Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
File: iPQfqz5j6vW98HFm31qmgWLq16Y.mft (raw, json)
Hash identifier: yS4SySuF65Reog3Lo0V75wZnvJL7PKxMVZ3e25fl598=
Subject key identifier: 33:94:CD:4D:4A:00:76:7A:22:0B:FE:7B:3A:E6:71:E1:84:22:55:98
Authority key identifier: 88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
Certificate issuer: /CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Certificate serial: 0197CC834142D9C200E704EAA71BD3950F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 19:00:43 +0000
Manifest this update: Wed 02 Jul 2025 19:00:43 +0000
Manifest next update: Thu 03 Jul 2025 19:00:43 +0000
Files and hashes: 1: iPQfqz5j6vW98HFm31qmgWLq16Y.crl (hash: 7KCcRIrTX0139Z2JcYEjBimKY2TRNMLOwbdYBdQzdWI=)
2: uNj0vhcUK_UhfSxrxVZLYp2n6nk.roa (hash: xTRc4Rd4GJsupl0R/CzG6nNJAwdCcx0IPu8T4AbYP1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:41:42:d9:c2:00:e7:04:ea:a7:1b:d3:95:0f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Validity
Not Before: Jul 2 19:00:43 2025 GMT
Not After : Jul 3 19:00:43 2025 GMT
Subject: CN=3394cd4d4a00767a220bfe7b3ae671e184225598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:73:c0:71:c1:fc:ff:c4:1b:96:8d:3b:36:
35:30:c6:7d:01:a8:2b:15:37:91:18:2a:f4:d1:81:
80:fa:f0:f4:2f:54:16:48:8e:b2:00:fa:ea:71:56:
88:b4:a8:c8:34:e0:68:ed:00:b5:33:60:22:4a:ab:
35:a0:4c:85:7a:3e:82:f4:32:39:c4:a2:87:1d:f2:
ae:25:4d:7a:4c:ea:3c:9d:75:34:f9:09:a8:12:bb:
08:81:0c:f9:aa:e7:51:19:62:5b:c9:89:d1:2b:98:
c6:77:a8:03:6f:1b:63:b4:ae:ce:aa:2b:e8:c5:af:
c4:06:a1:16:5c:72:da:33:1d:42:3d:63:dd:9a:99:
28:46:9f:0b:ea:76:19:b1:fa:94:12:83:f4:53:ff:
5f:36:e5:cf:00:92:ae:24:14:75:d8:2a:5a:2b:7f:
84:2b:e9:cd:96:bd:96:9c:f6:ab:f5:04:10:b4:a3:
c0:ca:95:4f:46:ff:e3:f1:d9:71:87:4b:94:9d:4a:
6b:36:45:94:3d:2f:41:df:ef:07:a0:8c:c4:51:a0:
c7:cf:ae:ef:81:f6:3b:4a:c1:5e:73:61:14:08:9f:
6e:5a:c9:aa:5d:3b:3b:57:e2:89:58:36:cf:95:6f:
9c:5b:32:77:90:5f:f9:5d:9d:b6:11:0a:11:eb:42:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:94:CD:4D:4A:00:76:7A:22:0B:FE:7B:3A:E6:71:E1:84:22:55:98
X509v3 Authority Key Identifier:
keyid:88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3d:db:01:07:dd:ae:67:9d:94:e0:f2:3d:9f:20:16:24:ff:
f0:c1:c3:59:7f:c4:2b:b9:18:6f:de:05:b6:10:37:23:50:27:
45:fc:7c:95:c7:d4:1c:e2:05:7b:f7:bb:9d:14:9b:67:9d:f3:
c5:70:23:71:12:bd:33:07:6c:1e:a3:35:bb:ef:0f:fd:5a:4e:
4a:ad:b4:24:ca:fb:a8:ef:6e:50:d9:28:6e:f7:c7:6b:f1:7f:
d2:4f:97:f1:42:85:ed:6a:68:a2:95:3d:6b:64:38:22:28:69:
53:60:f6:90:e3:7f:b7:bb:0b:ea:56:b4:a2:da:86:2d:60:83:
df:fb:15:1b:f9:0c:e0:6d:09:da:87:c3:6b:66:44:70:66:a8:
41:f6:c8:3b:22:59:1b:70:b1:9f:69:61:50:f1:4a:40:bd:d8:
35:d5:a7:b9:a8:60:d3:af:a7:eb:99:1b:35:4a:3d:9c:63:a3:
37:d6:f2:31:0d:50:0a:ef:47:40:11:7d:54:94:92:11:dc:c9:
97:d0:e7:12:0a:82:98:51:2c:50:67:ea:98:19:3d:cf:bf:56:
3e:e8:32:79:65:b5:77:b2:0f:bf:c0:05:36:5d:00:6c:de:b5:
e6:a9:ae:68:6e:3a:6e:04:51:3d:3a:0d:6a:f6:14:50:3a:7c:
36:bf:dc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:24:12 2025 by rpki-client