Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
File: IHeZAnMp8iaCdkVzryEV2pWp9r8.mft (raw, json)
Hash identifier: KSmlJFjWW6mTL3tJVbVCj5pum0RD33M1la/Svj079Qc=
Subject key identifier: 9C:91:44:60:9D:33:14:FF:47:AE:3C:68:7A:A6:9C:1B:9D:9A:02:BF
Authority key identifier: 20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
Certificate issuer: /CN=207799027329f22682764573af2115da95a9f6bf
Certificate serial: 0197B6A157040BB5EAEA84E2FDD06D362C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
Manifest number: 0EB4
Signing time: Sat 28 Jun 2025 13:01:56 +0000
Manifest this update: Sat 28 Jun 2025 13:01:56 +0000
Manifest next update: Sun 29 Jun 2025 13:01:56 +0000
Files and hashes: 1: 8EaewYTyFly5jEaj4gZEqMNcVMk.roa (hash: gqxj+841N8d9uy4L59oEcZudU4ge+IzVBr1jzF4wgjc=)
2: IHeZAnMp8iaCdkVzryEV2pWp9r8.crl (hash: xJDv3Xzd/AJ10a4Pt7Ra5GMbftIMrWyfw+k/YrnXM1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:57:04:0b:b5:ea:ea:84:e2:fd:d0:6d:36:2c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207799027329f22682764573af2115da95a9f6bf
Validity
Not Before: Jun 28 13:01:56 2025 GMT
Not After : Jun 29 13:01:56 2025 GMT
Subject: CN=9c9144609d3314ff47ae3c687aa69c1b9d9a02bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:64:7d:ca:6c:71:26:f2:08:40:7f:cf:3f:
9f:2b:52:08:d5:4a:75:f2:e8:45:43:76:16:b1:b2:
0c:9f:af:77:a1:46:fa:76:ef:f6:08:a0:96:e4:30:
f5:9c:9f:f5:5b:1f:21:bc:d3:03:90:76:ae:e5:55:
34:49:34:1c:0e:bd:0c:ea:a3:aa:9c:31:e5:f0:df:
bd:6f:73:10:4f:d1:58:1e:26:3b:26:8a:a5:08:90:
1c:c6:dc:69:3b:3a:b3:20:12:64:9a:36:42:2b:6b:
19:59:ea:0d:c7:e0:ff:87:3b:a8:2d:61:77:fa:94:
fe:8a:cd:75:79:85:84:0a:bb:3f:e9:1d:1b:3c:0d:
5c:9b:95:09:b5:52:ea:6c:b7:65:fb:55:65:8a:76:
06:76:b3:dc:01:a5:83:8f:2c:42:99:b3:11:d9:ea:
92:f1:a5:e0:a6:1d:52:ca:93:ce:80:c5:44:0d:de:
2f:33:4b:62:95:30:39:97:af:3b:a7:4d:1b:3b:31:
ec:01:03:44:bd:3b:5c:aa:9c:63:6f:65:6e:72:5e:
da:0f:2f:c5:0f:68:e7:ef:ef:c3:33:d4:de:06:ae:
10:3b:e9:39:ce:ba:d8:8f:5c:8e:6b:5c:df:63:df:
dd:64:5f:0b:4a:85:94:b8:fd:1e:7a:5c:28:58:34:
3a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:91:44:60:9D:33:14:FF:47:AE:3C:68:7A:A6:9C:1B:9D:9A:02:BF
X509v3 Authority Key Identifier:
keyid:20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:76:ab:2e:17:25:66:13:e5:75:e5:c4:c7:bc:35:c8:4d:be:
8d:f4:bd:b4:10:8c:11:34:18:ea:14:de:fe:53:21:de:e6:ff:
bd:81:bb:6a:9b:dc:68:41:b1:82:5f:60:a5:d8:9a:6c:7f:e5:
cb:e8:10:18:a7:d8:ac:d9:2c:61:2b:b8:15:82:5f:4a:b6:dd:
4a:f9:5a:75:4f:99:ed:b4:6e:a0:79:4d:bc:3c:f6:a7:39:ca:
a3:b5:20:3b:37:6a:44:b8:f8:96:2a:97:f2:d8:9e:71:79:62:
fc:a8:12:5a:69:bb:71:24:b9:a2:15:fb:8b:76:4d:92:58:c1:
72:43:db:16:4e:94:77:85:eb:3d:ab:25:b7:7e:38:d7:f3:d4:
12:3c:47:db:31:04:c8:60:41:5c:66:88:f5:52:dc:73:99:14:
75:15:e4:f7:d8:76:c0:31:c2:a6:5b:a9:e5:e7:1e:d4:af:5f:
66:4e:72:bb:9f:59:d8:e2:22:09:53:d9:17:4d:bd:e7:5a:70:
5f:c7:51:65:54:52:79:11:8c:5e:bd:64:88:b2:40:e1:47:ac:
9a:49:8d:a2:ac:01:4c:4f:5a:a2:79:f0:41:33:61:29:12:01:
db:f3:7f:67:17:67:c5:5d:b4:f7:e8:a9:4a:69:c0:47:35:e8:
c0:6a:71:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:34 2025 by rpki-client