Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
File: iC-gGQL06MNH8hFuRkXaGmtOCWI.mft (raw, json)
Hash identifier: 4R1lul7LJn71EdbDrvTkwWWGXsF+EJhdjwgMFHGwBJE=
Subject key identifier: 9F:77:7E:5C:F5:09:6D:72:D1:43:9A:31:44:78:0D:B3:8B:DF:2D:AC
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Certificate issuer: /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial: 0197B6A060A52ECBD355521B33C1FF1A860D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
Manifest number: 1375
Signing time: Sat 28 Jun 2025 13:00:53 +0000
Manifest this update: Sat 28 Jun 2025 13:00:53 +0000
Manifest next update: Sun 29 Jun 2025 13:00:53 +0000
Files and hashes: 1: ENS55DqOSCIACYKV88lsj2-9Qt0.roa (hash: DHbJggMAa2s1Y5SQ9CvEy1KweRl3G7QnT7Ch9hrVq4Y=)
2: Eh5XcZTOlwwjICZ8D5e6YinN9to.roa (hash: i3hRAhyXtajePfAySoecKpTzxKsfIbEuHCpoNygQqoo=)
3: iC-gGQL06MNH8hFuRkXaGmtOCWI.crl (hash: tZQX4T2LUvwcWWJAgdScmSQ1YREtYFSC4SC0Q8b9loM=)
4: rqFZA9uVkdGBL0x6Ei0L9MHEurQ.roa (hash: L0IGvxVXiMO117M8Wm4IgrHBTq1xuhWbcFCP05D3zJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:60:a5:2e:cb:d3:55:52:1b:33:c1:ff:1a:86:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Validity
Not Before: Jun 28 13:00:53 2025 GMT
Not After : Jun 29 13:00:53 2025 GMT
Subject: CN=9f777e5cf5096d72d1439a3144780db38bdf2dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:0c:52:27:18:8b:a6:1d:95:65:0c:c6:ae:
97:e0:2a:f6:fa:c3:fa:39:7e:73:3f:1b:ee:2a:5c:
17:b7:46:b9:21:ce:d9:0d:f0:9c:9c:88:e8:de:56:
4d:5c:11:87:ec:95:b2:86:a5:c7:d4:3c:a2:4d:46:
11:f3:96:4d:ff:eb:cf:cf:eb:a7:16:59:8a:5b:3e:
29:35:76:f6:d5:2d:19:7c:a9:ff:74:fb:6c:fa:1f:
e8:48:bf:cc:d1:b3:dd:56:de:08:50:3d:eb:8e:a2:
83:b9:41:73:5c:c4:c0:b5:03:19:93:fb:0e:20:50:
c3:ec:93:f2:76:af:78:d3:70:d6:64:65:eb:bb:3d:
22:17:28:79:15:93:f8:6f:e4:cb:8a:c2:30:30:4c:
84:53:6d:c2:35:7b:37:a8:3e:66:72:0b:57:fd:b0:
b6:e0:58:1d:20:1d:7f:cd:1f:cf:35:00:d1:2e:54:
d4:53:76:2d:25:3c:e1:56:2c:79:1e:9c:a3:76:ca:
21:3a:9f:ad:67:af:ea:eb:f3:60:e1:5f:5d:1a:05:
db:e4:4d:a0:87:7d:1a:bf:e1:74:60:e1:21:27:c0:
77:48:6a:4e:72:a0:41:85:f5:24:37:14:27:27:03:
59:21:63:8f:c1:05:e3:d6:3b:4e:58:2d:d8:16:60:
d3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:77:7E:5C:F5:09:6D:72:D1:43:9A:31:44:78:0D:B3:8B:DF:2D:AC
X509v3 Authority Key Identifier:
keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:74:1e:a0:98:c2:c9:56:16:e5:49:74:0b:1a:b8:33:ec:1b:
4b:c7:d9:71:14:c0:96:bc:35:40:00:89:8c:de:db:d9:94:34:
10:05:18:ac:d3:3d:ef:f1:d9:2a:cf:97:54:40:10:fc:d1:03:
83:2f:9d:e0:ce:04:34:52:f4:dd:0f:ef:b8:6a:1f:32:4c:27:
96:06:d7:36:3a:d5:7a:d0:1a:c4:31:2b:fd:4d:b3:1d:0f:2e:
1b:b1:36:82:48:4b:9a:c9:8a:14:10:41:07:d0:6f:74:7f:44:
ac:a6:8f:0c:85:a1:24:21:c4:0e:ef:07:d2:bb:31:cb:c4:26:
2b:40:d9:7b:d3:6e:be:89:a1:6d:1a:5c:1c:54:0b:41:2d:11:
ae:1b:eb:9e:97:c2:2f:4d:d2:88:59:60:86:e6:8d:01:57:da:
ff:ea:37:45:8d:b2:17:f0:07:01:c1:40:65:85:e6:8d:cb:4e:
d5:23:7e:c1:49:33:0d:cf:77:fc:60:4d:50:13:07:6f:fa:ba:
6f:e7:dc:0a:d2:c1:8c:c0:00:ac:ff:ac:45:a3:3c:dc:0a:63:
8b:6a:2c:2d:d9:bc:a0:b4:e0:dd:51:56:26:d1:91:55:f9:bd:
35:ac:bb:5b:98:0d:70:9f:4b:53:ca:da:ca:16:39:82:44:ee:
bc:d8:df:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:20 2025 by rpki-client