Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: gSFmY7+1c82d2GcwxoBBUh3PnIB8EMXYJCpiX441N0A=
Subject key identifier: EF:8A:40:DD:00:14:CC:68:32:27:85:BB:DF:CD:12:2E:97:8C:F6:B2
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 0197B88F2224538E8B690EF92EFD514F7AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 06E7
Signing time: Sat 28 Jun 2025 22:01:17 +0000
Manifest this update: Sat 28 Jun 2025 22:01:17 +0000
Manifest next update: Sun 29 Jun 2025 22:01:17 +0000
Files and hashes: 1: 76xLkfM6kYxOK1NXh9OOS2MHsHA.roa (hash: 6Sbux0XZ8H/iAJjFbORSyS+kiaCneStSNPq6dnkA+DU=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: 57hJB6crvKxny/rRlBJ2tFUFpfTpoUr615deoOyoMS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:22:24:53:8e:8b:69:0e:f9:2e:fd:51:4f:7a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Jun 28 22:01:17 2025 GMT
Not After : Jun 29 22:01:17 2025 GMT
Subject: CN=ef8a40dd0014cc68322785bbdfcd122e978cf6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:73:0d:de:fb:e0:82:01:58:dc:22:d2:2b:
8e:44:12:82:d0:47:54:c3:83:92:0e:ac:f0:86:88:
77:4c:0b:61:10:f1:55:15:d1:84:0f:24:7f:d7:24:
d4:8a:0e:09:8d:52:8f:5e:e2:8e:b1:8d:96:24:8e:
c1:71:62:79:06:d7:7a:ad:ce:55:c7:42:ce:f8:7f:
62:b8:03:86:db:49:b8:75:de:73:55:84:15:ad:59:
4a:10:97:e9:44:f6:36:5a:50:82:f2:5a:93:f4:4b:
0c:5b:63:a0:f0:fb:c1:7c:da:20:08:14:36:bf:2f:
8a:f4:91:16:2a:ea:8e:14:19:32:25:ea:c6:50:61:
bb:30:f0:1c:15:6a:32:c1:69:3f:2b:4e:e8:8d:35:
cf:0a:18:64:70:9e:2b:40:df:95:9d:cc:bc:65:b6:
84:1b:b8:d7:61:06:f3:bf:2a:2b:21:70:93:5a:77:
f0:b5:ca:e8:a6:19:2c:8e:a5:33:00:92:da:4b:78:
51:17:96:d4:bb:16:d0:e9:a4:06:7a:b6:fb:90:75:
d8:e7:fe:9f:f9:3e:00:7c:e9:0d:8e:41:5e:5f:c5:
ae:4b:9d:28:31:f7:0e:0e:97:ca:3e:4f:4a:83:04:
ba:3b:bd:72:e4:c1:42:66:0a:d2:0e:d3:b9:54:39:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8A:40:DD:00:14:CC:68:32:27:85:BB:DF:CD:12:2E:97:8C:F6:B2
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f3:de:a0:39:7f:6a:e1:1f:f6:a1:49:e5:a3:d6:d2:9d:41:
46:10:00:7a:8b:b1:92:2b:14:45:8c:0d:e1:32:90:aa:9e:63:
b5:2d:23:eb:a5:47:70:3a:f9:59:5f:a1:2c:57:c8:98:bf:71:
7b:94:cd:68:5c:2d:21:88:8a:ed:75:e3:ef:dc:9a:c8:d7:ac:
2d:12:d9:8c:36:73:f1:36:6e:a3:96:ee:48:82:fb:0d:39:af:
34:7b:05:98:7f:25:5d:f7:5d:f9:56:3a:cd:60:07:8f:a7:e6:
6f:2e:33:68:1d:79:25:ff:b5:41:95:e4:77:2b:fd:53:19:b7:
13:33:f0:09:64:d1:3c:e9:09:04:27:5e:0b:94:7b:b4:76:13:
d7:fc:a7:3d:3c:81:92:eb:4e:ab:03:5c:f0:de:1b:6e:1b:3c:
7f:db:5a:77:b7:3a:dd:13:0b:27:a2:9b:31:5d:dc:d2:44:31:
e7:4d:66:a3:10:77:86:af:1f:e9:4b:33:6b:58:6d:e9:1c:36:
c0:a1:17:a8:25:4e:ac:58:45:c2:0a:a7:40:be:6a:98:17:42:
1b:9e:c1:61:a2:19:11:b7:2e:16:e7:2a:d1:fa:2f:27:e6:e8:
40:bd:26:2d:45:70:92:33:0d:cb:42:28:fb:b0:4b:59:43:e4:
e7:9e:a6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:37 2025 by rpki-client