Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: VKW24peASVRmI1PZmv0cuCGzeES1AZh/EnPK7P73pJw=
Subject key identifier: 52:F0:F8:82:4F:A8:51:B2:16:AE:44:C6:53:F4:0D:BB:3E:B0:2D:91
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 0197B70F41671409372BD48D27150FB3473F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 14FB
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: 6LoGTUsxl6ngR0px_QWDZqMrDqY.roa (hash: +ceUAHPEc+ox8TyB65QxlBTF9+xyruiKTwNKbUkFhfY=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: WjUUsbmoyobnWGFNOwlUhnFqCNGMpznaDDgD7U4F734=)
3: kOrxmXRMoh0iVhgCI3h3ap9gzjY.roa (hash: UuZBkN7yMoGzAAanQfroluxDy9hZk4vWUEry2ogeBOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:41:67:14:09:37:2b:d4:8d:27:15:0f:b3:47:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=52f0f8824fa851b216ae44c653f40dbb3eb02d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:60:35:e0:78:b8:5a:96:d7:4f:07:db:5c:
46:3d:20:0f:0f:bb:3d:7b:63:df:c8:50:70:18:e0:
59:cd:31:70:6f:7c:96:40:83:4c:c7:34:e0:95:ad:
92:3f:a0:a9:2b:82:10:f0:8f:fe:27:9b:4c:5e:d4:
1e:74:86:76:09:2f:f7:c0:e0:a7:3f:91:17:1f:c8:
eb:70:4b:34:00:d6:51:3a:7c:2f:35:bb:6a:db:41:
dd:60:69:db:d9:48:99:65:04:04:69:be:86:f5:5e:
da:4b:66:47:4c:01:c1:0d:af:b1:11:c8:c4:41:df:
7d:bf:6c:b4:2c:94:33:12:fb:9a:44:c4:08:ef:78:
ef:fd:bf:cb:b2:ae:cf:bc:87:98:e5:0d:45:a1:b5:
36:7d:72:75:43:fc:20:cd:3b:39:22:3f:2a:1b:ed:
e0:37:e7:c1:e8:4b:83:7f:37:c4:53:55:0c:50:b4:
ce:ef:72:f1:5c:47:08:7f:e4:c0:f9:a4:31:db:73:
d0:de:d7:81:b9:6c:31:42:f7:4c:c8:6b:18:d3:d9:
85:60:f2:0b:77:34:46:13:c6:4d:c5:c9:b1:ed:f1:
f2:e0:a1:1a:74:d1:79:ec:24:9a:67:94:cc:b1:57:
b4:89:bd:d2:9e:4f:27:dd:07:8f:a6:ee:a1:ec:78:
7f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F0:F8:82:4F:A8:51:B2:16:AE:44:C6:53:F4:0D:BB:3E:B0:2D:91
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ea:7e:9a:2b:cf:dd:0a:d8:57:2c:83:5d:06:94:a1:75:09:
c1:cf:e0:06:76:0a:80:e5:b5:c3:c2:38:40:a0:db:a9:6e:72:
86:d6:b0:e6:da:c1:4c:b5:97:70:0e:fc:3c:b1:78:a5:d3:de:
1f:bc:ba:e2:c8:39:61:12:a6:93:74:6d:bf:53:58:ff:c5:5f:
10:0e:08:9d:52:7d:46:db:52:ff:01:a5:fa:cb:f3:2e:53:f4:
26:d9:04:4b:ba:9a:ca:05:4a:d8:e5:06:69:af:e0:60:94:58:
59:b4:ad:54:7d:79:b5:ee:d0:f2:5e:b5:d6:9b:29:e7:d8:59:
df:9b:79:08:a7:9d:9f:be:dd:46:cd:43:30:b7:46:2d:4c:1d:
c4:cf:6c:c4:be:99:61:2b:a8:93:8f:e7:1c:fa:21:f0:8d:74:
bf:f9:16:1b:dc:77:a9:77:42:66:1b:6b:f8:c3:1d:84:d5:63:
c5:da:39:33:18:2e:a3:88:3d:18:fd:1c:c0:00:f6:fe:c6:d1:
65:ff:7a:36:a5:74:6d:69:58:ad:6d:2e:51:6d:4d:31:c0:9c:
26:02:65:66:6c:dc:e3:56:07:75:b4:fa:11:1f:83:75:bd:58:
84:32:fa:7b:1f:b0:31:0d:eb:d6:b9:6f:88:68:0c:8a:20:e8:
ec:ef:cd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:26 2025 by rpki-client