Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier: CF5NYCDHD8CSHNHJoEePghZUdGddj9IVYXW9gUG4wuI=
Subject key identifier: 1B:5B:27:CF:CE:A4:6E:E5:FA:AA:4F:96:E4:22:AD:1F:88:2D:84:B1
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 0197B6D7AD4C695F6BFFA3635A8DFDF035BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number: 129C
Signing time: Sat 28 Jun 2025 14:01:17 +0000
Manifest this update: Sat 28 Jun 2025 14:01:17 +0000
Manifest next update: Sun 29 Jun 2025 14:01:17 +0000
Files and hashes: 1: MXjGchA1tthe9hBaCTy34XWuIys.roa (hash: m9xSPEOr8P6pGopF9XMr9mPGzbIw3wWqJY/1QxjlC64=)
2: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: DyFdG+j3jfheMIrgPu6FlHYlC71D648UHG6jKqAdcdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ad:4c:69:5f:6b:ff:a3:63:5a:8d:fd:f0:35:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Jun 28 14:01:17 2025 GMT
Not After : Jun 29 14:01:17 2025 GMT
Subject: CN=1b5b27cfcea46ee5faaa4f96e422ad1f882d84b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:90:7c:8e:5f:99:d4:73:21:70:17:cb:a6:
ed:3b:86:a1:72:aa:ce:0e:a8:9c:5c:85:09:de:c9:
72:ac:b1:fe:23:16:e9:8f:25:36:bd:79:0d:e2:92:
e1:b4:ba:6d:54:1f:96:5e:0f:93:6e:45:a8:d7:11:
4d:5f:23:9d:1c:46:61:25:42:7a:e6:c3:d3:46:ad:
c4:6c:8b:fe:30:49:62:79:5b:1e:4f:8b:b3:db:9d:
ad:11:a9:10:f4:24:f5:a8:b6:7b:50:06:f3:43:2c:
27:ac:1b:05:45:11:52:05:25:9b:33:98:a8:40:57:
8b:9a:92:8d:5e:ea:00:da:02:92:92:5c:3e:dc:b6:
34:22:07:9b:30:50:f6:36:c5:00:2a:b3:4e:b0:b5:
81:d6:c2:6a:1e:a0:15:00:8c:9c:37:45:97:88:4e:
78:2c:ee:94:28:d6:9e:20:3d:09:c1:69:78:ed:ee:
56:02:1a:e8:75:0d:06:02:da:0a:eb:c1:71:2b:4a:
60:d7:80:e2:e0:16:f9:2d:b0:a9:6c:5a:7b:09:17:
98:21:32:13:c1:37:ec:b5:1a:c9:4d:1f:35:3c:4c:
ce:f8:15:cd:2f:ac:32:08:32:fd:2e:42:f3:0b:58:
13:db:d1:79:9f:bd:8f:10:ee:9a:22:30:0d:7c:85:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5B:27:CF:CE:A4:6E:E5:FA:AA:4F:96:E4:22:AD:1F:88:2D:84:B1
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:9a:16:69:6b:9d:04:8d:b5:a7:3a:d3:53:b9:7d:8b:46:f6:
aa:03:6f:b8:00:9c:20:0e:fa:aa:23:ba:3e:ba:9a:d9:06:17:
36:20:69:32:62:d4:45:94:5c:13:87:12:8e:86:aa:96:35:e5:
cd:24:b2:b5:94:d8:b6:ae:19:36:72:d9:d6:90:9c:ef:b5:5b:
66:07:06:bb:20:7d:7d:d2:4e:d9:82:58:78:f1:72:f7:9d:b5:
7b:fa:b5:9a:a9:e8:a3:ba:d9:76:fe:52:c3:16:4a:97:97:05:
59:d5:72:ec:ab:16:93:cf:55:1e:e8:25:9a:23:b7:0e:2f:3f:
77:f8:0b:a7:21:05:e5:25:ec:86:00:12:f0:bb:73:64:91:15:
dc:e3:4c:51:f3:17:d9:29:4b:1c:77:cf:4b:3a:db:db:f2:87:
e4:e5:36:d4:37:1b:c7:b5:76:db:f4:b3:ed:c8:99:6d:0e:df:
18:8e:e4:7f:94:e6:a4:42:7f:75:ae:be:91:ca:d3:1b:4b:90:
da:22:5e:e7:06:15:d0:7d:a3:28:6b:91:83:2c:2e:5f:c1:94:
d4:e0:55:cf:2e:72:e7:de:dc:47:b8:0a:f9:56:89:03:70:7c:
33:eb:e5:30:13:93:eb:18:da:d9:c6:53:77:a5:a3:06:a4:a7:
de:3e:87:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:38 2025 by rpki-client