Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
File: iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json)
Hash identifier: a7Alba+2grxiJzzcY8+Y/jPd9m2nbg5upW1gkTyQS6c=
Subject key identifier: 73:23:AF:95:85:EB:97:0D:C0:AD:9F:71:0A:BA:8F:1D:59:7B:14:44
Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Certificate issuer: /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Certificate serial: 0197B77BF7FDE388C0671EF03FB704CFE9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
Manifest number: 08CD
Signing time: Sat 28 Jun 2025 17:00:44 +0000
Manifest this update: Sat 28 Jun 2025 17:00:44 +0000
Manifest next update: Sun 29 Jun 2025 17:00:44 +0000
Files and hashes: 1: J2gFJxTXec_tCl5fYmT5ueu90dA.roa (hash: eqh0jr48WZnOgc9VcsakSv2fxPv1f923UQBSwi0u554=)
2: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: PdTDjv4hRUHMvrO1ZysGYY/mgTo+zNq1N74SIIsSqmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f7:fd:e3:88:c0:67:1e:f0:3f:b7:04:cf:e9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Validity
Not Before: Jun 28 17:00:44 2025 GMT
Not After : Jun 29 17:00:44 2025 GMT
Subject: CN=7323af9585eb970dc0ad9f710aba8f1d597b1444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:50:45:9b:72:6a:9d:eb:c6:41:ef:04:55:
a3:0a:8e:67:0e:a4:d1:42:82:0a:bc:28:f3:82:a0:
46:4c:8f:09:8f:67:81:87:e5:e1:7f:2e:28:f6:0e:
cd:1d:b4:7d:9a:92:8c:7b:99:89:0d:86:f4:22:ef:
52:e9:5a:85:56:fd:57:24:ed:07:63:2b:5e:e7:b3:
d5:b0:59:7b:35:90:d0:29:24:be:38:74:d7:8f:8d:
45:33:18:58:22:d8:d8:de:b0:10:3d:bd:d7:bb:bd:
08:61:e7:1c:33:65:3e:83:ce:44:c7:ab:13:47:90:
85:b2:f5:e8:07:37:14:01:fc:15:8d:ee:ba:eb:13:
7c:47:a7:37:df:4b:84:c6:7c:e8:f8:b2:dc:29:a4:
4d:25:c7:be:2b:64:59:f1:d5:88:e5:0c:08:99:7a:
48:f8:d9:90:91:7b:75:1d:0f:ee:80:b3:2a:d1:9b:
16:c7:f2:58:50:7b:0f:7d:91:cc:2b:46:f5:ef:d0:
87:b0:c2:43:a8:ab:38:25:49:3e:44:d1:14:df:ce:
e4:1b:35:27:4a:1b:ef:a3:65:07:3c:8e:1d:5f:0c:
ff:05:fc:46:81:87:94:7e:ba:6b:1b:5f:8f:61:8e:
34:dc:e0:11:28:ab:9b:61:a7:d9:8d:1b:dd:8d:d2:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:23:AF:95:85:EB:97:0D:C0:AD:9F:71:0A:BA:8F:1D:59:7B:14:44
X509v3 Authority Key Identifier:
keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:10:29:c4:b2:98:2f:6c:0e:c7:62:36:a6:43:bd:5d:ea:93:
21:51:0f:4c:40:fb:ed:fc:df:3a:e3:b8:49:f1:7b:3f:18:be:
85:35:bd:4a:a8:b9:21:1e:89:23:ae:f6:2e:da:a3:e6:2c:c4:
09:ae:f7:17:93:f9:e1:54:95:fb:41:21:f8:e5:e2:a2:70:8c:
e4:98:ed:46:34:68:21:b7:54:46:f0:86:6a:ea:7e:f3:21:e1:
37:cc:8d:4d:47:08:56:16:69:6c:9c:5f:fd:64:a1:b8:40:e5:
18:5b:f0:a2:7f:ce:72:e0:4c:60:c9:8a:47:80:27:a2:c1:06:
79:de:73:9e:58:e4:8a:10:e9:4d:67:f0:3c:a6:dd:19:a8:1f:
06:54:60:21:b0:62:3a:57:e4:15:3a:f9:b7:ee:c4:34:a9:51:
37:65:3c:f9:e6:3b:72:44:46:67:30:41:ae:e7:19:67:17:e4:
cc:d1:66:93:43:09:d7:05:63:a7:c1:6f:6a:d2:92:9f:1d:db:
3c:84:aa:c9:52:15:7b:e3:6b:43:95:f3:4e:47:81:d3:bd:88:
00:e9:2c:ef:fa:e4:88:2d:aa:54:9c:4a:86:49:71:e6:ec:26:
a0:51:22:6a:d9:8f:e1:47:13:a8:64:20:a6:d1:de:cd:5d:f7:
82:53:41:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:34 2025 by rpki-client