Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier: +9TV1P8NjRtuj+Pt12hrBZwxgl/3UqmHULiYWebQD98=
Subject key identifier: 75:24:53:9D:65:18:74:6D:54:39:A3:1F:59:C8:62:81:02:E5:0A:75
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 0197B6D7B71D6E1A5BE4690AB0675CAC97F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number: 148A
Signing time: Sat 28 Jun 2025 14:01:19 +0000
Manifest this update: Sat 28 Jun 2025 14:01:19 +0000
Manifest next update: Sun 29 Jun 2025 14:01:19 +0000
Files and hashes: 1: 1KLC3gBk4V8UlL1q34VPnUxHzZY.roa (hash: PpTqyE9jhdplaM4jeC6bew/Mkzc7lRGupafDYfql5k0=)
2: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: 7lKj2jFmoDfn1oKtrdNJd9ie/9YRWRw638Tq0pY/w44=)
3: QdEJ7zpCJnQlkbu72Bn_JyCb_EM.roa (hash: uicaL7GuC1Mghzq3VpHhej/MKa/9KriBzrxlFVoCpcc=)
4: WylnrO-wU58E26AefCAQ7nrb79w.roa (hash: y1OWdCLTeRgES3w6dtbyOUz1ZW2NZGMx2qqGlzUOOl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b7:1d:6e:1a:5b:e4:69:0a:b0:67:5c:ac:97:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Jun 28 14:01:19 2025 GMT
Not After : Jun 29 14:01:19 2025 GMT
Subject: CN=7524539d6518746d5439a31f59c8628102e50a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:64:0e:69:63:da:5b:02:9c:9d:bc:49:1c:
b5:10:d0:56:5f:5c:c6:b3:c6:d6:82:55:1f:de:37:
ae:fd:08:3b:1c:31:7a:79:6a:bc:63:2a:62:fb:69:
af:f4:99:05:ff:56:2b:4c:26:35:d6:cc:0a:b2:65:
a3:2f:5f:e8:ec:82:73:43:5d:2e:67:ee:da:f4:19:
b1:f6:8b:ae:31:3d:b7:ec:49:6a:00:c6:7b:3d:f1:
13:d3:b1:e0:43:4f:12:cb:02:63:6c:f2:78:5e:ee:
82:c6:94:01:e4:87:c6:78:30:07:f7:f8:ad:65:37:
fd:78:d2:c9:b3:7d:93:6d:13:67:6b:03:4d:7b:05:
91:4a:1d:f1:bf:cf:0e:e3:55:60:fc:ac:3c:13:7d:
23:08:fa:aa:31:a0:8d:1e:91:ef:a2:08:79:c5:1c:
76:6a:c0:ce:22:ca:65:c0:43:79:ac:27:7a:1c:cd:
97:a1:67:72:0d:90:f6:9d:e0:21:5a:6b:98:57:ee:
85:1c:8b:f9:e9:a9:9e:ab:59:80:fb:a8:c3:17:19:
7f:e4:3d:f5:cc:f9:24:49:f3:bf:3f:b2:f7:b4:1c:
9b:4f:2a:d3:14:7a:cd:1e:a2:6f:b8:10:9f:f4:f0:
67:01:73:af:fc:6d:eb:19:b9:14:0c:c7:53:b2:05:
a0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:24:53:9D:65:18:74:6D:54:39:A3:1F:59:C8:62:81:02:E5:0A:75
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:28:28:8c:77:3f:90:15:dd:75:cb:50:86:b7:d5:06:5c:f2:
22:2c:ff:c3:5f:40:00:48:a6:af:ae:d0:79:c6:24:02:c1:3c:
4f:e7:6b:bd:96:9f:0c:78:c8:25:26:12:36:fe:58:35:78:1a:
35:e0:e9:99:51:ee:8d:cb:bc:2c:a5:39:6a:87:f6:c8:cc:f5:
b1:c7:2b:8d:a2:3f:1c:87:57:bd:5a:56:d5:c8:87:56:84:f9:
68:54:6e:4c:33:0b:28:5b:fd:80:bd:cf:46:49:4d:66:d6:64:
02:37:70:ea:d8:7c:60:6c:08:7c:1f:7c:e9:a7:9b:81:98:68:
53:67:1e:e0:8b:62:99:b8:09:8f:23:69:15:ed:dd:a7:ab:56:
cd:2f:ac:15:69:3a:2c:c3:63:64:8d:1d:10:1c:3c:b4:c0:a2:
13:6a:b6:ec:8f:4a:c1:10:28:df:4b:02:56:05:f3:4c:22:2e:
1c:eb:9f:30:72:06:52:83:b7:5a:31:81:ef:8f:ca:88:7c:dd:
5b:17:09:2b:78:f0:7f:fb:6e:0c:b1:ef:ed:24:e8:ac:80:48:
9e:12:02:20:91:49:4c:f5:ac:16:37:bc:fc:10:67:af:25:98:
4f:50:c9:a3:e4:d4:01:ee:f7:bd:56:9b:e0:16:51:88:e3:7f:
85:11:66:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:55 2025 by rpki-client