Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
File: iaQ4np9NXMjEhtaCK-8fRO987UI.mft (raw, json)
Hash identifier: NvHvn99mJFZVWBl6dwEZKdVgpeYYeNujdmdzJpab5bU=
Subject key identifier: 7B:B5:92:0C:58:E9:2E:48:D4:C0:6E:9E:12:EA:C5:1C:BA:1F:AC:93
Authority key identifier: 89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
Certificate issuer: /CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Certificate serial: 0197B70F4403F6CCCDCF377A2D2605EE2A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
Manifest number: C3
Signing time: Sat 28 Jun 2025 15:02:00 +0000
Manifest this update: Sat 28 Jun 2025 15:02:00 +0000
Manifest next update: Sun 29 Jun 2025 15:02:00 +0000
Files and hashes: 1: 8ZpplWrhbVda_aSYHx2pbbAdBWI.roa (hash: KC0Osg8WEd8lVzUhmWMq6YDl/x9/ZL2h5Pd6qvq9PbE=)
2: iaQ4np9NXMjEhtaCK-8fRO987UI.crl (hash: HZX0cTDh1eaLOojj12lDu/eVC28t9+k4JLNHM777q04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:44:03:f6:cc:cd:cf:37:7a:2d:26:05:ee:2a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Validity
Not Before: Jun 28 15:02:00 2025 GMT
Not After : Jun 29 15:02:00 2025 GMT
Subject: CN=7bb5920c58e92e48d4c06e9e12eac51cba1fac93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:25:59:65:06:9a:97:6a:06:d1:c5:aa:4b:96:
2b:a2:63:2e:9b:82:5b:cf:cb:1d:e6:56:d6:cb:cf:
0f:cf:cf:52:78:c4:ea:d0:51:14:13:b2:36:2a:a2:
d2:99:7a:64:f1:b2:3c:4b:32:bc:01:a1:74:59:a2:
8e:17:34:5c:5e:60:2a:7b:97:e7:e6:e6:90:30:2c:
00:59:f5:88:f1:22:2b:ac:9f:b1:fa:27:04:7e:25:
04:42:48:d9:b6:4b:35:71:9a:0e:b4:8b:45:3b:76:
de:9c:e4:76:d9:bf:38:c8:67:5b:4b:77:3f:36:31:
6d:68:87:30:cd:4a:39:53:55:30:de:b5:d5:25:65:
a0:3a:98:91:7e:9c:43:d4:8d:4b:78:a8:cc:65:ab:
aa:23:dd:9c:61:13:fa:41:bf:23:d1:19:9a:8f:d0:
39:3a:02:17:57:c5:7d:c8:1f:1f:e3:0a:a0:d7:a9:
55:dc:61:58:ae:88:00:55:2a:e5:42:6a:bb:8a:5c:
80:31:96:e8:39:cf:dc:7a:a2:1e:f8:1b:14:a1:50:
fb:2b:32:1e:68:1f:a3:dd:d8:9c:53:a7:63:ee:83:
49:34:eb:e6:c1:1f:45:c1:18:03:33:f1:97:93:f4:
55:83:6b:cd:22:32:61:de:c0:9c:48:d6:ff:7f:2c:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B5:92:0C:58:E9:2E:48:D4:C0:6E:9E:12:EA:C5:1C:BA:1F:AC:93
X509v3 Authority Key Identifier:
keyid:89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d8:65:f7:ab:6a:0d:84:d9:e1:99:9d:73:14:9f:aa:04:d3:
69:ec:7e:09:bc:08:cd:ae:6e:b7:a8:19:c7:e4:35:3b:13:bd:
7a:f9:bb:2a:d6:d0:46:c3:a0:de:cf:75:3f:5d:94:11:a4:86:
fa:11:db:12:be:31:14:36:18:f5:e4:ca:41:de:3a:b2:4b:01:
90:5a:0c:36:bd:49:89:6d:33:fb:d4:6f:f7:9e:4e:d6:9f:4a:
fb:58:56:c1:c2:f1:f1:f9:8f:0c:a9:d5:fc:4d:10:d8:e8:21:
5c:35:98:73:47:80:7c:23:43:8a:08:4e:79:67:39:fd:9c:43:
d8:b7:e1:c4:5f:06:59:51:1d:76:24:93:42:6a:29:02:2b:8d:
42:63:8b:58:d0:67:cc:68:60:78:2e:b2:87:81:5c:ce:6a:69:
3e:48:fb:c2:21:2e:19:1a:cd:f8:ef:c4:09:51:0c:f3:aa:2a:
07:04:4c:a3:35:84:69:3c:b0:d7:c2:7a:ab:26:25:47:b1:df:
c3:1e:e8:67:af:34:6b:03:40:1e:e7:26:04:76:da:56:61:34:
c2:71:b7:2e:87:bc:0d:33:70:44:6d:c4:b0:9c:f2:8d:df:71:
de:ca:ec:09:0b:40:d8:4d:35:45:f6:9d:13:e3:86:d6:ac:e1:
c4:5a:84:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:47 2025 by rpki-client