Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier: /WjgPkOQfUJx07OVDoO9/htzQQA3CmsHo10Vt1mZa7M=
Subject key identifier: 17:CE:63:06:6B:6B:49:DC:71:59:44:8C:E6:55:C4:A0:7D:BA:EA:CF
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 0197BB21D6935B293106976104B759B3FC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number: 066A
Signing time: Sun 29 Jun 2025 10:00:46 +0000
Manifest this update: Sun 29 Jun 2025 10:00:46 +0000
Manifest next update: Mon 30 Jun 2025 10:00:46 +0000
Files and hashes: 1: 0Td-ytKd7IQkV6ppvSRDV5Vu3uc.roa (hash: vadykyjqf/87L2UrE0dzG3fnpUitaYJ3rncrWvmznpA=)
2: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: hio9S5zIeL1RuBxAHSG3s31YxhFySFa2osbv/CmawcI=)
3: klqt66FL_fbr6-S9maCaJ71u_2M.roa (hash: veL+ZGa8+a7DgdnASURYCHEXm47JFKP1LXkF9cJkBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:21:d6:93:5b:29:31:06:97:61:04:b7:59:b3:fc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: Jun 29 10:00:46 2025 GMT
Not After : Jun 30 10:00:46 2025 GMT
Subject: CN=17ce63066b6b49dc7159448ce655c4a07dbaeacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4e:0b:ce:83:3b:35:59:2f:d6:ff:27:c4:90:
78:d8:a4:af:47:0a:b5:38:3f:de:f3:16:0d:bd:0f:
d7:82:d6:2a:8f:1e:f7:b4:cf:34:98:88:1d:e2:b5:
5d:2a:52:d4:6b:8b:52:52:f1:d7:6c:c1:f7:64:f8:
a6:6a:58:30:db:6e:64:cf:7f:df:d1:b9:3e:b7:ec:
87:8b:32:11:18:75:3a:65:bf:cd:d3:ee:b7:b5:20:
3a:7a:5e:a8:f5:f5:06:1f:b5:18:f4:ee:24:43:21:
5a:10:02:74:41:66:80:5d:f4:5c:5f:21:36:30:a7:
6b:6a:b8:6b:15:da:27:f5:ac:04:96:8e:89:a9:c2:
af:8b:c6:3c:22:53:d6:21:4e:e7:2f:7a:cb:5b:df:
cc:29:03:d6:ce:7a:ea:f3:d0:81:5a:13:e1:db:35:
0e:c2:95:de:5a:fd:26:25:91:d7:5e:e6:a5:37:71:
7e:7f:d8:01:00:33:90:ed:9d:24:9a:94:2f:8b:3b:
88:4d:85:8a:6e:f8:f3:a0:94:0a:26:aa:e6:12:ed:
5f:f1:3f:02:ea:7c:1a:e4:08:54:33:dd:10:0d:ef:
c1:3c:a3:97:0a:f4:6f:1e:4c:63:65:15:b8:ab:48:
88:fc:17:c5:64:b0:ed:a1:31:8f:29:6d:94:06:5c:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CE:63:06:6B:6B:49:DC:71:59:44:8C:E6:55:C4:A0:7D:BA:EA:CF
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ca:e4:07:23:1b:c3:4b:da:19:b5:82:9b:a8:b4:8d:9c:77:
c4:79:1a:cd:54:cb:19:53:1c:17:fd:e3:f4:5d:67:58:4a:6a:
7f:e4:d1:4f:e9:c6:05:f2:f8:26:34:da:c7:46:9f:c5:7e:1d:
f6:f9:d4:ad:cd:82:e4:bf:d6:81:4b:81:51:4a:04:7f:b0:f0:
09:88:93:0f:64:e8:3c:75:57:19:25:2d:1b:51:00:09:10:df:
98:0e:41:cd:9e:0b:48:19:ff:0b:d9:5b:99:d3:83:f0:0c:bc:
39:09:27:e2:a7:6a:0e:be:dd:b0:b8:78:2a:e3:71:a9:bc:52:
32:55:46:84:33:b0:70:4e:06:39:72:55:90:4e:9c:28:80:68:
65:fc:56:65:9f:98:3d:8b:15:63:5a:5f:05:8d:04:09:04:3f:
87:2c:1b:67:b9:92:df:dd:04:d5:88:5f:d4:d8:36:38:81:5d:
f8:63:64:50:99:2c:a6:a7:98:d9:7a:e0:6a:30:b2:68:4b:d5:
f8:bf:5b:dd:87:fe:bf:96:42:16:87:6a:4d:6d:fa:47:6e:f1:
7a:6a:2a:77:46:b1:23:4b:67:05:86:fb:65:76:dc:af:96:72:
2b:c2:d3:d1:7b:1f:d3:98:2c:9a:23:b7:60:15:cd:dd:6e:3d:
24:4d:94:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:18:03 2025 by rpki-client