Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
File: iEZAW_zHgGbFGSyz6-csRDxVcog.mft (raw, json)
Hash identifier: iF7MPa+L8Tb76wIlTf6DL7zELe1F0vACBKktZdaYi70=
Subject key identifier: 94:A9:0F:5B:66:CC:12:B5:D9:C1:DF:7C:90:DE:26:AD:D5:3B:EE:35
Authority key identifier: 88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88
Certificate issuer: /CN=8846405bfcc78066c5192cb3ebe72c443c557288
Certificate serial: 0197B7B348BDDAB3FC31F5F61D8C32A6E815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:01:09 +0000
Manifest this update: Sat 28 Jun 2025 18:01:09 +0000
Manifest next update: Sun 29 Jun 2025 18:01:09 +0000
Files and hashes: 1: 1wukbEM_Z2cOLmS317mkgQWPtlY.roa (hash: mynvXYceF8nnYoZdEmhOk8iYDpjkXUz62HUCHGcK8Wc=)
2: iEZAW_zHgGbFGSyz6-csRDxVcog.crl (hash: VReYR0mRWDetIPXrlW6yCFtG2+y4ZYnBq4xhJET5DGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:48:bd:da:b3:fc:31:f5:f6:1d:8c:32:a6:e8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8846405bfcc78066c5192cb3ebe72c443c557288
Validity
Not Before: Jun 28 18:01:09 2025 GMT
Not After : Jun 29 18:01:09 2025 GMT
Subject: CN=94a90f5b66cc12b5d9c1df7c90de26add53bee35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:11:96:d8:c7:01:da:e6:87:52:ad:b5:cb:
e3:a4:40:08:40:20:a6:83:dc:78:ac:e1:0f:06:bb:
eb:c4:1b:a7:64:79:6c:19:a8:55:19:39:2f:31:62:
b7:02:78:5c:80:8b:71:e1:ac:0c:a6:d0:4e:ed:6b:
e0:38:a1:0b:9d:83:19:0d:21:6e:77:25:2e:74:be:
96:bb:04:3d:2d:53:af:bc:49:53:47:f6:30:1d:1a:
e5:90:d4:59:2a:9a:2f:ff:22:1b:41:5b:d1:5e:7e:
72:51:34:ae:15:a2:8f:8f:88:08:9e:1f:6f:db:45:
12:7f:97:62:c3:13:f5:ef:d3:2d:07:61:26:78:39:
15:6d:fc:73:c2:0a:d5:ae:eb:96:9b:57:c5:34:bc:
77:0e:76:b2:b2:1f:a8:35:8e:db:51:a8:eb:25:01:
bb:45:e2:39:d2:7c:84:a9:0d:32:92:f4:db:81:31:
3c:64:53:01:4e:a9:00:fd:3d:f2:13:f1:9a:23:0d:
07:24:6e:82:cf:cc:5c:df:f8:e1:48:fb:1d:20:d0:
9f:71:02:31:9d:ad:42:73:51:77:c6:8e:3a:6f:90:
5b:01:fa:cc:bd:79:bd:ef:08:5b:3b:c3:63:5c:05:
75:84:62:18:78:6b:e8:0b:eb:9f:10:10:ac:d8:da:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A9:0F:5B:66:CC:12:B5:D9:C1:DF:7C:90:DE:26:AD:D5:3B:EE:35
X509v3 Authority Key Identifier:
keyid:88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a1:1d:c0:b1:79:81:e6:45:53:fd:1c:eb:75:f7:07:c1:80:
f7:db:a6:b8:ac:8c:b5:a3:4c:b6:10:c7:93:de:f9:bf:bb:a8:
1c:62:e4:4e:0d:79:3c:05:c3:1c:7e:db:98:77:98:92:e4:e9:
d7:1d:a8:b4:85:a8:ec:64:1e:0c:01:c0:4c:30:bb:32:0e:40:
b9:1a:6a:4b:75:dd:fb:6a:da:7b:53:d2:5b:fe:d8:15:71:87:
8f:19:98:35:7e:e7:37:f2:ea:00:68:f7:12:88:df:b1:df:1f:
8b:6a:b0:74:36:6c:d9:d0:57:71:1b:ec:e3:b4:bd:10:0e:f5:
e7:28:6a:af:bd:5d:85:e4:4e:59:e7:62:b4:d7:ed:f3:6d:d9:
26:93:4e:74:cc:a9:66:00:9d:22:9f:c6:3c:da:0a:28:57:d5:
eb:9a:ef:22:79:cb:00:bd:1d:6e:ec:6c:41:07:5d:c2:1c:56:
87:96:fe:b1:ab:7d:01:30:6f:a0:07:f8:ec:39:4d:4f:d2:f6:
09:93:d0:bb:fd:f2:5a:11:4a:22:60:cc:e2:ce:24:6a:44:bb:
20:a9:6e:20:00:9a:68:7d:3f:2e:84:4b:51:c3:56:92:0e:9a:
0c:e9:5a:a2:ec:07:de:eb:89:b5:e3:4f:c3:8b:3b:8e:76:13:
ff:3a:a0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:38 2025 by rpki-client