After : Jun 29 20:01:15 2025 GMT
Subject: CN=dd412139164f6c628c9f6a991eea38eb50e81b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:5d:17:7d:6f:9a:bc:27:b9:45:0d:b0:30:
89:bf:33:1f:41:8c:ea:9c:22:d2:41:04:fe:8e:20:
42:83:b9:0e:5c:47:02:0d:c6:d4:82:df:0e:72:0e:
ff:aa:16:77:92:6d:45:9e:d9:56:a8:61:8b:25:ff:
13:eb:df:bf:79:88:84:b9:26:22:08:af:44:16:d2:
28:ec:1f:02:3c:1e:b7:16:31:d6:cd:3d:04:d1:cf:
1d:fd:11:a2:b0:31:c6:78:48:46:96:6a:f4:60:94:
71:8c:1e:2f:0c:64:fc:03:c9:48:ba:0b:61:8b:cb:
7d:da:ba:40:36:f0:a9:57:3c:60:1d:ae:0b:9a:74:
c1:57:85:24:b0:ff:40:d0:20:c9:02:83:5d:64:8e:
48:c1:be:67:7e:6b:cf:57:a8:4b:5a:e6:a6:97:67:
55:d4:8e:4e:da:02:93:ab:fb:13:7b:93:f2:32:53:
6b:dc:37:a4:f7:ed:7f:b1:36:fe:f5:01:3c:00:ea:
76:51:80:42:04:e3:d4:a0:87:1e:60:a1:ae:40:0c:
f6:c5:21:77:6c:19:58:f8:97:a7:b5:82:55:27:ae:
8e:2d:e2:8e:51:cf:51:d6:cd:ce:a5:e7:72:f0:cb:
d4:a4:c1:ca:fe:b2:73:d2:c8:b6:78:44:48:70:1a:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:41:21:39:16:4F:6C:62:8C:9F:6A:99:1E:EA:38:EB:50:E8:1B:26
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e9:03:51:ab:12:e3:16:5f:6c:8d:e6:a9:bc:c0:ae:34:a1:
cb:12:27:17:7e:f3:29:74:01:31:44:d7:8c:ae:71:23:e0:32:
77:8a:e7:d7:5d:d9:8b:49:ed:db:7e:db:39:7e:c5:7e:c8:af:
36:30:90:50:15:91:9e:c2:ad:c0:0b:9c:0f:37:65:45:d6:33:
8c:d4:5a:a0:b8:3d:63:e6:98:b8:7c:61:79:98:8d:cb:97:6f:
3d:43:32:1f:f6:4f:59:50:65:49:d5:9c:f8:d3:09:1e:cb:5c:
89:c8:53:24:39:ba:82:a3:b1:d8:7c:8f:a6:05:19:a1:97:77:
e3:f6:4e:75:a1:9c:f3:81:19:d9:bb:2d:91:a3:17:db:34:16:
82:e5:d9:7a:4b:f9:d4:7f:85:0a:cf:b8:6b:d1:ef:64:27:6c:
d2:09:df:b6:53:ed:3c:c2:7d:e7:d3:2b:54:e0:27:32:3e:2b:
56:25:86:4e:24:77:1a:d0:49:5d:4f:ee:22:44:66:b9:a9:cd:
f5:5b:7e:7f:1f:d8:80:9c:5a:82:e0:c4:d2:ee:24:fe:60:62:
25:f8:1c:74:c3:b2:17:98:6f:81:08:88:ff:a5:8f:bb:51:d9:
b7:3f:a1:b8:33:df:e0:15:68:58:86:7a:67:20:ee:99:53:41:
c5:44:42:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:18 2025 by rpki-client