Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
File: iW1QqxLax1eoUX-YnnMXJVoUfFA.mft (raw, json)
Hash identifier: 26XN8wJ4GMgA+0g/W3oPnSFJu95AH/w0x7SRw9TVLJs=
Subject key identifier: 34:B1:A8:6E:1F:17:49:64:1C:DF:96:F0:A8:CB:F1:E1:D3:F3:88:D6
Authority key identifier: 89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
Certificate issuer: /CN=896d50ab12dac757a8517f989e7317255a147c50
Certificate serial: 0197BAEB11F40C640DC576F3AEB44AC1D71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
Manifest number: 0830
Signing time: Sun 29 Jun 2025 09:00:57 +0000
Manifest this update: Sun 29 Jun 2025 09:00:57 +0000
Manifest next update: Mon 30 Jun 2025 09:00:57 +0000
Files and hashes: 1: B38rRSPWErqXfPx0DzWgKIR_ZF4.roa (hash: 3ngIsupMWcvGfbEOZowjuSpsq4xSUo0YoDqyx3tWI8Y=)
2: SW-4hL0mVSkVe3oiFDw6-IYGB80.roa (hash: aedwmf02se0U+ifzhQZmrqdfm8+Faq7npwCgMp24KCg=)
3: iW1QqxLax1eoUX-YnnMXJVoUfFA.crl (hash: WspaULmTTHBtORjzqQy0aFxeSC73AnhHRd7zUTX6jtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:11:f4:0c:64:0d:c5:76:f3:ae:b4:4a:c1:d7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d50ab12dac757a8517f989e7317255a147c50
Validity
Not Before: Jun 29 09:00:57 2025 GMT
Not After : Jun 30 09:00:57 2025 GMT
Subject: CN=34b1a86e1f1749641cdf96f0a8cbf1e1d3f388d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:c7:2c:a4:d5:ab:b3:20:2b:d3:eb:44:a9:
e2:dc:f6:e1:b5:26:59:70:3a:36:c0:80:14:71:30:
b1:bf:6c:93:be:90:27:ad:51:3e:ea:fc:bd:be:94:
11:13:1a:f8:58:63:29:55:9d:9f:b4:38:e3:2b:16:
9c:fe:17:12:9a:0f:31:d7:98:96:cd:a8:41:26:d7:
ef:c9:54:07:4d:10:6e:c1:00:06:b7:65:0e:b8:c1:
d5:cf:8e:f2:98:20:cb:aa:b0:f9:09:54:da:50:9c:
d9:48:5c:11:81:06:e9:23:da:11:c8:48:d9:8f:d9:
96:d9:3b:6e:d0:11:8e:9b:12:a2:3a:9b:70:d1:49:
be:ea:5a:31:8c:a8:42:b4:ab:de:8d:4d:66:80:02:
0d:7a:80:09:e0:21:66:b0:b2:50:33:e2:43:81:28:
70:ac:0b:82:45:35:99:fb:f5:53:59:69:31:61:ce:
04:c0:1d:e8:04:8b:23:4f:2a:c4:85:81:35:09:cc:
47:b9:ae:0c:d6:0f:86:b6:d6:f0:bd:e5:44:b2:c9:
ff:a3:fe:09:1e:da:40:d0:40:e9:50:a2:58:07:a8:
90:fc:64:90:7c:d2:b4:bf:a4:02:65:66:82:b5:0c:
ed:b9:23:df:89:57:8a:50:90:fa:ae:31:e2:67:8f:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B1:A8:6E:1F:17:49:64:1C:DF:96:F0:A8:CB:F1:E1:D3:F3:88:D6
X509v3 Authority Key Identifier:
keyid:89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f5:29:55:04:4a:2f:ab:5e:11:19:34:f6:c7:a6:91:f4:32:
27:50:58:bf:29:8a:62:8c:8b:ed:42:c4:92:27:8b:79:14:73:
bf:bb:62:8b:08:58:b2:57:53:c8:a8:33:69:14:94:78:ec:a6:
55:90:0d:1e:0c:a4:ec:05:27:06:95:56:5d:42:da:43:99:28:
cc:3a:cd:b9:73:eb:50:27:11:52:d6:ca:f3:6e:64:ef:4b:5d:
a1:40:8a:01:7d:ef:8c:cc:07:8f:a8:f6:e6:56:b1:0f:3c:ac:
e3:e4:be:4d:69:e0:d7:b8:38:69:04:58:6e:d9:1c:20:cc:d6:
6a:73:e7:a5:87:d5:5e:92:e3:b6:09:2a:0e:8f:9e:53:ed:08:
4c:86:f1:21:02:da:3c:5a:ce:38:7b:08:3c:50:7f:26:5c:bc:
43:02:be:47:42:f2:f3:69:d8:ea:4f:60:ed:aa:d0:54:cf:c7:
2d:19:c1:db:df:9a:58:d2:64:79:00:b1:63:ca:cb:41:c3:c2:
10:ce:d4:87:a6:f4:c8:3a:dc:3b:1a:62:8b:e5:9d:2d:c5:f4:
54:c1:e1:e2:f2:d7:c6:69:4f:60:61:f9:2e:a8:27:e0:cf:16:
bb:f5:e4:65:b2:7c:39:7e:52:8c:a5:e6:86:67:c1:26:3b:bb:
75:29:d1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:56:11 2025 by rpki-client