Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
File: iB4xmT-oWHVos_zeW3_ulttDqbc.mft (raw, json)
Hash identifier: tDVgfgcNMeK15JuoIurKCj4H7xZW76SCrUOe6mPGlgM=
Subject key identifier: A8:57:FF:FC:10:28:AE:B2:46:C4:10:8A:A5:1B:E3:72:C1:FB:DF:EE
Authority key identifier: 88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7
Certificate issuer: /CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
Certificate serial: 0197B6D7C08B2FA374412F280DF53516F291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
Manifest number: A5
Signing time: Sat 28 Jun 2025 14:01:22 +0000
Manifest this update: Sat 28 Jun 2025 14:01:22 +0000
Manifest next update: Sun 29 Jun 2025 14:01:22 +0000
Files and hashes: 1: 2CoStS1PhVOk0Xe0b76gr5yU3sM.roa (hash: kaUq6JiT8bLQt6omc8n9uCI1T0SxY0tZ3BmNCenDeRM=)
2: iB4xmT-oWHVos_zeW3_ulttDqbc.crl (hash: KXVluPLUh8bGHPEDzkTNO3gCwrlK1UCooIzRLS6+A9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:c0:8b:2f:a3:74:41:2f:28:0d:f5:35:16:f2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
Validity
Not Before: Jun 28 14:01:22 2025 GMT
Not After : Jun 29 14:01:22 2025 GMT
Subject: CN=a857fffc1028aeb246c4108aa51be372c1fbdfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:97:a7:91:e0:72:8b:08:28:a6:bd:b3:42:
74:f9:70:8d:3a:d6:fc:b5:0b:8e:1f:ed:98:69:a2:
22:55:83:a8:fb:54:37:30:72:6d:5e:f5:72:56:af:
16:9b:bc:24:b3:81:bd:c3:3b:54:03:8c:e7:0b:44:
2e:6b:db:ea:5b:95:b3:a4:fe:e3:38:b9:91:1d:08:
d3:da:23:62:a7:a7:42:67:29:97:83:72:95:a8:11:
a1:44:2f:e4:af:e7:7e:a9:8d:74:c4:1e:53:b5:f3:
71:86:d2:d3:34:cd:b7:9c:86:63:5c:36:7a:4c:98:
36:be:79:90:48:2d:0c:e8:8e:1a:bd:0f:90:03:a4:
bd:be:fd:5f:7f:b7:a9:95:5f:c5:11:2a:32:81:52:
ef:c0:53:30:6d:89:bd:13:37:a5:77:a0:c8:9a:bd:
a4:8a:93:65:64:66:29:45:1e:40:fa:17:59:15:ce:
93:69:d9:65:a6:34:19:44:65:0d:4f:65:95:bf:9b:
f5:45:a0:e8:19:bb:6d:28:1a:36:b0:ea:ab:35:5a:
48:9d:fa:9c:ca:09:3d:91:ba:67:2a:7a:0c:9d:b0:
f1:81:fc:ae:f3:67:f5:a2:b6:ca:e8:ce:c7:96:7c:
8c:a2:93:52:c8:27:a5:f6:20:06:d3:87:db:81:71:
6c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:57:FF:FC:10:28:AE:B2:46:C4:10:8A:A5:1B:E3:72:C1:FB:DF:EE
X509v3 Authority Key Identifier:
keyid:88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:58:c2:93:59:1d:5c:a6:84:75:e7:ea:00:54:cd:39:64:95:
53:bb:e2:77:cc:43:69:70:9e:6c:1d:c8:de:e6:c7:33:00:8d:
41:1c:d6:2f:48:99:dc:16:68:8c:13:5e:e2:ea:bb:d4:d6:01:
04:97:90:32:e1:c4:29:49:e8:3e:1c:fe:45:7d:f9:35:5a:f7:
cb:14:7f:63:ad:50:bc:56:c6:95:d2:7d:47:07:a6:db:f4:a0:
89:c8:9b:9a:b5:01:7c:9e:cf:cf:a8:2f:b2:c2:2e:a3:86:6e:
5c:1d:9d:f9:b9:96:1e:3c:38:43:3d:f4:c6:59:15:71:6e:ff:
49:2b:75:cb:74:f3:90:f2:72:d4:6f:15:1e:b5:f9:54:a6:f0:
3a:80:8b:5f:46:85:f6:c9:52:49:58:49:a3:c0:00:2c:ff:e6:
6c:08:0f:a1:3a:5c:85:06:41:8b:ea:41:82:6d:31:f6:02:2c:
aa:c1:a6:7a:83:73:5f:3d:e2:c0:0f:98:d3:da:5a:87:32:31:
ca:6b:e2:4c:9c:49:c5:b6:31:e6:89:ad:1d:0b:0c:61:a8:4d:
b0:77:7b:ce:aa:90:46:85:f4:a0:30:9a:49:44:16:df:b8:73:
db:43:18:90:7c:3d:19:00:49:f4:6c:c6:23:0f:c9:97:b9:60:
42:52:59:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:37 2025 by rpki-client