Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
File: iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft (raw, json)
Hash identifier: VQvj5bq/waK0g9WUEK6OHtu2/FObMDGRr9I0Peq/j/w=
Subject key identifier: EA:AC:50:D3:B4:5E:D5:AB:5E:E9:53:D7:69:1F:89:EC:1F:14:68:86
Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
Certificate issuer: /CN=892d21566ccfc3bb079ec5854b044ab809804157
Certificate serial: 0197CB3A6813D613A023BF92240F755B6A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 13:01:31 +0000
Manifest this update: Wed 02 Jul 2025 13:01:31 +0000
Manifest next update: Thu 03 Jul 2025 13:01:31 +0000
Files and hashes: 1: _xlkfnRMKnsNclJVExLAcIhA2l8.roa (hash: yd6Q3aFKUFt1tUH23Si46a/9sl4TuzKnFUmsDxLLaqw=)
2: iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl (hash: oOjFJakhL/UEAjS0bXAg4wzc41vhdD+9Geogs47nSX4=)
3: zlNvNdUfJ603zOBB38DPZ-NzG8o.roa (hash: gEXJj7MnEC8VWadeJK9z3p3E0Dv26srWKVnkmAOkpEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:68:13:d6:13:a0:23:bf:92:24:0f:75:5b:6a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157
Validity
Not Before: Jul 2 13:01:31 2025 GMT
Not After : Jul 3 13:01:31 2025 GMT
Subject: CN=eaac50d3b45ed5ab5ee953d7691f89ec1f146886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:62:32:6f:54:b9:92:15:ff:9e:45:18:51:
a0:87:ea:44:5c:22:06:5e:76:8d:0d:29:f1:a5:6b:
f4:72:90:93:78:6e:a7:f5:4b:23:b3:8c:a9:c0:3d:
65:27:79:84:fe:eb:48:f3:62:94:d6:b8:20:22:3b:
30:52:2c:11:c5:a6:93:12:ba:8c:48:07:24:ff:bc:
06:c8:bf:01:56:cd:29:01:21:93:ad:a8:4c:e2:48:
0c:19:bc:38:24:95:5f:61:34:60:a1:e9:5f:4e:b0:
8e:2a:66:82:ec:30:08:db:e7:19:0e:a9:04:86:ca:
2c:49:0e:06:58:63:8e:48:bc:b0:54:0b:b3:18:d9:
26:b1:ee:c9:8c:1b:d3:d9:db:b3:1c:0d:49:77:13:
9d:68:49:31:19:ef:e4:7e:27:6a:76:19:65:c3:f2:
cd:c3:27:cb:93:15:6d:d3:95:a5:7a:f4:43:03:c2:
41:d9:1b:20:c2:b9:6c:d2:db:87:5b:e7:07:11:c4:
48:c1:53:c7:9f:ed:8e:aa:6a:22:35:35:28:62:5c:
42:98:b5:ed:11:69:74:ad:7f:ab:53:5f:c8:5e:80:
06:e6:86:82:e5:ce:a2:a7:a7:33:1a:38:78:17:30:
47:ef:fc:90:15:59:79:40:19:0a:a3:69:6c:50:fc:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AC:50:D3:B4:5E:D5:AB:5E:E9:53:D7:69:1F:89:EC:1F:14:68:86
X509v3 Authority Key Identifier:
keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e8:b0:f7:cd:ff:f0:f3:e0:69:5a:a7:c0:7a:b9:d2:0a:d1:
27:17:94:24:61:45:c3:f1:77:85:ac:e7:c1:77:8a:24:b3:2a:
44:79:34:a6:86:0c:7d:3b:03:ea:f2:37:21:be:71:4f:56:a7:
61:79:b9:6b:0f:f2:36:2d:c2:50:d7:00:29:48:9a:06:8b:92:
a2:0d:ff:36:fc:72:88:69:ae:0a:f4:ad:68:96:66:5a:40:aa:
59:e5:b9:77:ed:2a:ac:a5:1e:e9:b4:b1:db:b7:b8:04:c4:2e:
e5:eb:5d:51:47:e1:fd:62:35:11:29:2c:5a:ad:0f:c3:c5:45:
9d:cd:ad:b3:cf:9a:d9:c9:03:6e:36:61:e0:f3:bc:12:30:de:
52:2d:73:68:7d:f5:63:2d:0b:d1:77:3c:65:10:ab:cb:4e:d5:
c0:6e:78:6e:7c:ca:92:87:a9:17:bc:f2:0b:50:d5:6d:3b:b2:
58:c7:96:9a:8e:58:e6:e3:f3:c5:ef:a8:68:be:21:e6:34:72:
19:91:7f:e8:b4:b2:f4:59:38:71:99:88:1f:29:4a:48:53:b8:
bd:49:f7:c9:d4:f4:ab:79:ef:98:75:aa:2b:b8:54:cf:ef:6a:
90:f1:cc:60:f2:81:37:10:76:04:1d:d3:73:94:11:9c:5a:74:
7a:25:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:23:43 2025 by rpki-client