Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: H8vinQkyBxO4yNOh3YlaOjp6q4lrxhzg/K88IVVRk+A=
Subject key identifier: AB:59:19:54:80:EF:C5:1E:52:2C:13:6C:FC:A4:12:8E:92:AE:FB:26
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 0197B6A0A8B65F10EF39104AC38ECCE07440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 13:01:11 +0000
Manifest this update: Sat 28 Jun 2025 13:01:11 +0000
Manifest next update: Sun 29 Jun 2025 13:01:11 +0000
Files and hashes: 1: KbHSaDitknf_vw2Y0vNPZiG2-WU.roa (hash: vniSFXySv0YzFNsEhCVOvtXFilzUNKpEfWkX3Qio2Lg=)
2: WU24XorRtjD4J7y5MHzTmh_a7sU.roa (hash: IX430pDMzb+z+kWkDQJg9gwBTJRqIpyiieKSVe0HAtQ=)
3: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: QBzU38pWtfDu2ukaEbqnheyLXK15YHcU9A+IWBTc3OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a8:b6:5f:10:ef:39:10:4a:c3:8e:cc:e0:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Jun 28 13:01:11 2025 GMT
Not After : Jun 29 13:01:11 2025 GMT
Subject: CN=ab59195480efc51e522c136cfca4128e92aefb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:c6:7a:43:c1:92:e3:40:35:88:17:3d:77:
10:fe:04:19:f8:9a:36:11:b1:b1:16:6b:a9:33:38:
9c:41:a5:8a:c6:9a:c5:0d:c5:cd:32:b8:de:42:37:
1d:05:73:d9:47:ea:28:64:aa:df:b1:06:b7:d1:a0:
76:df:2c:1a:a5:a5:df:87:ed:13:a1:a7:cd:81:72:
57:1b:f7:bd:27:48:d9:bd:db:3f:f2:81:32:f9:10:
30:6e:36:46:05:0d:39:73:36:7d:61:9d:3b:e6:01:
3b:54:f1:a1:32:f7:2a:90:fb:54:d6:03:34:44:9a:
e9:33:e8:b9:72:e1:21:73:11:1d:08:30:eb:38:d4:
6a:16:9e:a5:34:f5:93:61:48:7a:cc:52:9c:85:2c:
6c:33:7c:d3:8a:a0:35:76:ba:f3:cf:ae:c5:cd:be:
ea:cf:df:a2:e0:7a:1e:b5:cb:e0:06:fc:04:98:b8:
a8:ff:a1:30:8d:ff:b7:9f:33:93:46:a6:7b:c4:6a:
6e:61:5f:39:2f:17:f8:de:e4:96:93:1d:98:f9:ff:
36:f5:e0:0e:4f:e6:4e:28:d5:0c:b8:71:68:fe:cb:
a8:3f:1a:e7:91:da:23:d2:0a:d2:68:19:b9:65:cf:
22:c3:a5:ce:8c:29:9c:bf:b3:a4:09:7d:a9:45:24:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:59:19:54:80:EF:C5:1E:52:2C:13:6C:FC:A4:12:8E:92:AE:FB:26
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:19:77:09:c9:4b:e2:2a:db:0b:19:57:e4:75:be:c5:ac:ab:
1f:4b:82:db:8c:08:5d:74:7a:8b:de:0d:68:08:0c:b6:e2:46:
ce:c0:80:47:cc:2f:ea:59:d6:13:9d:e7:0f:2b:e3:ae:27:4b:
28:c2:fd:cb:dc:57:b2:05:f7:3a:1f:86:c9:b5:26:d3:c0:4a:
3a:a3:a7:e2:89:48:1b:16:79:01:b4:1f:e4:09:81:7e:98:10:
3c:eb:de:62:98:38:53:af:31:a8:c8:9b:bd:31:5e:4b:79:e1:
08:bc:33:51:3e:5c:cd:47:8f:f7:ee:82:12:1b:32:42:36:0e:
58:bf:5a:19:d1:df:1f:b5:69:ed:c5:5a:94:a0:5c:46:a9:6a:
07:35:5e:3c:79:2f:d7:f6:1c:d0:07:7c:af:37:6f:46:fe:81:
38:1f:fa:3d:42:b0:44:f7:fe:83:e4:ce:d7:0b:d7:c0:b7:e8:
58:ae:2f:76:52:d6:91:70:4b:7e:bd:8c:cb:5a:a3:22:a7:fa:
bf:bc:2b:6b:5d:82:b4:14:c4:7b:15:5e:ad:bd:4f:41:dc:b0:
4d:c5:1c:01:d5:3c:ac:04:6e:e9:e0:21:ed:b9:d9:82:f8:92:
d9:52:65:25:ff:c0:41:4d:25:b2:eb:6e:b9:3a:b4:a9:db:ee:
df:d2:3f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:26 2025 by rpki-client