Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
File: IwWuBiEvPC-PVzoLVJJEHljyHE4.mft (raw, json)
Hash identifier: kPycykptAEQ/+EX2JkQ/hsChQw/H9ymogB9zk04M/9Y=
Subject key identifier: B8:A4:4A:D1:6B:48:56:B0:FF:52:0C:70:82:2D:4F:DC:D4:7B:D2:2E
Authority key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
Certificate issuer: /CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Certificate serial: 0197B6A23CCA847232804A7C7D4B79EB9D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:54 +0000
Manifest this update: Sat 28 Jun 2025 13:02:54 +0000
Manifest next update: Sun 29 Jun 2025 13:02:54 +0000
Files and hashes: 1: AYkoB-e1MzcctAIB25MUBAI3Gw8.roa (hash: RhXb3K21xkSfp4wHDHnklvRvJi1oEc1FzHYwM8s92WA=)
2: IwWuBiEvPC-PVzoLVJJEHljyHE4.crl (hash: rcYPMm4M9HqLaab9mGxLf7y2toyhcJToe8YkgJO5TPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:3c:ca:84:72:32:80:4a:7c:7d:4b:79:eb:9d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Validity
Not Before: Jun 28 13:02:54 2025 GMT
Not After : Jun 29 13:02:54 2025 GMT
Subject: CN=b8a44ad16b4856b0ff520c70822d4fdcd47bd22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:45:0f:f1:d6:3a:89:c4:22:05:e0:da:0d:
54:9d:2b:9a:49:3f:2c:04:59:d5:9a:21:5a:11:65:
1c:59:9c:bf:81:4c:72:6b:08:8b:4c:ca:1e:8c:b7:
88:67:54:28:43:3c:52:5a:68:68:bd:91:b1:bd:0d:
8d:da:0f:e1:f7:52:c0:54:ce:c7:24:3e:a7:63:58:
69:76:f8:20:6f:ad:9b:a6:01:62:3a:2c:39:28:00:
e6:f9:2f:2f:b3:83:26:88:a9:8f:8f:d5:ea:be:c1:
8b:bc:1b:23:e3:93:76:d7:9a:6b:99:ac:f8:dd:d9:
34:0d:3f:80:75:62:d2:83:02:33:aa:f2:d0:b3:77:
9e:04:33:0b:d1:58:7d:80:48:f8:db:7e:25:ac:99:
70:03:15:78:9a:b4:e6:fe:09:b5:01:90:c6:5f:c3:
b5:13:25:ec:8b:fe:3b:a2:17:13:c7:94:37:19:e6:
fa:75:95:d0:e3:95:bd:91:86:a5:2e:09:33:ab:2b:
86:0e:4b:56:1a:ba:eb:b6:c8:c6:45:11:a4:7c:9a:
97:37:ba:28:0d:52:b1:4e:8b:6e:78:81:56:82:70:
6d:59:ea:57:14:8f:af:f2:4a:07:a2:e0:da:9e:2f:
24:ed:e8:73:96:ff:03:c8:a0:30:ad:89:73:a5:e1:
a8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A4:4A:D1:6B:48:56:B0:FF:52:0C:70:82:2D:4F:DC:D4:7B:D2:2E
X509v3 Authority Key Identifier:
keyid:23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e0:5a:2f:e0:9e:a9:c0:ec:80:a9:72:68:12:5b:e2:c7:d8:
c7:55:c2:77:98:71:ec:dd:23:c2:65:83:64:02:83:f0:0f:80:
b0:ea:e9:28:e0:79:18:ec:1f:6d:bc:c9:a7:99:b6:27:a6:2b:
55:40:ed:8b:2c:2b:1f:27:0e:bb:25:ff:aa:a1:30:8d:d8:20:
20:5d:da:7b:47:a8:ab:4f:0e:72:84:5a:1c:db:15:32:2f:de:
46:41:e6:ef:16:6b:55:6e:27:63:55:b2:f0:5d:e5:ae:9c:1e:
40:66:cd:a2:1e:c1:f3:5a:41:81:14:5e:4c:74:90:62:a3:83:
48:c2:28:20:89:0f:76:8f:b4:6c:05:aa:ba:7a:aa:e1:a3:7d:
ab:50:b1:61:e7:f9:c1:86:49:49:3d:6c:87:63:49:a0:de:6d:
34:8b:11:74:06:10:5d:5d:f1:13:27:d3:6d:2a:e7:43:cf:d4:
8e:c9:19:8d:84:56:ea:b6:12:7d:29:88:61:5c:00:9f:7d:80:
1c:39:d4:74:8c:8c:1c:45:1f:8e:50:ff:73:35:ff:11:51:f0:
05:5f:0f:b4:63:0b:e3:36:53:d6:22:15:2b:59:ce:29:fd:d0:
29:b7:62:c0:ae:98:7a:02:3d:00:c3:5e:b3:90:a5:e6:cd:c8:
da:86:df:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:46 2025 by rpki-client