Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
File: iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft (raw, json)
Hash identifier: K6mHXIk5nWK8k6eEaA9FPu5i95+ihG5qld4oncj2Bwc=
Subject key identifier: 9B:33:4F:28:15:16:D0:A8:C9:5D:14:F4:19:C2:8E:5B:8D:11:27:49
Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
Certificate issuer: /CN=8968883765549991d7ff376126d58a909a14b8f1
Certificate serial: 0197B7B2E3FB07BFA27F1BBED94DEEC62DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
Manifest number: 01DC
Signing time: Sat 28 Jun 2025 18:00:43 +0000
Manifest this update: Sat 28 Jun 2025 18:00:43 +0000
Manifest next update: Sun 29 Jun 2025 18:00:43 +0000
Files and hashes: 1: OFotEhQS5D75BLXwwqIZG_YPaGM.roa (hash: DFc7srYmWSrbDIWTrg0cPVEONFNYLjz8/fNoPyoYWxo=)
2: iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl (hash: Sjwvi7zqRKCAxg4DOX/64UDah0WmIDxi5cMtsR4uZVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e3:fb:07:bf:a2:7f:1b:be:d9:4d:ee:c6:2d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1
Validity
Not Before: Jun 28 18:00:43 2025 GMT
Not After : Jun 29 18:00:43 2025 GMT
Subject: CN=9b334f281516d0a8c95d14f419c28e5b8d112749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:63:16:fd:4f:95:ff:dd:0f:57:9d:c5:ea:
71:a3:2f:0a:34:d7:12:4b:0f:e3:0f:fa:74:64:42:
50:d2:78:76:6d:b9:a8:e9:e4:19:38:70:5d:7c:72:
2a:a0:a7:f2:29:c2:83:8b:b4:e9:26:b3:5d:b0:e9:
30:91:14:5c:6d:e5:49:26:14:be:79:53:8b:78:da:
68:e1:29:1c:b7:53:ab:6e:9a:fc:98:52:3e:bc:6b:
57:25:fc:a5:e7:f7:79:2b:75:49:93:74:42:65:80:
6f:14:e0:6d:f4:13:b5:a6:58:85:50:9a:ce:99:41:
86:1a:19:b7:a6:43:17:a0:3d:13:11:44:9b:08:62:
7b:b5:be:4c:18:e4:2c:96:8e:53:9f:ab:88:0f:74:
02:24:8e:c9:24:b0:b3:cc:01:52:0d:5b:40:0c:40:
7f:aa:b6:2c:71:41:02:31:e3:74:32:09:b1:78:b7:
a3:0a:6e:74:29:87:1d:71:f3:b7:6c:55:39:dd:9d:
96:34:e6:97:f2:30:61:9a:28:18:5f:e9:8f:e0:8d:
00:10:02:93:62:4e:53:8b:50:ed:55:04:89:32:af:
07:80:9b:2d:a7:e6:48:f3:ae:3e:1e:f6:ce:9c:83:
54:df:00:52:b4:c0:28:23:c8:3b:44:10:be:b9:aa:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:33:4F:28:15:16:D0:A8:C9:5D:14:F4:19:C2:8E:5B:8D:11:27:49
X509v3 Authority Key Identifier:
keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c4:91:e0:44:58:70:82:d3:40:89:63:6d:2e:e6:47:d3:ee:
a1:c4:44:91:f9:29:d7:c4:95:cf:e7:c0:76:db:43:7d:30:fe:
51:04:d4:49:34:30:a6:d8:c0:2b:4c:40:57:58:3a:77:04:0a:
ce:c6:d3:01:e3:a7:fc:82:1a:bc:a0:ba:86:76:37:58:e0:34:
a2:17:8e:51:d2:a6:f9:b5:75:77:f0:60:8e:4b:13:52:0c:dd:
5d:af:d3:56:aa:16:d4:6d:7c:f5:08:52:e2:b6:17:d9:d2:bc:
e5:98:b5:35:af:0e:3a:88:6f:f9:e5:70:76:17:c2:b7:fc:30:
ab:1b:37:f0:24:04:7f:0f:f8:4b:59:ef:34:77:8f:3e:88:f3:
f6:71:7a:e4:df:88:24:dd:6b:9b:0d:f4:46:f6:40:af:fc:14:
bc:8c:3d:d8:3f:db:a0:b1:98:1b:4c:a8:9f:58:ae:bc:62:f2:
d0:28:09:20:61:3a:76:41:97:66:47:7a:f7:61:83:94:19:21:
e5:fb:db:3e:db:2b:03:e4:21:69:03:32:92:58:06:ab:5b:5c:
c2:83:16:ab:0d:b5:a8:4a:ff:04:e3:ee:71:d5:9a:0e:03:00:
65:99:77:2e:55:9d:96:2a:30:75:2a:97:3a:a4:a2:3e:90:47:
6a:6f:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:55 2025 by rpki-client