Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
File: IeQhptlumdY_fPtJnKcRfIIwTqo.mft (raw, json)
Hash identifier: jJzgHHQ2PX8KP7Q2puatLAZAEAI8D4xILgcouo1B9Pg=
Subject key identifier: 48:F9:80:58:08:30:48:BC:E6:89:D2:B3:D5:68:94:4C:27:90:A0:84
Authority key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
Certificate issuer: /CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Certificate serial: 0197B632B6FBB6AFB675E3B829F4230A14DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 11:01:06 +0000
Manifest this update: Sat 28 Jun 2025 11:01:06 +0000
Manifest next update: Sun 29 Jun 2025 11:01:06 +0000
Files and hashes: 1: 1-6OkkXT7C4FLfpQRzLeEPIkuUNA.roa (hash: D8MJaVpCwQ0fVODdot0Xw5y5hbPJWv55WnQMX0Z/dxE=)
2: IeQhptlumdY_fPtJnKcRfIIwTqo.crl (hash: mlAvHFR3q/XmGgJMq5iUmcaS+TVGBcSKE6mgD6ZcZFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:b6:fb:b6:af:b6:75:e3:b8:29:f4:23:0a:14:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Validity
Not Before: Jun 28 11:01:06 2025 GMT
Not After : Jun 29 11:01:06 2025 GMT
Subject: CN=48f98058083048bce689d2b3d568944c2790a084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:82:cf:d7:dd:56:43:d5:9e:c6:36:f3:5a:
ca:7b:44:50:ae:61:47:de:e9:04:44:72:d4:e4:52:
e8:9b:66:90:76:9e:0e:c3:28:97:21:9f:ca:75:49:
69:d0:8f:ed:60:3f:cd:bc:6c:54:5d:ed:f0:2f:2d:
15:3f:45:39:4e:b0:59:1e:0f:7b:03:33:af:9e:97:
c1:fc:ab:bf:35:80:4d:2b:df:12:da:ce:4e:12:1a:
0b:25:17:a9:62:28:88:52:40:a0:0a:75:6b:df:3b:
7d:6b:3c:ee:d4:7a:b8:79:93:f8:ea:a6:77:8b:1b:
81:2a:5c:46:bc:76:18:a2:44:45:d1:16:ef:1b:62:
dd:3a:af:ff:13:76:a2:22:8c:30:83:e5:22:34:f9:
8a:f5:2d:63:1b:73:ff:54:cf:0a:45:df:dd:5c:b9:
3e:c5:46:50:69:de:d5:92:25:1c:7b:13:df:ee:70:
ff:52:21:7c:61:9d:08:42:78:75:66:b6:89:45:77:
c5:87:a9:78:64:00:46:e6:9b:c9:b7:b5:a3:c7:0e:
fa:f1:b5:a5:b0:ba:e0:32:d7:d4:28:58:fb:9d:06:
87:27:be:85:1d:8e:97:25:27:09:74:ba:8b:72:b5:
e6:0e:e4:d9:2f:61:40:3b:b5:da:c7:6e:04:a1:37:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F9:80:58:08:30:48:BC:E6:89:D2:B3:D5:68:94:4C:27:90:A0:84
X509v3 Authority Key Identifier:
keyid:21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f8:9f:c2:dd:bd:05:da:a0:b9:92:6c:80:c5:6f:7d:92:97:
5a:26:c3:83:bd:10:e2:5e:47:94:33:07:92:bb:c9:2c:f2:9d:
f4:27:cd:a6:c4:e4:4e:8e:1d:bf:7e:3d:a0:2d:c2:9f:44:ef:
02:2c:2f:2b:09:38:86:ce:bd:5d:07:2c:9a:69:bc:dc:5e:d0:
16:ee:a2:47:b3:49:66:59:e9:33:6b:cf:28:62:da:98:6a:f4:
53:0e:89:f3:6a:c3:52:11:61:28:2d:7f:1c:96:7e:3d:96:d0:
c6:ad:aa:81:1e:8a:5f:82:06:50:12:a9:e0:f6:d3:28:f7:80:
09:d5:e0:c2:8b:81:7f:a3:ad:bb:c1:78:7c:4a:e9:b8:17:95:
19:d9:f4:e0:6a:b7:fd:b5:20:fe:ea:48:94:0d:f6:e5:f1:70:
af:51:cf:b1:6a:eb:29:5e:a6:52:fb:db:f1:1d:98:85:b8:37:
96:d1:b2:fe:3a:d3:a4:fe:ca:44:3d:f5:c0:f8:da:85:e6:48:
5a:02:63:41:ac:90:81:8e:ba:fe:04:ac:19:5c:cb:94:5a:75:
90:5f:9a:7b:2d:ba:3b:7c:50:51:f3:1e:2c:8b:16:60:3d:f4:
a4:f8:dd:60:a7:66:2c:f8:bd:45:3e:06:a4:e0:cb:80:fb:8d:
11:24:56:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:10 2025 by rpki-client