Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: bIuzutuxAJJfBUYrc+bd1O9ubr7cpg8jamoAGZhNKd8=
Subject key identifier: 61:4B:F0:29:A4:86:6A:EE:66:BC:92:8C:D6:98:7F:EA:E8:C4:CA:77
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 0197B6A2456F106BBA57C59002EE447E2178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0C22
Signing time: Sat 28 Jun 2025 13:02:57 +0000
Manifest this update: Sat 28 Jun 2025 13:02:57 +0000
Manifest next update: Sun 29 Jun 2025 13:02:57 +0000
Files and hashes: 1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=)
2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=)
3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=)
4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: NKiy4AMvkyLmw2Jw5ZsIHDBEJU6OtgxrbyQogLNqJPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:45:6f:10:6b:ba:57:c5:90:02:ee:44:7e:21:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Jun 28 13:02:57 2025 GMT
Not After : Jun 29 13:02:57 2025 GMT
Subject: CN=614bf029a4866aee66bc928cd6987feae8c4ca77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:03:91:3b:d8:bc:d9:da:6f:70:f4:53:50:
ee:9c:95:83:cf:13:1d:a4:ef:51:9f:db:46:20:c2:
da:c3:62:b8:d5:de:8d:dd:f7:d1:76:da:04:3f:f2:
9e:b4:60:e0:60:43:f7:8e:b0:16:f1:55:34:b3:49:
7b:80:8d:4b:da:31:0e:55:c7:c8:4e:0e:af:2d:e9:
c7:54:fa:d0:90:5e:93:47:21:7e:87:9a:7f:ba:d5:
f9:d9:59:9d:7b:79:bc:8d:6a:90:48:b9:7c:e4:22:
f4:e9:04:d0:f5:50:cd:83:66:78:8a:3b:cd:34:fe:
e6:7e:13:d5:40:c3:e3:88:ef:ac:56:18:0d:2e:e0:
2b:32:aa:8c:02:58:32:4d:a4:99:81:0d:b6:ef:b1:
6d:30:77:12:70:7a:ac:fa:20:ff:93:e0:46:56:8d:
14:0a:13:9f:7b:3c:74:72:ba:36:45:c3:0f:8d:a5:
54:f3:cf:9f:27:f8:0b:ee:21:80:18:dc:1c:ba:ef:
16:e3:de:65:8a:fa:a2:34:26:1e:a7:9b:4e:ac:95:
19:bb:ba:4f:49:6b:fb:db:fd:92:cd:2e:92:66:18:
27:37:1c:8c:0f:6c:b7:77:f0:f5:36:92:cc:dd:9b:
2f:b2:ec:fd:b9:ba:41:68:f7:af:e8:dd:fc:ce:3b:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4B:F0:29:A4:86:6A:EE:66:BC:92:8C:D6:98:7F:EA:E8:C4:CA:77
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:41:05:fa:cd:bf:07:b4:b5:f2:64:fe:e8:f2:1e:e6:5f:3a:
e0:41:39:91:74:06:10:76:94:46:d2:ea:0a:f2:1a:b8:db:fb:
3e:6c:18:53:97:b7:cd:59:0c:79:49:8d:33:fa:88:9e:94:1e:
77:60:b8:ed:54:8c:5b:d8:c7:3e:cc:23:2e:a4:b8:fb:49:43:
b3:42:7c:71:4e:07:fa:ef:57:29:5e:b9:77:14:57:e2:af:8b:
14:7b:b1:93:e8:60:9c:21:60:1b:bb:7a:4a:17:64:37:6d:fb:
59:bb:3f:b2:f1:33:1f:1c:5a:8f:0e:b7:99:a2:53:da:7c:39:
41:18:45:e7:c1:88:bd:a9:25:de:f4:a1:5f:f0:19:8e:32:6b:
c0:24:46:38:e8:3b:6d:48:ac:27:ad:a1:a8:b5:6c:aa:4f:f1:
85:cb:33:46:be:96:01:55:f6:51:e1:79:1b:60:ed:c3:18:27:
ab:5e:7f:6a:f9:88:fc:9d:b6:9d:bd:4f:32:81:5b:5a:ce:9a:
30:48:c4:0d:70:57:60:b7:5e:49:53:87:c8:90:76:5f:61:a9:
97:07:c8:eb:5e:aa:14:0c:b5:fe:17:ca:e8:05:1e:b8:8e:66:
61:42:a6:fe:8a:de:50:17:f7:5a:88:74:49:26:58:a4:c7:e5:
f5:5c:3e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:28 2025 by rpki-client