Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier: SzQ7Zt1G8hdLIUr9d2/Qp2L26f5XoJ8YWYQl2/IbKpI=
Subject key identifier: 86:F3:4F:2B:38:5F:E7:6A:82:5B:3C:A6:AE:01:D8:8E:A1:F7:2C:93
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 0197C56ED3783C04EF12C7894712720C8A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number: 12E1
Signing time: Tue 01 Jul 2025 10:01:04 +0000
Manifest this update: Tue 01 Jul 2025 10:01:04 +0000
Manifest next update: Wed 02 Jul 2025 10:01:04 +0000
Files and hashes: 1: 1b_wV0k49kuwRrhHplXiK2XiroA.roa (hash: RH2MIMTVkHxoiPuLQAUrE2Rqg6UxaLBroHReV0YDdhs=)
2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: 4r5dzKSt7wfhR1uVHX/29QBrDWZAwieJJn/hMgn1npE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:d3:78:3c:04:ef:12:c7:89:47:12:72:0c:8a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: Jul 1 10:01:04 2025 GMT
Not After : Jul 2 10:01:04 2025 GMT
Subject: CN=86f34f2b385fe76a825b3ca6ae01d88ea1f72c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:21:5e:4d:8f:73:9a:d4:79:3c:81:fe:38:
d3:23:41:c8:b1:33:8e:f7:08:cb:2d:f5:a5:84:64:
d3:e6:00:d3:a0:83:1b:9c:25:d6:ed:97:e2:eb:3f:
15:6f:e3:a7:de:5f:38:d6:99:8c:58:23:c9:56:a2:
a8:d7:67:9c:3e:78:0e:a1:a4:ae:09:1a:6b:1e:9e:
c4:f3:57:d9:db:c3:51:f2:af:de:3e:bc:d4:ac:77:
27:99:97:32:a6:33:c1:72:f3:bd:f8:d7:1f:94:43:
c4:72:9c:48:62:35:e7:dd:2e:66:7e:f9:f9:7c:90:
a2:9a:6f:83:b6:c6:7f:37:79:19:63:fd:5a:c6:1c:
f4:88:41:07:42:ec:c4:76:07:5d:a4:3d:db:f7:f4:
80:a5:13:2a:7d:23:6c:7d:bd:ea:3b:78:2e:39:72:
a6:94:68:9c:83:d0:16:06:bb:3f:ff:b4:a3:ab:98:
4b:58:93:a0:cb:57:f1:07:0c:bd:bb:c3:6a:78:2d:
cd:0d:81:83:4d:88:48:aa:99:a5:b6:3a:13:ae:2f:
10:51:37:ce:9a:f7:71:23:f7:9a:46:60:74:bb:4f:
42:d5:5f:bf:b4:be:13:c0:97:bc:c4:c4:cd:b1:db:
df:e7:62:84:7c:cd:e6:a0:2c:43:45:8c:7f:29:ab:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F3:4F:2B:38:5F:E7:6A:82:5B:3C:A6:AE:01:D8:8E:A1:F7:2C:93
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ab:8c:44:ed:04:64:26:5e:69:e2:79:1c:75:de:f8:ff:ab:
a1:d2:bb:e2:eb:fa:d1:a1:c8:95:05:4b:ff:e8:ec:e7:0d:60:
ea:43:15:67:42:75:36:8d:61:3a:69:c4:b2:f2:91:50:4b:1f:
10:4a:37:52:ff:89:55:1f:22:4f:50:5a:6a:05:2a:bc:c0:11:
59:6a:4c:3e:1c:fc:45:c1:00:94:bf:85:ea:e6:46:7f:f3:6e:
e2:df:4f:ad:01:4f:11:f7:51:dd:2f:15:21:46:ae:92:2c:50:
7f:81:11:d6:e4:d5:aa:d2:6c:8b:cd:eb:7f:c2:25:2b:f9:3e:
b3:92:29:4a:3f:da:77:d9:60:24:a3:97:c7:c5:10:e8:35:e6:
d6:e5:aa:52:89:4e:4f:97:a5:f2:d9:17:3c:9a:0c:67:d6:c2:
43:00:05:3d:ec:1c:cf:af:28:6c:31:75:49:35:6a:f4:d6:24:
6f:62:eb:73:30:5d:0c:de:3a:8d:f3:65:38:da:22:d9:7f:03:
34:07:f3:6a:80:d7:9d:70:fa:54:de:b4:3e:d0:76:86:3a:9f:
3c:01:f5:2b:ec:96:f7:79:2e:78:27:7e:e3:87:cd:23:b4:de:
ce:17:63:18:9d:37:93:82:c8:f8:df:17:88:e0:03:12:a9:39:
c1:8c:b0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:05:16 2025 by rpki-client