Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
File: iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft (raw, json)
Hash identifier: azfOrqkE9oOVY6u4iT5pEN21TKcjjwU6eXhTUvWsXfc=
Subject key identifier: B9:1D:A4:C8:79:13:9B:01:AB:5D:7C:2D:44:23:4D:95:E6:F0:E4:1B
Authority key identifier: 8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
Certificate issuer: /CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Certificate serial: 0197C1926BC68DCA5F6290F2EEDFC40EB716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
Manifest number: 0E8A
Signing time: Mon 30 Jun 2025 16:01:27 +0000
Manifest this update: Mon 30 Jun 2025 16:01:27 +0000
Manifest next update: Tue 01 Jul 2025 16:01:27 +0000
Files and hashes: 1: 03mz0LQjzt1ORtulSs8-RgKcMnM.roa (hash: o7HH4upfGHhmSB89uCr8oSYNHbC8ZdA+S7MeD1sbYe4=)
2: 2Qr14eAD37nuU_5fo7_UeplXIWU.roa (hash: usgUNw1aFsserU4Vh7SHZUsSrOPQTJ2Wa8CALhVnFWI=)
3: XcS7NtVySUtUzIKZEZ4PM2dCvo0.roa (hash: RI3/B49k5u7aP42xJ7PCHqmPzqodpebWnjl4/ch5Tn4=)
4: iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl (hash: zw/dFUALmgWQx76dex3sJlqBeLiH2ugx46eLBHdlG8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:92:6b:c6:8d:ca:5f:62:90:f2:ee:df:c4:0e:b7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Validity
Not Before: Jun 30 16:01:27 2025 GMT
Not After : Jul 1 16:01:27 2025 GMT
Subject: CN=b91da4c879139b01ab5d7c2d44234d95e6f0e41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:a4:c8:1c:83:5e:de:11:65:a2:f7:6b:c4:
8f:30:c3:ca:32:80:0e:69:b3:8a:21:6f:db:89:6a:
c0:44:e5:32:d6:17:5f:a7:1a:e4:5e:85:98:53:a5:
85:91:88:56:4a:78:fc:50:cd:b3:fa:99:cf:00:76:
cb:6f:19:32:1d:f2:07:33:8f:54:ff:0e:5e:21:dc:
3e:eb:4c:da:7f:09:47:27:c3:38:f0:84:93:51:26:
07:4d:1b:c5:ed:04:f2:ff:1e:5e:1c:35:53:27:8a:
63:15:5b:02:60:43:d3:58:ff:b7:d7:c1:7c:c1:0f:
d7:a9:43:89:c7:f5:39:13:40:2c:b4:31:b6:5c:17:
46:b8:47:0f:ba:37:89:08:fe:23:d1:d4:be:bd:bb:
2b:01:07:ac:11:83:ad:ca:5e:c6:19:06:9a:f3:78:
d9:27:13:ff:f1:89:00:8b:4c:cb:89:62:b2:10:3a:
a7:ad:ca:2f:17:40:da:42:12:ca:85:15:12:67:33:
b1:13:35:c9:ee:95:bf:ee:71:10:7a:2b:12:1c:60:
e4:36:77:20:1b:e5:6f:fb:3f:8f:06:96:fd:b5:b0:
0f:72:5d:6b:64:ed:95:de:5c:8a:53:f0:c1:3d:4d:
1e:97:32:0b:c6:e7:3e:4a:7c:13:ce:3c:d6:04:b2:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1D:A4:C8:79:13:9B:01:AB:5D:7C:2D:44:23:4D:95:E6:F0:E4:1B
X509v3 Authority Key Identifier:
keyid:8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:dd:93:cd:0f:5a:4f:fb:d9:1d:f8:ed:9e:80:f4:be:39:83:
7d:9c:55:af:93:7f:be:0d:22:a8:b4:a6:3a:e8:eb:85:73:9d:
e2:b7:b7:9c:de:c1:32:4f:ca:67:3f:ca:f3:52:87:eb:63:f4:
e0:16:fd:c1:36:ec:ca:42:6f:38:09:53:84:56:2e:24:4c:ff:
15:1c:ec:73:2d:66:35:16:7a:c8:67:db:f3:ae:83:95:7a:11:
b1:06:34:a9:82:43:9e:7b:8a:7d:dd:2c:51:3e:9f:4c:e0:2d:
d4:69:9b:12:6e:94:ef:d1:31:3b:11:b9:02:fa:d3:0c:57:84:
80:2a:05:31:a5:41:e0:fc:75:f4:6e:dd:1d:18:65:fa:c5:e3:
44:aa:af:fd:96:b1:10:af:c7:1d:6f:8b:10:d4:a0:8a:1d:a3:
cc:3f:27:8b:c4:c9:b6:b0:8a:3f:55:c2:13:28:a3:ce:55:4d:
52:4e:3d:20:d1:00:a3:e7:3b:e3:95:de:a7:11:2f:4a:2c:04:
a2:66:18:1c:27:e9:1a:19:85:28:99:13:26:1b:48:72:2b:84:
0c:2a:cc:8c:81:4a:7a:d8:15:52:8a:40:7d:cb:ad:33:1f:ec:
7f:f3:5f:1a:3e:b7:b9:58:5a:26:ec:3c:c3:68:e3:54:70:27:
0e:17:bb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:57:08 2025 by rpki-client