Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
File: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft (raw, json)
Hash identifier: tpdCDnuzPDSWwJn9iY7axZHPWqZNOMvXYYeSN/HvW+c=
Subject key identifier: 69:C7:89:60:30:5D:AC:4D:F0:56:93:76:68:15:55:48:50:30:4A:90
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Certificate issuer: /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial: 0197B8FD84508DEC536AA0664EEB63C539A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
Manifest number: 15BC
Signing time: Sun 29 Jun 2025 00:01:51 +0000
Manifest this update: Sun 29 Jun 2025 00:01:51 +0000
Manifest next update: Mon 30 Jun 2025 00:01:51 +0000
Files and hashes: 1: G8pM4BO4SDFuG0O0aHGZFSHu0bY.roa (hash: z8nYleBnvbZLzPZcC36R6KcHw5MKTfcdnhsG0y6RlGM=)
2: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl (hash: 2/lS5kulWMFLeplh/d4JBwpaFPEjeLO8fkYc0Pi+c0w=)
3: shLVoHyiaZbg7eg2YqA4ky_a-CU.roa (hash: eojzTxeSDWN8wwV7q5opIiiSFcYnrY9hg5to5e5Gp1s=)
4: xifnCCeMNH18n0eWMqga1pgyjCM.roa (hash: apTXD8raL3qZhnZiaGrtnxJWUf2/cGGa8lnT/pZJ1So=)
5: ywH8wQjufiysHP5OXijDjTOBrH4.roa (hash: Kuw4rCVLsz9XQ+KOtke/DWSrK02REb1j13WO/v4sxqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:84:50:8d:ec:53:6a:a0:66:4e:eb:63:c5:39:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
Validity
Not Before: Jun 29 00:01:51 2025 GMT
Not After : Jun 30 00:01:51 2025 GMT
Subject: CN=69c78960305dac4df05693766815554850304a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:e1:a0:be:28:e0:0c:4a:6b:74:61:d4:9d:
f4:09:f4:b8:d5:13:b0:82:25:13:55:af:4c:d1:02:
f8:bb:b3:28:b4:62:a5:fa:63:b6:7f:b3:d2:6e:a3:
0e:47:e5:f5:50:a4:5b:8d:4c:38:19:cc:41:11:8c:
f6:57:a3:13:2d:9f:d3:9d:14:5b:f9:9e:c6:65:b7:
0c:bc:f9:5f:16:36:3e:25:1b:e8:5a:ee:7a:89:5c:
af:49:99:f6:d9:3e:56:b0:f7:73:f7:a3:87:9d:b9:
da:2b:c6:d4:aa:ad:7a:56:b3:b5:8a:ac:82:ff:27:
74:22:e0:ad:1c:6d:03:d7:67:47:45:d4:d5:14:9c:
90:5d:78:a4:69:f0:e4:d3:55:ac:25:6a:a1:a5:f8:
8a:d1:00:d0:ce:5a:3f:12:c2:10:cb:ac:73:69:cf:
2d:7c:a4:54:62:43:ad:08:84:8e:a6:de:e8:c4:41:
ad:6c:44:c7:1e:65:4c:5a:ab:fe:8f:3f:3f:f7:30:
b6:e0:ff:cc:ae:df:47:26:42:2c:22:d3:ac:0f:9c:
5c:a1:7d:0a:d6:d6:a9:d8:7a:38:49:33:e4:82:07:
e4:63:fa:4f:3b:4a:12:66:19:13:52:41:f9:ee:8d:
ff:88:fe:32:24:a8:d8:60:04:21:27:54:c1:1d:6c:
75:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C7:89:60:30:5D:AC:4D:F0:56:93:76:68:15:55:48:50:30:4A:90
X509v3 Authority Key Identifier:
keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ff:05:e0:c6:2f:31:20:81:f3:1b:7a:0a:c2:8e:af:b6:70:
95:29:f7:76:5d:ed:93:d9:dc:f2:06:a7:95:bc:62:c5:e3:83:
a4:e0:6a:77:d3:45:8c:e8:7d:e9:f9:7c:f7:f3:fa:c9:a6:71:
88:17:48:24:ef:24:97:4b:45:df:99:9c:f4:eb:35:89:cf:59:
a4:82:5b:ae:b8:79:57:47:5a:9c:58:35:75:89:c9:35:0d:21:
16:1b:d9:8e:cf:7b:2e:ba:d4:7e:8b:f5:9b:7b:35:30:95:e4:
f0:df:f3:02:5f:9c:13:25:47:92:15:69:89:29:15:bf:a3:e6:
fa:7e:bd:78:d0:35:db:1b:e4:7e:e3:78:02:6b:97:ff:db:50:
1b:3c:13:f2:9b:e0:98:d6:b4:4d:3c:a0:1a:c5:fc:db:13:82:
8c:65:b6:dc:d4:74:99:11:f0:ef:5a:c7:b8:88:20:1c:f5:af:
a8:84:45:c7:79:5b:48:7f:7e:87:ef:e1:92:7e:e0:c5:f4:11:
db:3d:3c:b8:c3:2a:bb:ec:39:34:99:e1:96:56:ea:97:b2:01:
5a:ee:c9:dc:dc:82:33:47:7e:74:9d:43:d9:af:64:23:46:6b:
d8:b0:4a:c6:36:56:09:06:6d:10:a2:dd:19:77:84:b0:23:f0:
21:89:a8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:08:50 2025 by rpki-client