Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
File: idvHFWpO58Z9nmhHZ6L0uvijW6s.mft (raw, json)
Hash identifier: MqAXFdkWas4D1c6mMAlM00yrPGZWkk1sy6jAT2UppNA=
Subject key identifier: 47:DD:91:43:21:24:DC:14:5E:13:91:A6:5E:77:B7:A8:E5:50:E6:D8
Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Certificate serial: 0197C0B65D4C06AB1259BB12A32B87F2E2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
Manifest number: 15BC
Signing time: Mon 30 Jun 2025 12:01:06 +0000
Manifest this update: Mon 30 Jun 2025 12:01:06 +0000
Manifest next update: Tue 01 Jul 2025 12:01:06 +0000
Files and hashes: 1: J-tps2ELkCfcCcLwGdsaO09dBP4.roa (hash: 6YmY5CCnPEhTUSkoYzLXDEbRDQk4iktCzj/XnKUd+Ik=)
2: idvHFWpO58Z9nmhHZ6L0uvijW6s.crl (hash: 0oVlZ8gd4e/NdGPqeK0ANESqVTpfh2oUhSnFIDKdwLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:5d:4c:06:ab:12:59:bb:12:a3:2b:87:f2:e2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Validity
Not Before: Jun 30 12:01:06 2025 GMT
Not After : Jul 1 12:01:06 2025 GMT
Subject: CN=47dd91432124dc145e1391a65e77b7a8e550e6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:42:0f:e7:29:27:d5:58:23:28:5b:79:82:
9b:a9:bc:69:81:68:cc:ad:14:e1:7e:95:39:ca:42:
d8:49:ed:1a:4b:ef:49:d1:63:b0:ee:db:b2:21:7c:
c4:6d:e9:89:e0:37:58:18:fd:85:c8:4b:76:a0:1f:
28:c6:4d:33:3c:b4:e9:34:0e:17:d7:0d:37:8f:37:
d4:c4:9f:84:79:4e:f1:9b:3d:ca:b1:0b:3a:63:eb:
18:77:a2:c6:c8:c3:8d:78:83:9d:41:26:74:34:ae:
4f:7b:74:07:29:24:52:d3:d3:a0:b8:4c:eb:b1:3e:
87:54:8e:bc:f5:44:47:3a:54:5d:84:85:10:02:25:
97:3b:b9:b6:e4:83:c4:0f:8f:61:35:28:c9:52:bd:
74:71:f9:dd:f4:7f:bf:ab:6a:0f:3c:3d:8e:60:8f:
4b:32:a7:75:e1:c8:a5:fd:dc:ae:74:40:85:f8:d4:
6e:e9:e2:58:c2:f3:04:02:fe:4c:71:02:eb:2e:b0:
0d:42:1b:6b:35:45:54:cf:b6:ee:7d:c4:8b:5e:1f:
a4:c3:58:34:36:99:0c:fa:27:2f:49:18:16:b2:d9:
cb:20:c9:f9:8a:cd:42:1e:b7:5f:0d:00:e3:b0:af:
5d:19:eb:87:d3:fd:e7:de:e3:40:53:e9:6e:fc:a1:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DD:91:43:21:24:DC:14:5E:13:91:A6:5E:77:B7:A8:E5:50:E6:D8
X509v3 Authority Key Identifier:
keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:39:66:4f:69:6c:16:bd:86:11:65:b2:39:80:24:e7:23:3e:
63:4d:f5:d0:d7:1c:85:ae:4f:c6:e2:8a:66:cc:ea:33:8e:b3:
59:e3:b4:d8:ed:16:87:fb:b8:36:40:8a:e7:e6:75:57:84:04:
7a:6a:ec:33:66:c8:78:36:04:a7:21:22:19:29:e2:e6:93:60:
0e:bf:ad:a0:56:7d:ca:69:ff:0b:53:96:bc:3b:c8:eb:e6:64:
a0:92:8a:47:62:63:4b:0e:60:96:5d:e1:f1:ff:ac:27:06:3f:
4e:84:5f:26:d4:b1:8e:a6:d0:4a:d5:12:2f:08:6b:d3:d1:b9:
18:3a:6d:51:3e:c6:c6:2d:47:61:10:5e:a9:7e:a1:a6:e4:9d:
95:bc:a9:72:67:b6:7b:d3:85:b7:03:15:c1:3f:b8:2d:3b:dc:
9d:34:42:84:22:23:b5:b2:7f:48:bd:14:d0:ef:f9:67:09:9e:
d5:4c:bb:b8:0b:22:16:84:8d:f2:0c:60:5c:50:9c:e0:35:a0:
ec:b0:3f:15:da:de:75:c2:8b:f9:67:c7:f2:e9:80:ec:90:40:
53:96:d1:6f:99:84:21:b0:28:f6:dc:40:50:4d:f5:7a:c0:7a:
a1:3b:d4:89:08:06:64:95:6a:73:95:09:74:1a:c2:0e:87:23:
40:ae:f7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:27:15 2025 by rpki-client