Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: h1alZEvf3gWFWRYGfDLDlFmtFkk5WXVNwbPWyAG8dKw=
Subject key identifier: 8E:5F:A3:CF:A8:D1:BF:92:74:29:DD:02:59:B9:94:42:6D:39:8D:3B
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 0197B88F264D54AC8FC95EB009B58206B8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 22:01:18 +0000
Manifest this update: Sat 28 Jun 2025 22:01:18 +0000
Manifest next update: Sun 29 Jun 2025 22:01:18 +0000
Files and hashes: 1: YOyr4rKnnzDrXdmtMOktrTLMhdg.roa (hash: 9XaoEGH44aifrIE9gnosDm/sLWWt90nSBonwPhD6BKU=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: k69pGkd6usgcpS0gdV9HBrwSfU66K3o2xum4tuQrEsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:26:4d:54:ac:8f:c9:5e:b0:09:b5:82:06:b8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Jun 28 22:01:18 2025 GMT
Not After : Jun 29 22:01:18 2025 GMT
Subject: CN=8e5fa3cfa8d1bf927429dd0259b994426d398d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f6:17:78:e0:00:65:a2:94:57:fd:70:89:14:
a0:0a:97:06:56:c6:66:02:cf:f4:62:dc:e1:29:bc:
d7:e0:91:97:f1:90:fe:6f:e8:d1:66:31:0e:cf:92:
f1:c2:3e:c5:bb:7d:a7:ea:6a:c5:7b:14:d9:b6:0e:
18:0b:91:d4:b8:a6:25:0d:ae:29:32:36:06:eb:e9:
a7:24:37:27:ea:bc:a7:35:25:33:a1:35:4e:0e:e4:
a4:ae:ca:8d:9e:b6:4a:e7:28:5c:0b:ef:ab:3b:a5:
69:d7:50:b9:45:5f:55:42:ee:cb:9d:2c:8e:4f:9c:
4a:81:b6:17:17:87:49:fb:2d:cb:32:d9:6a:84:8c:
84:33:cb:43:41:d8:5d:f9:bf:c8:68:05:13:3c:06:
ee:71:07:a3:b8:6f:59:34:d6:c0:69:57:09:29:8c:
da:d5:3e:6e:0a:ab:fd:4f:97:7a:40:4e:07:a4:3e:
05:d3:d6:3e:37:42:4a:fb:25:6b:82:a4:77:6f:dc:
ad:c1:10:04:cf:bf:82:e4:59:60:23:01:5c:fd:de:
fe:43:7b:ed:36:29:29:d3:c6:6c:24:71:72:4f:53:
75:f4:0f:2c:5c:9f:4b:1b:0f:ed:2f:84:ca:1e:8a:
ab:f1:a9:b3:fe:d6:b5:f0:49:4d:0f:b6:3e:9c:7e:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5F:A3:CF:A8:D1:BF:92:74:29:DD:02:59:B9:94:42:6D:39:8D:3B
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5a:66:75:ee:15:d8:01:67:11:e9:06:18:e1:ed:44:bd:57:
3d:47:fe:bc:c3:89:a4:97:ac:23:56:28:ff:79:24:99:de:d4:
07:b1:26:58:3d:cb:86:1b:63:89:cc:34:52:89:ac:ea:da:38:
28:f4:70:c0:73:9c:3e:3b:1f:72:33:7f:93:ca:b5:b8:bc:5b:
b5:08:0d:91:fd:46:ba:90:46:de:ca:8f:70:ef:55:b9:a9:2b:
74:fd:f5:b7:4d:90:bc:2d:4d:05:45:7b:2a:97:d2:a6:02:eb:
5f:38:98:c7:a0:63:6b:21:c6:e7:2e:3e:54:d6:d9:a6:21:2f:
57:b6:9a:7a:f8:89:e1:7c:fe:f9:7f:0e:41:3a:78:fc:fe:d0:
f0:6b:79:37:22:72:78:41:31:30:6a:05:73:cd:53:03:f9:b0:
9a:2d:bd:28:56:13:da:d5:71:8c:64:80:a9:38:44:bc:8d:38:
cc:a6:63:55:70:d9:49:db:4e:f7:14:af:e9:ec:e2:7c:e3:f9:
39:57:18:78:f9:72:26:7f:a1:bc:56:cc:3d:9b:68:54:27:44:
47:d8:8e:41:a8:84:15:55:ce:9a:14:a1:0b:77:07:58:21:18:
3c:cf:4d:47:8e:9c:15:3e:b3:37:00:1e:86:87:6d:b0:f4:a8:
4e:53:5c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:06:54 2025 by rpki-client