Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
File: iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft (raw, json)
Hash identifier: UmYREhJamRqmAbzLEmW984yqbcIgcl0oEJMLwtZJYwI=
Subject key identifier: E8:07:07:30:2A:51:DC:73:31:E9:F3:C2:D8:FF:DC:80:78:91:95:78
Authority key identifier: 8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
Certificate issuer: /CN=8b03dca76319903152f246e05c069fd1a1db5c59
Certificate serial: 0197B74581321EDF2BCF7E05E932EF77FE63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
Manifest number: 06C0
Signing time: Sat 28 Jun 2025 16:01:14 +0000
Manifest this update: Sat 28 Jun 2025 16:01:14 +0000
Manifest next update: Sun 29 Jun 2025 16:01:14 +0000
Files and hashes: 1: 7M8D3IxMWjzAgVSAuyFX2gLMxAs.roa (hash: MD3KP2LMgWTsm6lhsmms5WwgB8xDS3rVO74n7Xs0hs0=)
2: iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl (hash: +UfBfjeM8rXr0cg0Gh1C/lCicisjxWNuU/pd81TVzRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:81:32:1e:df:2b:cf:7e:05:e9:32:ef:77:fe:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b03dca76319903152f246e05c069fd1a1db5c59
Validity
Not Before: Jun 28 16:01:14 2025 GMT
Not After : Jun 29 16:01:14 2025 GMT
Subject: CN=e80707302a51dc7331e9f3c2d8ffdc8078919578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:71:b0:39:9f:0c:3d:a1:2a:0b:a5:85:da:
02:41:65:9e:40:ae:7d:ae:b7:b7:44:ae:a9:85:69:
02:e1:49:0f:e2:1f:01:f2:17:ab:5b:99:51:f6:0b:
9e:c4:cc:5c:b1:e8:33:48:d7:11:bb:7b:96:19:06:
b4:77:ec:08:47:44:8e:cb:98:19:8b:f9:94:6c:b3:
aa:04:70:e6:9c:e4:60:55:a7:70:07:8c:ba:25:fe:
65:b9:40:f0:2e:86:6b:f7:f2:0a:43:04:49:ad:5a:
8e:fb:22:18:b0:c1:7e:5a:00:f2:06:19:d6:c9:c3:
d0:ab:af:fb:bc:e1:a7:33:de:20:5e:f6:65:1f:12:
88:e0:9a:29:4c:01:8f:5a:45:72:d8:c5:c1:aa:be:
1a:6a:13:64:16:26:60:e0:5d:ef:c1:67:64:ac:2b:
67:c8:56:b0:a5:4b:e1:4b:a3:60:2b:f2:27:4b:dd:
f3:bf:6c:76:8b:d2:ac:18:3a:d2:8d:74:e6:12:bb:
d4:e0:d7:d1:8b:35:69:c2:0e:5f:ce:59:f0:f7:79:
2b:74:fc:ad:a2:c9:a7:b9:d7:5c:e5:d7:56:46:f8:
f1:71:42:cf:64:d3:fc:24:18:16:ee:7e:82:4f:fa:
7c:34:d2:82:ef:18:b3:9a:0e:61:e2:ab:c8:a8:05:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:07:07:30:2A:51:DC:73:31:E9:F3:C2:D8:FF:DC:80:78:91:95:78
X509v3 Authority Key Identifier:
keyid:8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:67:f3:bf:ce:26:ce:6b:1e:5b:3d:51:5f:d5:ab:e9:60:64:
41:d3:a0:23:37:61:aa:c0:c6:03:6d:4b:b4:2a:dc:85:b1:b0:
38:5f:6c:b3:8d:9c:97:c9:01:8d:72:c1:a9:dc:99:35:bd:4a:
32:f8:f7:ee:02:80:66:d3:48:95:8a:f5:ef:50:ce:78:49:92:
0f:02:18:60:69:5e:2e:26:fe:70:d3:0a:e1:fa:20:b4:7f:1b:
5e:39:ce:06:93:98:ba:83:66:ec:ca:ca:50:56:da:75:82:26:
a5:d9:d0:67:26:b9:3f:c5:03:7b:50:4b:ae:85:2e:4c:83:98:
f6:bc:f0:fa:52:fd:35:82:94:4d:58:70:75:22:ba:e5:56:09:
1f:08:f0:f1:85:6a:35:03:eb:4c:07:5a:39:7a:cf:ad:80:21:
7b:70:70:9a:6a:df:b3:3e:5f:31:b0:01:77:2c:cb:96:50:3f:
d7:0c:81:ef:7e:3f:2e:8c:60:e3:9a:85:9b:62:da:8d:01:24:
f3:d9:a4:fc:90:49:6a:2b:10:9a:0f:89:9d:6a:42:6c:86:97:
6a:b8:e0:3b:52:25:15:45:97:61:c7:56:ee:55:7a:46:9f:dd:
67:24:da:c3:c8:de:49:24:74:e2:21:de:46:35:35:13:97:db:
59:6b:65:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:25 2025 by rpki-client