Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier: eAhzLVJcQ9PVO3HciSZtftUBLFqYfLZbhCVKgEuXoF0=
Subject key identifier: EE:77:EE:0E:8E:0B:5B:60:F5:87:68:D1:8E:A0:50:22:DA:E2:33:77
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial: 0197C75D0A6635CA19377866D312876FAAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number: 0F29
Signing time: Tue 01 Jul 2025 19:00:52 +0000
Manifest this update: Tue 01 Jul 2025 19:00:52 +0000
Manifest next update: Wed 02 Jul 2025 19:00:52 +0000
Files and hashes: 1: glHtLecTNUxeR4oxupaJRTlQLos.roa (hash: tjH899kftJHgu4JmkbHHTA84WKPpmWW00cLzLNo7wBg=)
2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: podlh7DK0RDO/rTY71PGDKRck8E6XLB5YU12JbkABPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:0a:66:35:ca:19:37:78:66:d3:12:87:6f:aa:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
Validity
Not Before: Jul 1 19:00:52 2025 GMT
Not After : Jul 2 19:00:52 2025 GMT
Subject: CN=ee77ee0e8e0b5b60f58768d18ea05022dae23377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:1d:33:84:d6:32:6d:e4:a6:80:00:a3:51:
cd:0c:cd:12:f5:1e:7b:c3:1f:29:19:89:42:43:0b:
da:d3:07:2e:c7:cc:2c:0d:ed:20:38:cd:b9:2a:32:
95:4e:a7:c5:01:44:58:19:a9:e2:e1:35:78:2f:a7:
a2:03:d2:7a:f1:b3:a4:ce:b3:07:c0:fb:fd:50:94:
63:e7:5e:b9:1b:75:9c:1f:77:8d:a8:55:be:47:25:
39:48:09:61:b0:8d:d3:a9:77:2e:c1:c0:29:f9:b3:
8e:62:19:4a:82:af:75:1a:b9:24:68:9c:f8:2a:83:
40:d9:41:49:cd:15:8d:fa:de:1c:0c:ab:6a:4a:a6:
07:c8:65:f9:31:6e:52:92:ad:5d:23:c5:ab:e7:28:
a5:4a:fa:3c:75:b0:d1:a8:13:37:62:12:61:30:1b:
94:4f:ce:9e:96:29:b2:40:9d:8e:49:00:e2:d9:83:
7d:ef:14:50:2f:f6:a4:7b:03:44:bb:e1:4a:81:96:
00:1c:16:b7:21:2e:ee:12:3d:72:43:ca:57:65:ba:
4b:a8:fb:c8:5b:b3:8d:49:5f:45:e8:ae:58:a1:c6:
5c:99:15:2f:b2:4d:4b:0c:33:3f:e9:44:36:04:9f:
72:95:d7:a5:5d:42:01:34:40:c3:b8:0c:aa:f9:0d:
e0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:77:EE:0E:8E:0B:5B:60:F5:87:68:D1:8E:A0:50:22:DA:E2:33:77
X509v3 Authority Key Identifier:
keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8e:aa:ef:a4:a6:66:df:14:4f:27:36:2e:de:71:12:f8:bd:
2f:cc:8e:1c:c9:5b:7c:a7:11:49:cb:b8:9b:da:c4:60:ca:4a:
66:9e:4f:93:3c:0a:9b:b0:e6:73:47:7b:f8:f6:91:0d:1f:98:
8d:98:64:a6:e5:07:36:7f:0c:70:1f:6e:b3:62:2a:3f:d9:51:
cf:bc:86:a9:87:99:fb:e5:68:24:63:af:05:78:f0:eb:89:b7:
c9:88:ec:a8:4a:d8:81:0d:02:1c:6c:88:cb:a4:78:db:c5:ad:
26:43:a0:60:54:b4:6a:33:d3:6d:ea:96:fa:63:22:12:bf:b5:
d1:f9:50:75:de:fe:a5:09:86:6c:ee:d0:db:b1:90:c1:cb:5a:
c5:ed:3f:91:ea:fe:ec:33:66:a3:80:a2:df:64:7c:b1:5a:7a:
7d:8d:c7:8a:52:00:6c:06:7d:32:ab:fa:cd:85:f2:90:2d:a2:
18:c9:a1:65:a5:22:81:da:91:88:e0:bb:b9:d3:ab:93:0a:7f:
a7:67:1f:4d:da:7e:25:cf:ac:ce:11:62:37:8b:27:3d:63:94:
28:aa:4c:09:c5:2d:32:5b:92:82:d8:9d:f6:ba:9d:bb:9a:79:
05:15:d9:33:86:66:af:e9:9d:34:e3:fd:d2:54:63:4b:23:3f:
49:64:2a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:45:12 2025 by rpki-client