Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
File: iDHWIdGS-S2wk9kzCSweI2tNSXs.mft (raw, json)
Hash identifier: uSo7H123SvgNauAVaiesPSvYIZhHFPGGqkCtJNXoN3o=
Subject key identifier: 9F:5B:D2:49:AF:61:41:2D:00:56:6B:47:65:D7:6B:BE:EC:31:49:08
Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
Certificate issuer: /CN=8831d621d192f92db093d933092c1e236b4d497b
Certificate serial: 0197CCBAB34975538705D96D5C07DD3DE145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 20:01:17 +0000
Manifest this update: Wed 02 Jul 2025 20:01:17 +0000
Manifest next update: Thu 03 Jul 2025 20:01:17 +0000
Files and hashes: 1: 1-6XFLoPOdCVTnXJMZNU0hBiKubk.roa (hash: OxkphaRHymUnb8SN18Gdla2SO6vLVqs5y/4vbMpFmm4=)
2: iDHWIdGS-S2wk9kzCSweI2tNSXs.crl (hash: p7QmaT9KlCdCcu55jtfNbCc2uSupQXPafMwX0b6zWVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:b3:49:75:53:87:05:d9:6d:5c:07:dd:3d:e1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b
Validity
Not Before: Jul 2 20:01:17 2025 GMT
Not After : Jul 3 20:01:17 2025 GMT
Subject: CN=9f5bd249af61412d00566b4765d76bbeec314908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:59:89:4f:e6:ec:28:64:7d:23:64:0e:71:
96:6c:56:15:63:2b:03:2b:76:68:41:50:44:45:82:
0c:c4:af:91:95:a9:be:ae:5d:a8:0e:5e:2d:6e:8e:
69:93:f6:8c:3f:2f:be:44:e5:63:6c:f9:91:35:52:
84:b2:fc:fc:4f:81:03:2a:b8:95:82:00:f1:a5:ed:
5b:a6:f6:01:2b:5d:54:af:de:e1:cb:59:f3:4a:e9:
6e:3d:37:64:f5:c0:bb:1e:07:70:da:9a:e9:d1:69:
d3:88:15:85:fe:37:b4:97:92:aa:e8:3c:c3:f5:60:
f0:bc:e0:fd:a0:5b:3c:67:2e:92:0b:61:26:3b:ac:
56:2d:6e:e8:79:72:7f:a8:80:e2:c5:df:53:17:44:
85:4c:73:a9:6d:7d:4e:4f:f0:f9:8d:a7:3a:44:12:
d7:d5:cc:ed:9d:8c:7a:07:92:f1:cb:88:68:c4:68:
f8:3e:23:a2:26:37:c1:b1:5b:9f:62:c4:96:42:09:
d4:a9:3b:eb:88:61:b6:97:e3:a5:55:11:5e:35:53:
37:4e:d4:06:6e:20:cc:84:8d:53:a8:52:fe:a7:72:
94:4b:a9:14:db:65:f3:f8:09:f6:cd:e1:fc:01:2d:
69:7e:7e:7e:6c:e0:14:61:de:cf:4d:82:d2:81:9b:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5B:D2:49:AF:61:41:2D:00:56:6B:47:65:D7:6B:BE:EC:31:49:08
X509v3 Authority Key Identifier:
keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:72:23:70:2f:d9:dc:1e:f4:49:01:78:9a:9c:6e:94:a4:23:
69:0f:75:4b:13:e1:f7:03:c4:08:9b:84:9f:a2:5e:e2:ce:1b:
1d:9c:bd:a2:5e:22:91:82:69:4e:2c:91:d7:c8:90:be:d0:56:
46:80:c3:f6:a8:95:61:bc:a9:5f:92:c6:0f:66:31:47:d8:12:
6b:59:fe:8c:28:22:90:40:2e:d2:ec:f9:f4:cf:dc:63:9b:65:
8c:f4:2d:b5:f5:07:d2:db:d8:b0:c6:2a:88:d3:1c:99:dd:e2:
29:17:b7:d9:49:06:c5:59:55:3b:3a:c9:e6:f6:a7:0c:0e:99:
5d:43:48:71:66:ac:0b:c7:dc:f2:2b:85:94:b3:c6:6b:17:9f:
fb:64:9a:cf:6e:69:8c:64:b2:e4:e0:43:86:f5:99:9d:12:5f:
1d:5d:45:3c:e2:41:69:96:82:81:88:5e:22:3f:db:84:38:c2:
c0:f9:60:2d:ab:00:d9:0a:bb:32:b5:69:53:b9:fd:59:be:8e:
eb:e4:03:10:c1:57:f5:b7:17:12:c9:8d:46:24:2c:6f:64:df:
9c:c1:f0:e2:d7:f5:af:15:37:82:f9:69:e2:be:35:28:fe:26:
cd:91:10:f5:87:48:2c:72:46:9c:73:ae:11:7d:75:24:40:ed:
42:24:75:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:25:57 2025 by rpki-client