Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json)
Hash identifier: JgjQnpRCWIiZyRL8tTKUlOTj8AtgDrTdVVpzTU/Nh04=
Subject key identifier: B2:03:97:FF:54:52:6C:F8:4E:D6:27:66:76:23:72:2C:BF:50:FC:1F
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0197B66949A22FF43F610169DC4A2C981E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
Manifest number: 159F
Signing time: Sat 28 Jun 2025 12:00:42 +0000
Manifest this update: Sat 28 Jun 2025 12:00:42 +0000
Manifest next update: Sun 29 Jun 2025 12:00:42 +0000
Files and hashes: 1: 5igPCN9X0bgxG5uECn6Ix_J7HO4.roa (hash: pevu2Sy44NywHg7YV7OVl6vYE/WCVHhk1qeVOAIs4Q0=)
2: AbKOh9gpXgwFSloJdXfaWSLCFyg.roa (hash: Q+kVnk5rKEmbqNEXqZoiJZUiyaqs6rvEUwmrzWgFMQI=)
3: FVXRCQIIyV7V1ceZzTsK8-2EiQg.roa (hash: DLPLwGMZosDy6CRDEFCvozw8q4ofzzYuWHIjuR2iM+s=)
4: bvQIlNNUMWVZpOuBbfjV2n2JcQc.roa (hash: +U+GqW9E3/QilFEP3Lx61JZ31UwKUTwHB5insO0pkVk=)
5: dJyo5maMFYG06CB60KewP8-LNEc.roa (hash: LO26kgSXxCz0IxFKcAaH1ZYq5V5rRxtBlLjShWu3YvU=)
6: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: tkEzxMD1YuKEBbXGMlCfO6SKhXGdFpaH+bj0ANiGWPQ=)
7: jgHkgotwUlDa7vyV8NwpOKOQ3Bg.roa (hash: CARcq+MM79jGs0AyYYQWuKyff+oBzRUmXWJMUB4WUF8=)
8: kALeFOqdoUlsrrEA4gEeCsqdb7U.roa (hash: CGGNVlWIfGNVOdkVdR2nL+rohybhJ6hPwgX68rdZVTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:69:49:a2:2f:f4:3f:61:01:69:dc:4a:2c:98:1e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jun 28 12:00:42 2025 GMT
Not After : Jun 29 12:00:42 2025 GMT
Subject: CN=b20397ff54526cf84ed627667623722cbf50fc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:6c:69:3d:92:db:55:57:b9:d2:c5:af:d6:
50:9e:44:b9:56:03:bf:20:8f:64:2d:de:24:56:d7:
fb:94:90:b9:86:33:8b:62:ab:c6:71:b9:fd:c5:dc:
ca:98:87:f0:ac:0a:ad:e6:13:fa:13:ac:f9:9f:69:
32:1a:9e:58:1a:d7:a5:94:60:b3:d0:86:2a:19:86:
a4:7b:db:e3:9b:dd:1c:3d:32:7a:eb:1a:24:d1:34:
43:e8:49:6c:83:2f:13:47:f1:b9:22:e6:61:91:9e:
1d:ea:e4:81:4d:76:15:67:d7:da:15:b2:d1:a5:ab:
27:fc:fe:e2:2f:7e:cb:4b:3f:92:d2:8c:97:f4:55:
03:c9:56:69:cd:97:f6:9c:c6:73:09:57:99:6a:53:
ab:ac:35:95:85:d4:1d:ba:62:ae:01:bf:42:13:9d:
3f:4b:9a:77:9e:d7:64:3c:5f:28:c4:73:ab:13:db:
a4:bd:e7:8b:4d:3b:ba:33:39:22:19:29:ed:cb:69:
a9:77:d1:03:cd:9e:12:e6:c1:6f:4f:33:90:fb:7d:
ec:8d:ec:81:f3:94:16:9c:a8:55:49:d9:9c:ac:ed:
65:ee:dd:eb:28:f7:71:bc:07:8d:73:6b:47:83:3e:
3f:42:ba:7b:3e:ea:d4:e0:4b:a4:8f:28:1a:d7:cb:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:03:97:FF:54:52:6C:F8:4E:D6:27:66:76:23:72:2C:BF:50:FC:1F
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8d:da:f7:00:f7:0a:a7:be:19:9f:24:07:7f:da:eb:b4:21:
51:e0:6c:a5:c5:77:a3:9b:ad:85:92:7f:3f:1f:9d:9d:35:6c:
22:06:d9:e3:16:0b:71:43:01:86:76:ef:65:15:d8:44:3e:88:
ff:a4:ee:b7:d5:41:2f:31:cb:e6:99:49:19:40:a5:d7:2e:a6:
02:a5:16:4a:08:d6:f3:bd:e1:0c:b7:fa:7c:5b:ab:c8:18:18:
ef:fe:d2:4f:32:80:46:56:99:f3:69:ce:f1:19:a1:39:d9:e9:
2e:69:1f:12:56:6e:6f:d8:8a:a1:39:fa:65:cf:82:25:a8:25:
94:96:96:0d:44:8d:ef:0c:07:d1:b5:28:93:c8:ab:75:80:d7:
ec:83:e0:1a:ea:a7:c3:31:31:77:c1:f6:be:48:cd:86:ae:8a:
80:01:1a:01:94:3a:90:0c:c7:e2:14:74:d7:6b:f4:55:25:f6:
cc:fb:69:13:7f:4e:e3:b4:57:c2:3f:0b:1c:77:17:f1:87:d4:
da:8b:42:e4:5e:fb:10:0b:96:23:04:f4:e3:d9:f3:26:bb:55:
77:80:00:d7:6b:07:a4:18:21:cc:cc:8e:fb:55:24:18:c8:87:
57:04:84:c2:da:6d:54:cb:af:e0:7e:37:8a:07:1f:c0:bc:e7:
fa:ea:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:03 2025 by rpki-client