Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
File: iF5uZejXQYIDljRWbNH6KysyVwI.mft (raw, json)
Hash identifier: cBrof3ctX5Gv12Uk9DW6jlLlQ4fpYRury0CrRdMFBZo=
Subject key identifier: 35:45:B3:6A:EC:FC:CC:72:92:C5:48:DD:12:B8:DD:CF:23:91:B4:D3
Authority key identifier: 88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02
Certificate issuer: /CN=885e6e65e8d74182039634566cd1fa2b2b325702
Certificate serial: 0197BBC74C3AFB7520685384CF8692784E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
Manifest number: 01B8
Signing time: Sun 29 Jun 2025 13:01:29 +0000
Manifest this update: Sun 29 Jun 2025 13:01:29 +0000
Manifest next update: Mon 30 Jun 2025 13:01:29 +0000
Files and hashes: 1: 7R9_GJs-RL0ErJSF-LSh2qvUnoE.roa (hash: vAKa7err3VX58GgPpqscTS8KcHYZ802QYuzRZdVwrE8=)
2: iF5uZejXQYIDljRWbNH6KysyVwI.crl (hash: g8WA2+tRC5TC4CFAG47FixDbeIPWxI2FzsyJcEh5OJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:c7:4c:3a:fb:75:20:68:53:84:cf:86:92:78:4e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885e6e65e8d74182039634566cd1fa2b2b325702
Validity
Not Before: Jun 29 13:01:29 2025 GMT
Not After : Jun 30 13:01:29 2025 GMT
Subject: CN=3545b36aecfccc7292c548dd12b8ddcf2391b4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b9:73:6e:0d:bf:c4:1e:7a:14:18:f8:b9:f8:
08:bd:b1:e3:e3:2d:d4:ee:3d:a7:bb:40:80:0c:5c:
e2:d9:81:ab:4a:21:2b:52:ec:5d:4f:cf:22:c2:54:
fe:7e:b0:a6:6f:c1:17:aa:38:4c:3f:52:66:79:5f:
e9:29:75:40:a8:36:72:7b:1e:37:d1:e4:4b:f3:b2:
1b:40:74:28:e8:48:2f:b9:17:ca:0e:d7:92:73:6e:
55:12:5d:46:02:27:b0:0c:7c:e0:3d:d6:43:89:9a:
50:a7:3f:a3:c0:1d:af:8e:df:d0:6a:a0:22:81:c4:
f0:bc:81:6b:22:b2:a5:b6:b1:c3:85:b1:a9:69:81:
e0:da:f4:0e:3e:b2:a7:a6:11:7a:e6:56:0e:3a:a8:
6b:47:b3:a1:11:e4:d0:6c:c1:08:ff:bb:69:fe:a0:
03:c5:cd:bd:0c:f6:62:f2:b4:1b:b5:92:32:1b:91:
1e:00:9b:07:7d:e2:6d:31:c7:c5:04:fb:b8:26:0e:
03:08:f6:3d:66:5c:cf:14:66:bd:0c:5f:9c:67:68:
9f:b3:ae:fa:10:73:3b:33:fe:70:45:64:d1:8a:b1:
7d:ef:b8:26:99:75:95:3e:eb:29:7a:bc:be:f0:82:
95:f4:1f:89:3a:69:19:65:e8:12:13:1d:04:ca:b0:
4e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:45:B3:6A:EC:FC:CC:72:92:C5:48:DD:12:B8:DD:CF:23:91:B4:D3
X509v3 Authority Key Identifier:
keyid:88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:28:ad:cc:60:af:7b:d3:f8:42:24:c4:fd:f5:bd:9f:71:c1:
b0:ea:20:d0:e1:28:df:26:f4:1f:94:18:c0:13:e1:a2:8f:3a:
8f:55:79:ed:55:4f:3a:b2:26:64:f3:7d:b4:0e:99:5d:d2:d0:
a9:92:1d:48:89:b3:2a:d9:54:8e:c4:41:35:a3:81:a4:8a:f7:
a6:d3:97:76:25:ce:4d:7d:62:0a:53:bb:a2:27:3a:b6:0b:65:
48:b8:ba:11:a7:0b:8b:b1:f0:4b:7d:87:fc:5c:25:c2:40:2e:
8e:a4:07:91:36:7a:43:68:03:2b:38:81:3b:93:64:0e:73:db:
d5:43:5d:12:d5:84:22:b6:23:71:97:36:18:7c:3f:8d:d0:6e:
57:d5:d4:52:d3:f8:6a:85:1a:a8:01:65:74:ee:b1:e0:97:88:
7c:38:ef:ec:91:ae:c2:84:67:07:0b:7a:7a:0a:0f:cd:68:ac:
e5:fb:dc:f4:7b:47:22:23:c8:dd:1e:14:90:b8:ae:aa:ef:8e:
3a:b9:7f:6b:3c:46:ae:02:d6:6b:96:fd:cb:1e:86:25:2c:d2:
93:c4:09:3c:4a:07:dd:96:6b:34:85:2c:21:22:f0:c1:42:b3:
8e:3a:de:cc:25:0d:9c:14:6e:50:0e:bd:1c:b0:1f:4e:d5:ef:
c6:40:4b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:06:17 2025 by rpki-client