Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier: GLfBNDynnv+wkSiUeuqAuWaDA/gJMYYMWASVi9o2i8I=
Subject key identifier: DA:CC:A2:A4:F5:E8:47:36:11:16:9F:7F:15:1A:89:E9:92:F1:24:D2
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial: 0197B6A0CEEF644DC7C9893C1145B3316218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number: 156F
Signing time: Sat 28 Jun 2025 13:01:21 +0000
Manifest this update: Sat 28 Jun 2025 13:01:21 +0000
Manifest next update: Sun 29 Jun 2025 13:01:21 +0000
Files and hashes: 1: TuA6dq5RUfQK0g-nhGPwelxAp8s.roa (hash: A068hT4+Hwiukpw4NAI0ekcWki3f2qgAy0smH/qbl44=)
2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: RTEWdAYuqnaoyccjl5rT53tb+o4maoKmINybv0gzsXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ce:ef:64:4d:c7:c9:89:3c:11:45:b3:31:62:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Validity
Not Before: Jun 28 13:01:21 2025 GMT
Not After : Jun 29 13:01:21 2025 GMT
Subject: CN=dacca2a4f5e8473611169f7f151a89e992f124d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:0a:21:d1:9c:9b:25:6a:4a:66:96:17:42:
50:82:f1:f0:97:e2:a7:32:44:f6:d7:a0:a0:cb:1d:
35:62:5c:79:d7:a0:db:bb:04:77:a1:c1:cd:9b:32:
07:06:e2:58:ec:ea:f7:75:33:88:8c:b7:3a:83:a3:
48:78:8a:f5:8f:50:2b:6a:d9:39:01:cc:f9:60:70:
8c:ed:0d:75:eb:05:a1:7f:95:12:39:b8:b2:97:18:
ee:ef:13:70:3c:03:08:99:de:d4:5f:e0:3f:ae:33:
7d:1f:0a:6a:b1:4c:48:e9:bf:25:8a:06:c1:12:07:
df:e5:da:a4:a3:64:66:38:ee:ea:ef:8b:50:d9:45:
3a:69:f7:ac:f1:cd:97:1a:64:a0:fa:74:ed:c7:c0:
b5:ae:ce:98:40:15:4b:e6:5c:78:87:72:ff:92:a1:
3a:13:89:20:8c:b6:c9:79:3f:fc:a3:1e:91:ab:aa:
ab:68:a3:88:d2:c7:0e:1a:9e:41:20:36:e6:d6:e0:
bd:ab:48:fa:6a:35:ae:a1:41:5b:4f:a4:8e:30:c3:
9d:5e:46:66:fd:9b:63:18:77:1b:57:78:53:33:e6:
cb:03:b0:26:44:a8:dd:67:d5:d1:4b:ad:d4:1e:b7:
ab:ea:73:d2:92:c9:24:be:28:32:5a:50:31:5b:be:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CC:A2:A4:F5:E8:47:36:11:16:9F:7F:15:1A:89:E9:92:F1:24:D2
X509v3 Authority Key Identifier:
keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5a:70:f6:cc:ea:28:c9:1d:0b:b6:1f:90:87:4c:7f:f6:20:
da:22:4e:85:f6:1d:22:4a:55:03:90:27:ea:29:2f:ca:eb:1f:
9b:94:fb:e0:ab:5e:de:bf:29:26:91:71:b5:47:1e:12:24:ca:
44:8e:3a:0a:71:61:89:97:98:e0:0b:94:bb:ef:5c:05:77:5a:
19:f3:81:23:cd:12:b2:e4:2e:cf:e1:a7:5a:d1:7a:6d:6d:36:
eb:34:4c:b6:c0:30:49:28:8f:c5:79:62:c8:64:d3:d0:2a:e3:
3d:bc:29:aa:65:7e:c9:2b:a5:e1:95:88:06:48:14:2b:6b:02:
a3:df:04:79:4b:26:a9:4a:df:b6:7b:9a:2d:14:3c:d5:9f:85:
ae:01:e2:e3:bb:29:c2:dd:e1:b0:9f:c7:84:1e:ce:bb:c2:27:
39:b1:26:87:86:e3:04:a5:a5:8e:02:d6:e4:9a:f3:54:8f:08:
16:f1:d7:63:23:6f:94:d5:a7:c2:c7:0a:4e:72:62:67:3d:d6:
5a:bf:56:bf:00:cc:29:5a:52:59:74:a1:e1:22:a6:75:f3:af:
64:04:c4:13:60:13:2a:fc:47:38:a4:b6:1d:af:ef:e5:ed:84:
45:1f:b4:0a:44:a6:02:c8:3a:f3:e1:7c:6c:bf:f8:8b:ca:90:
04:ac:b9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:45 2025 by rpki-client