Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
File: iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft (raw, json)
Hash identifier: PNdM94ucKSCdhpZCUXDVBvEp2zkwfxhnCyKIdpCoJLM=
Subject key identifier: A1:4E:B7:09:D1:EA:7E:54:63:8A:4D:62:54:65:C1:1B:83:E2:C2:E1
Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
Certificate issuer: /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Certificate serial: 0197B77CBFB6952C0470DA0E6B37C5086845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
Manifest number: 154B
Signing time: Sat 28 Jun 2025 17:01:35 +0000
Manifest this update: Sat 28 Jun 2025 17:01:35 +0000
Manifest next update: Sun 29 Jun 2025 17:01:35 +0000
Files and hashes: 1: iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl (hash: Qu8lUNtq3mgey71H9v7tJ1fuoQ4gKFG8Ut2qYqJLvT8=)
2: ja_rBF-mVB6I6AG5Sq3U_cQoltk.roa (hash: nVfwFtdg/ueuXQpAAMHTHZq3sXCbrECHNWhALLqW2Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bf:b6:95:2c:04:70:da:0e:6b:37:c5:08:68:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Validity
Not Before: Jun 28 17:01:35 2025 GMT
Not After : Jun 29 17:01:35 2025 GMT
Subject: CN=a14eb709d1ea7e54638a4d625465c11b83e2c2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:d2:a9:e0:83:3c:f5:95:3b:2f:3d:3a:41:
e3:c6:5f:40:10:3b:47:b4:85:c3:c5:c7:62:b9:94:
83:24:ed:0d:b1:4d:b0:b8:ac:26:7c:20:71:fd:fd:
2c:e2:c8:ea:98:8c:ee:eb:38:63:f4:b5:ee:86:25:
31:e1:a1:47:83:f6:88:db:86:21:d1:3e:1a:ef:3e:
e8:fa:77:41:be:bc:21:bc:fa:08:a7:c8:ed:4f:cd:
eb:e8:ad:f6:37:6c:9f:88:5e:cf:64:5a:33:0b:62:
d7:05:bb:93:92:1b:87:a0:8a:46:d6:26:75:8d:f0:
eb:35:fc:2e:9d:40:48:d5:52:56:3d:b9:d8:ca:eb:
ca:39:3d:63:e8:69:81:78:64:b4:e9:bc:5c:43:01:
90:f4:50:57:7d:cd:55:37:a0:7f:44:24:03:0b:3b:
71:fa:14:e7:45:c1:2f:b6:77:ce:ed:d7:3f:9c:ad:
ed:93:56:0a:9a:de:55:15:50:0b:58:8a:ad:48:17:
73:cb:9c:91:68:44:34:e5:b0:55:8d:da:e2:f0:28:
d4:dc:43:16:66:cc:ed:d1:8f:f1:78:30:34:f6:15:
0a:14:fb:6f:9f:a9:93:90:32:92:25:e7:cc:b9:96:
ec:b0:da:3b:c2:c5:13:78:96:78:f1:fe:61:c3:e8:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4E:B7:09:D1:EA:7E:54:63:8A:4D:62:54:65:C1:1B:83:E2:C2:E1
X509v3 Authority Key Identifier:
keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:92:08:5b:b9:c8:a9:2f:5a:bf:b5:f0:47:2f:39:0e:06:81:
59:77:95:a7:f6:0c:d1:9a:44:84:8d:b9:51:98:76:84:54:1b:
7a:02:bd:5b:5c:b9:3d:d9:ce:29:69:cf:bf:dd:02:fd:67:4b:
39:13:02:1e:0e:89:22:bd:35:bd:6d:b2:05:3e:0d:82:9e:56:
ad:01:74:72:a8:92:7f:49:db:78:8e:10:17:c7:7f:ac:7b:60:
9e:32:88:d2:ab:1c:0f:24:bc:75:6a:66:dd:b9:1f:91:d3:7c:
c2:f0:e1:8c:37:38:b7:6d:7d:ea:71:50:12:af:c6:b3:28:6b:
53:da:16:84:66:b6:9a:6c:27:23:14:0a:6c:7d:8e:66:62:df:
44:ad:37:a1:a5:5c:9f:44:84:e0:91:fd:7a:b0:48:49:bd:e1:
c9:21:db:f2:2f:b1:f8:cd:6a:6c:66:de:71:09:59:d7:91:fc:
a3:66:24:36:35:29:08:56:0f:6a:ad:e1:80:6e:2d:bc:8a:6c:
f9:02:e9:8a:e3:60:87:d0:38:6d:9e:c8:2b:42:1b:d8:ba:b1:
ff:67:36:d2:da:fe:f3:75:18:38:e0:13:a3:8b:e6:ac:db:b0:
b2:b1:f1:23:a3:7a:90:9e:ff:18:68:f6:88:db:44:4f:8c:34:
d6:d5:43:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:02:36 2025 by rpki-client