Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
File: IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json)
Hash identifier: 7UZSm+/cd4wt2fQh6z70PlPUNm1cQuqlPHmQ/Sp2/Io=
Subject key identifier: E2:BC:61:20:ED:68:70:4A:29:3E:E0:F4:52:FB:95:21:0C:97:92:51
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 0197BAEB04AD2649E987EB08D5F38E35B384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
Manifest number: 08E4
Signing time: Sun 29 Jun 2025 09:00:53 +0000
Manifest this update: Sun 29 Jun 2025 09:00:53 +0000
Manifest next update: Mon 30 Jun 2025 09:00:53 +0000
Files and hashes: 1: 0aVULxHFqdDfNnT5CqmJEz5qebM.roa (hash: p1YUyJePrroRXqe7gzHmSFVR4nwW1EVYKUdr7JKm3tY=)
2: 1x2QkjrjfmH7457XFfnRPIPsvrU.roa (hash: hdLqZqotCS5NMzBAHyICUCVoucf1opCMX8HxfI3Xt9w=)
3: Dc1SxW96IAQ3f2snIBmens7GV0U.roa (hash: A68NloNFUVZ/1yLMaTnJ5sUcnw8LpIIqTLsAe9oPGuQ=)
4: Hclo7mgAV-Jk6Qp5sVlZMDADheQ.roa (hash: cVUhTfbeGPClCYhj8aCdhEzcQl8l864NJzclgxFTC+Y=)
5: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: 51nl/poRuMabszCkElIc3GPeDE/RlU5xUqM2Nca12ao=)
6: Ku4DjWMj_wrBqXvp8QwLCV7LvMQ.roa (hash: MiHDGBqhLXLE6nmzkue9evydNoK6FMJwJm/pNx6ZNnQ=)
7: ajmq5QdlQvXrCBRMjUs67yP9AmI.roa (hash: mQ5XjE5gzuzrTdkByBU3/meXRrw3VOANPbjnntSYJ74=)
8: iIyJKjInlinbrFoxMvyP7cHrL18.roa (hash: jppb7YCDugjMDFMLhWTY9NbjBHwSDw8mYabJJeuiwkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:04:ad:26:49:e9:87:eb:08:d5:f3:8e:35:b3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Jun 29 09:00:53 2025 GMT
Not After : Jun 30 09:00:53 2025 GMT
Subject: CN=e2bc6120ed68704a293ee0f452fb95210c979251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:c5:6f:42:35:0f:de:b4:93:50:66:87:5e:
85:f9:96:32:5a:73:97:78:6a:18:77:84:14:32:99:
b4:0f:f5:6b:01:f8:13:71:16:b0:23:9f:79:7e:51:
d6:ad:dc:27:e4:ce:ec:bf:d8:01:ca:c1:46:b2:51:
61:be:ec:67:81:6a:d3:c9:17:ab:0c:5a:67:50:5d:
0c:68:a6:fa:ea:25:10:17:93:26:fe:8f:2b:d3:4b:
86:f8:35:f5:f0:ad:85:fd:f2:75:c8:0b:c0:b6:53:
2c:3b:76:0a:22:33:55:1e:8d:8a:0d:d4:cb:b8:ef:
81:0c:b0:60:3a:ed:3e:6e:ad:a4:22:41:bd:99:c1:
75:78:11:29:f1:73:e6:e2:da:4e:2d:d4:4d:54:1e:
65:31:b8:7e:21:1b:8a:66:6e:55:a0:fc:80:40:cb:
35:de:1f:45:00:6c:04:31:78:74:d1:1c:bd:4e:4c:
d8:5a:56:10:59:41:38:02:f8:4d:e9:96:50:51:f4:
52:0f:88:80:fa:cb:7e:8b:f6:54:8a:fb:f5:dc:26:
54:63:c4:0c:98:fb:de:83:30:f3:8b:90:d9:32:27:
67:16:65:04:a9:9c:34:d7:0b:03:8c:f0:8e:ca:6c:
c5:a6:5c:ec:48:8f:3c:09:6e:9e:d3:87:8f:c1:4b:
54:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BC:61:20:ED:68:70:4A:29:3E:E0:F4:52:FB:95:21:0C:97:92:51
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fc:6b:49:87:4d:67:8d:3b:f2:af:6f:ae:60:2b:4b:f2:6b:
93:da:61:cc:95:2c:09:84:53:43:4d:34:11:b2:26:a5:3a:ce:
17:14:a2:d5:f7:d6:c3:73:95:f9:62:64:07:71:c6:de:5e:3b:
ce:31:c8:03:59:5b:37:31:65:ee:03:21:c8:b6:27:b6:35:09:
00:1e:5a:5c:78:c7:d0:d3:d9:22:e1:fb:b7:b6:82:ad:02:92:
b3:38:53:69:0d:2a:50:44:44:86:35:1b:15:5d:b3:f7:4e:27:
85:c7:03:a4:fa:61:4c:75:f7:92:4d:cc:23:04:b8:ef:00:f6:
3c:90:a3:cd:08:ab:e8:eb:b2:a8:d9:4d:c5:ab:91:a9:e6:ac:
ce:8b:67:44:5c:85:a5:2a:c2:c3:bb:6a:1e:ff:6b:e3:40:b2:
c5:16:33:3e:1d:8a:d8:6d:7a:34:d3:18:86:33:b0:36:bb:03:
03:82:c7:83:f8:0f:ac:e6:d1:42:6f:77:55:28:f3:0a:53:2c:
3f:46:48:c5:4b:ee:db:f2:e8:ce:02:a3:89:fe:6b:9b:3b:b4:
67:52:7c:f9:2c:4b:ac:87:25:8d:78:0c:4c:02:e8:79:5b:a1:
b8:19:57:ed:0a:46:b7:15:f8:cc:b0:eb:97:09:ca:3d:7f:8a:
ea:e6:01:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:25:02 2025 by rpki-client