Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: bCYxW6GHYzxybdb36LqO9ieR8tPcqwhJawk/BuvTpCw=
Subject key identifier: E3:D4:57:20:02:3B:8E:51:13:90:26:C3:20:E1:E3:65:C0:60:95:CB
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 0198D5BC56A348A3604B00E6914EC0EAD99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 14F5
Signing time: Sat 23 Aug 2025 07:02:26 +0000
Manifest this update: Sat 23 Aug 2025 07:02:26 +0000
Manifest next update: Sun 24 Aug 2025 07:02:26 +0000
Files and hashes: 1: 25GdIX8pGRrdAAaubJO0FxbYG-s.roa (hash: J7SjJPVMXuJzyuyQBNTx3E62SBRqK9gpWeifxFumUs0=)
2: 6WSzq5tklzrrb4CQ30LLV8NUx2g.roa (hash: UmnImARopszt+4WaNMMPCsufWGExd3hc37DvZdbg1tI=)
3: 8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa (hash: 0g/v1GDnSb/mpf5pKYYz9HEAiGcoNER98ihb6wrQqWo=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: 20ZgSzI/Rr8y4b6rI/Bz8Xj3z1RUv8sGiWdXbK1A4Rk=)
5: OREDNoQ0vwPI3XM_zRsW3yzoE_A.roa (hash: 1cT3zKRDrAQDDxV5Rq7SD/mINGk0AiyR89E6Ur7LkVA=)
6: mQQXMqosDbrfiBBQFe3pss-9NtQ.roa (hash: qAb1oy5TaR+lNTajDgndtpEVHAu7ZMdgoTop9g6Wh6Y=)
7: uSaVwi6W5g3viY9NscHN3tqDzCk.roa (hash: t4D+qU5YVF27z4TGr3wG3ucQjp23my4+sKI2eFqOYYg=)
8: uumQQQ1viq_-gfcaqAufH6g_C7w.roa (hash: AM9mJlfYhSa7Wcw8Wx9nTWnnL8T0GQwXceLp5ft6/NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:56:a3:48:a3:60:4b:00:e6:91:4e:c0:ea:d9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Aug 23 07:02:26 2025 GMT
Not After : Aug 24 07:02:26 2025 GMT
Subject: CN=e3d45720023b8e51139026c320e1e365c06095cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:cc:31:3c:ea:dd:c0:0d:4d:7a:a6:a3:a7:
e4:7b:d3:0c:43:ca:dd:8b:16:2d:c5:54:ad:7b:c3:
76:0f:da:ba:61:76:d7:33:c0:1e:a1:fd:5d:ae:46:
e6:82:bb:17:bb:16:40:08:90:c3:5c:de:b5:1b:cd:
83:9c:2e:e7:23:5f:f7:75:53:a1:3c:c2:87:96:65:
f1:67:60:cb:35:8c:2f:7d:bb:44:cd:b5:a0:96:84:
b4:96:85:15:4e:64:15:d7:db:be:d4:c0:8b:d0:c4:
d8:8b:f8:76:91:ec:66:51:26:83:02:7b:6c:4b:6f:
c7:ee:3e:39:1c:c7:07:aa:f1:b7:ee:0d:4f:66:49:
35:e5:58:12:a6:aa:e0:0a:bc:9c:01:e1:88:a2:b7:
04:cc:ec:40:48:05:2e:d1:53:50:83:ab:ba:19:9f:
51:62:28:28:79:81:ff:1c:df:4e:d1:32:46:c7:06:
de:16:a0:85:21:39:90:57:28:7a:39:4a:25:cd:b5:
54:35:d6:7a:2a:e0:ad:74:c4:60:05:ba:7f:4b:e5:
49:0b:78:f1:62:11:44:ad:d5:ee:a8:5d:46:3a:44:
9d:52:24:12:30:2e:1e:41:cc:8c:e4:12:12:c8:73:
83:77:86:35:6f:0f:83:c9:6b:60:a9:b3:2b:6e:2e:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D4:57:20:02:3B:8E:51:13:90:26:C3:20:E1:E3:65:C0:60:95:CB
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:68:d5:b2:04:cc:fc:b7:d3:a6:72:16:6e:b4:86:60:b9:99:
56:a1:aa:ad:d2:92:09:88:7a:93:bb:bf:47:e0:2a:63:fa:08:
b5:fe:71:19:80:de:e2:00:8d:3a:8c:5e:25:aa:ad:5d:3a:74:
08:9e:19:83:35:bf:80:3d:3e:68:82:e2:0c:65:18:8e:c2:b2:
d9:25:d1:3e:68:ee:9b:40:79:11:9e:4e:8a:3e:39:78:9b:78:
07:71:bf:ee:6c:5f:75:20:da:ae:aa:e4:df:27:d2:35:2f:73:
de:41:53:58:2b:67:6d:8e:fa:65:4f:a5:38:2c:b0:80:f6:d4:
05:a7:ee:99:60:a1:87:15:53:03:06:9f:e8:1e:2f:cd:7f:4f:
7e:37:7a:01:f6:75:2f:00:9d:b7:bc:f2:64:50:97:0b:b9:5f:
36:0c:9a:72:92:87:74:b8:de:74:53:4d:12:d0:cf:71:56:a5:
39:32:ef:a4:00:ae:65:e0:fc:66:47:4c:c9:12:da:2d:58:e0:
d6:52:62:63:d1:ff:78:d2:59:27:8d:e4:47:9d:90:67:ee:1a:
9a:d5:56:fc:18:3e:07:2a:6a:e3:d6:09:68:54:2c:3b:81:49:
d5:c6:4a:cb:d5:5d:1c:a9:8b:53:eb:1c:02:5e:e4:71:2a:fa:
f6:f7:38:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:29 2025 by rpki-client