Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File: IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier: 0dgk6pgYzwrR4NFlvbLtjCSvcD8z4zTZwEbcUtW3nL0=
Subject key identifier: 8B:82:49:E3:E2:38:DA:56:9A:0B:3F:39:C0:D0:2B:78:81:B6:AA:FE
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 0197B6A1EE05BB05B7FBCF2B00A22711D878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:02:34 +0000
Manifest this update: Sat 28 Jun 2025 13:02:34 +0000
Manifest next update: Sun 29 Jun 2025 13:02:34 +0000
Files and hashes: 1: 8BE15BYRjJfhZasQiCcSRq-1rvE.roa (hash: owl3mrEo7nmudL7UJFk7qfjK5dtTSEPpdF0yRa2bSts=)
2: 8pfPZSOu9OxWh0zIohg91aPGe8w.roa (hash: c5LZlJIp5DIk0u0EVUZdwpG29wBKxdLqbOnohSJsuL0=)
3: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: it9j1jYRHh3ySJIqHp1tPNlbKaqw9o0iiSjaSh8lU/w=)
4: W5_MS3jBPdXrXt2CXzKVEDSySg4.roa (hash: 5kr0YkXkQlloL0Dx58yHdS9CGeVUoXp4B0GMVprtw4I=)
5: YZdW1FTou_f-R0pbpF5XZ4Tx3hg.roa (hash: zlg3+gSw7tZCxS27EU5I1VhaiNCdA3Z7IiLzIapPksE=)
6: j5QKeuGXTRBwPGjQWWnfRFS80gs.roa (hash: Z4Hp9oqaE6vPUIIGvGUpRfdgDDW4cmfUljTJCbGbKQk=)
7: nAr5TcbaRaUgvGs6GhoEMZYw2k4.roa (hash: PsVErZ9iC+yU1AQTc2kN6DO2ltE02bbxJGF/AxC6Z9Q=)
8: qH4AOngGgCDKos4oiBE8L48PaSU.roa (hash: wAl3jqMD73juUqzGb6OKFl9PHSoZSU+evXbe0KXVLu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ee:05:bb:05:b7:fb:cf:2b:00:a2:27:11:d8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Jun 28 13:02:34 2025 GMT
Not After : Jun 29 13:02:34 2025 GMT
Subject: CN=8b8249e3e238da569a0b3f39c0d02b7881b6aafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e7:1c:67:34:19:8f:ae:a8:d9:48:46:d9:6a:
6e:1b:86:00:a5:f1:6b:5a:7e:3e:ee:f4:36:6d:ce:
e2:82:84:fc:b7:94:79:24:dd:2c:04:51:d8:f3:64:
e5:d6:a0:0b:f4:f1:08:da:7d:bf:6d:61:e4:5f:ad:
97:8e:1e:64:96:f6:11:0d:f9:ca:0b:95:5f:4e:f6:
89:b7:20:e3:6c:3f:23:4e:84:4b:db:27:9c:ed:48:
34:a5:69:41:d0:76:b6:3a:9c:2d:b0:79:14:48:3a:
ee:86:7a:cb:3d:50:3e:af:f2:45:97:81:a1:24:23:
a9:ed:d1:10:d6:38:3c:08:4e:cd:88:fc:46:33:84:
cd:ee:a7:75:41:10:7d:3c:22:12:14:58:9b:07:be:
7a:5d:3d:78:4f:3b:94:fc:a2:9e:bd:da:31:6f:2f:
90:92:89:d0:5f:21:36:66:39:4d:85:cd:2c:57:74:
7c:4e:1b:3a:8a:41:93:22:4c:0a:af:fe:87:34:f2:
ad:8e:5d:96:9a:30:c8:04:5e:06:31:df:a7:ec:59:
de:0a:1a:e6:6b:53:14:03:e1:f2:6f:05:90:90:df:
4e:5d:e5:30:a9:b7:68:41:64:ba:a3:6d:f8:2e:13:
61:db:02:d4:6e:5b:b8:2c:5a:1b:1a:eb:68:1e:35:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:82:49:E3:E2:38:DA:56:9A:0B:3F:39:C0:D0:2B:78:81:B6:AA:FE
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8f:32:1c:ff:50:3b:31:eb:41:7a:7d:14:74:7b:0e:81:6e:
75:99:dd:96:f5:f5:ce:62:b4:1e:56:0b:3d:02:3b:39:a9:ad:
0c:b2:8e:90:bf:02:e3:05:6f:0d:d0:f6:00:c6:5a:1f:a9:34:
e9:52:25:07:6f:2a:54:10:24:c2:39:ae:ae:fb:aa:6b:80:a0:
c6:0b:27:1c:19:27:77:ba:a8:34:b6:dd:1b:3d:65:d2:de:4b:
06:92:62:9a:49:77:36:9f:c3:23:bb:18:03:51:53:40:fb:b4:
81:7e:f8:af:38:71:ac:e2:b7:6f:ea:a2:09:16:17:2a:e3:73:
1a:73:b1:39:29:60:04:ed:04:1a:25:3b:bf:5d:e0:ca:a2:05:
03:a2:94:b7:b7:8d:ba:f7:74:9f:8b:84:bc:8b:ab:83:64:9e:
5f:82:16:28:71:36:61:20:10:db:b3:3a:20:f1:e2:f4:84:b5:
c7:21:0d:e1:4e:22:68:ef:ee:58:fb:0d:b1:36:f7:21:4c:96:
b2:7c:2d:f9:42:8d:53:03:02:a6:2d:78:6b:70:dd:9a:00:96:
f0:f1:6d:69:b5:e8:9d:d1:8a:ff:ef:30:ea:f2:5a:d3:2e:f5:
07:00:48:cb:2e:e1:14:02:dd:1e:53:e7:47:f9:98:8e:76:88:
71:72:ab:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:22 2025 by rpki-client