Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: fmncMx46WCqumLcSfR7Yvl1NvPPhov4fWlepexs9Fu8=
Subject key identifier: 1A:DB:5D:AC:E2:5A:BC:51:21:D8:25:CF:48:E2:B5:A0:31:17:8D:43
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 0197B9D8E396CA2F736538A4F406782D4680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 1462
Signing time: Sun 29 Jun 2025 04:01:28 +0000
Manifest this update: Sun 29 Jun 2025 04:01:28 +0000
Manifest next update: Mon 30 Jun 2025 04:01:28 +0000
Files and hashes: 1: 25GdIX8pGRrdAAaubJO0FxbYG-s.roa (hash: J7SjJPVMXuJzyuyQBNTx3E62SBRqK9gpWeifxFumUs0=)
2: 6WSzq5tklzrrb4CQ30LLV8NUx2g.roa (hash: UmnImARopszt+4WaNMMPCsufWGExd3hc37DvZdbg1tI=)
3: 8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa (hash: 0g/v1GDnSb/mpf5pKYYz9HEAiGcoNER98ihb6wrQqWo=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: ZhcD25dGnDdERtm/EFb3DvsnTDwo7jo8c6nOGI9Oyco=)
5: OREDNoQ0vwPI3XM_zRsW3yzoE_A.roa (hash: 1cT3zKRDrAQDDxV5Rq7SD/mINGk0AiyR89E6Ur7LkVA=)
6: mQQXMqosDbrfiBBQFe3pss-9NtQ.roa (hash: qAb1oy5TaR+lNTajDgndtpEVHAu7ZMdgoTop9g6Wh6Y=)
7: uSaVwi6W5g3viY9NscHN3tqDzCk.roa (hash: t4D+qU5YVF27z4TGr3wG3ucQjp23my4+sKI2eFqOYYg=)
8: uumQQQ1viq_-gfcaqAufH6g_C7w.roa (hash: AM9mJlfYhSa7Wcw8Wx9nTWnnL8T0GQwXceLp5ft6/NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:e3:96:ca:2f:73:65:38:a4:f4:06:78:2d:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jun 29 04:01:28 2025 GMT
Not After : Jun 30 04:01:28 2025 GMT
Subject: CN=1adb5dace25abc5121d825cf48e2b5a031178d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:d4:ce:ed:08:1b:69:b4:be:c3:0a:2b:ec:
0d:17:9e:7c:4e:92:6f:c3:eb:5c:4e:d1:90:ca:4b:
2e:88:ae:a6:e5:69:55:52:63:47:63:b9:fc:2f:c5:
7d:61:6f:af:a2:37:84:d3:3a:1b:ba:7a:25:2a:8a:
03:2e:4d:5f:95:b1:49:d1:86:02:5f:3b:cd:4f:8e:
2c:6c:a9:1d:f5:97:a7:e1:b9:42:04:08:85:f9:ef:
5f:cd:37:66:99:cf:44:2e:c1:3c:68:10:fa:5b:60:
ed:a0:f9:1a:f3:6b:fd:a3:62:e8:2c:fd:b8:ec:8f:
9c:a6:3c:5d:f0:6f:77:ba:29:6b:4f:95:e3:5a:be:
92:b3:75:01:fe:ac:e8:17:36:c5:e3:ba:a4:f8:f5:
db:6a:39:b9:5e:0c:95:1b:09:62:ff:fa:6c:67:1f:
8e:35:57:f5:22:3e:63:fe:62:f9:0d:a6:a1:57:e9:
57:1c:ab:d2:7c:e5:fb:39:85:a7:e9:cd:df:de:37:
47:65:28:d0:a9:fb:46:45:87:01:99:c6:a5:4c:02:
bf:f7:03:07:50:13:ce:d7:c8:e7:8e:06:ee:8a:3f:
43:6a:64:62:cf:c3:68:10:b9:ac:81:94:60:73:f1:
61:20:85:b9:58:bb:7f:1e:b7:de:36:5f:67:01:fc:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DB:5D:AC:E2:5A:BC:51:21:D8:25:CF:48:E2:B5:A0:31:17:8D:43
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:94:4c:89:6e:66:5e:66:c6:e4:28:01:0a:25:c7:ad:d7:6d:
a1:87:8b:92:c3:4d:7c:46:44:fe:89:16:3b:38:94:15:32:70:
e2:30:b4:b9:b0:8b:69:ee:9c:46:f4:88:72:1f:7a:27:ac:37:
4e:16:69:62:3b:5f:bc:cc:aa:53:70:e8:50:cd:61:99:f2:71:
88:28:9c:5a:8f:53:65:ef:a2:1e:c6:b4:d9:6e:70:4e:2a:5a:
9a:2b:c4:bd:22:ce:58:8c:8a:09:83:1f:16:07:2a:35:3a:69:
0e:47:c8:56:f7:cf:94:5b:3c:57:ce:5e:0e:70:a5:a9:f8:f0:
4a:c3:8b:a6:f8:52:a3:59:78:de:05:7d:0e:50:58:26:00:7d:
6e:6f:cc:e7:bb:fc:4c:5e:7d:a1:59:da:9b:4c:f4:59:73:d0:
45:ab:14:4d:e7:8f:40:31:64:3c:ad:f5:40:69:9d:ff:48:3c:
71:4d:9c:3f:26:84:3c:e6:fe:3b:c4:c0:09:4e:9a:3d:79:6b:
f3:93:c2:c7:23:99:d9:d1:fa:84:b3:86:3a:96:eb:b7:6a:9a:
a3:81:03:b6:54:d1:4f:fd:6b:5c:00:81:4b:de:17:c7:05:10:
d5:4c:ce:a4:6c:73:70:8e:2d:bf:90:52:04:dd:0f:b6:c8:a9:
b7:98:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:27:11 2025 by rpki-client