Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: 7Fy/IGhTlapuf8/gKhA+4Gbpnfsw4LSAzHPgYD5otIU=
Subject key identifier: 79:F6:0F:9E:71:1F:FF:70:E9:D6:63:A6:19:EB:CE:43:BD:A1:93:C7
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 0197B77CD241D35891C7583C6E451AB83124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 094F
Signing time: Sat 28 Jun 2025 17:01:40 +0000
Manifest this update: Sat 28 Jun 2025 17:01:40 +0000
Manifest next update: Sun 29 Jun 2025 17:01:40 +0000
Files and hashes: 1: 11w9K2dCR0A6XsEVx-Vg9m7G5bM.roa (hash: hj3QFv3Y2FaAu9Oijuk6KKEMBTD9UQTUqjejPr1gs7c=)
2: MR9ZuC-IL_jZ4767dS-IkZgCrJw.roa (hash: Vi7lFCDHTrpEyk68a6k87cSkUHM4wyPXzIO5RtGzU1U=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: HgbRh82OxlAgkYmZNigNis1QwsOpgCPQMg9TPn9rc5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d2:41:d3:58:91:c7:58:3c:6e:45:1a:b8:31:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Jun 28 17:01:40 2025 GMT
Not After : Jun 29 17:01:40 2025 GMT
Subject: CN=79f60f9e711fff70e9d663a619ebce43bda193c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:1a:15:8b:32:dc:b9:39:47:74:df:42:57:
c5:72:4f:61:e1:26:7b:1a:43:c9:a3:65:a6:ce:43:
75:ad:b8:a1:5e:10:f2:ce:91:47:28:66:f3:79:bc:
bf:23:37:f1:40:1a:7c:0c:62:1e:bc:04:0d:13:ee:
5e:ed:a6:94:ac:fc:66:d3:fc:05:05:e2:de:b0:81:
65:e9:79:ee:aa:8f:5d:f2:c2:98:88:0f:63:2b:1b:
01:d3:cd:a5:9f:3f:a9:67:a4:97:78:9f:2b:3d:55:
c9:1b:66:4b:be:b0:88:2a:34:10:ec:a4:6a:26:29:
ae:df:4e:eb:08:d6:4b:c0:d1:5a:e7:fa:b2:d6:20:
27:de:7c:46:f7:b7:74:14:6a:2d:c8:4b:0d:94:2a:
cb:74:2c:01:ea:36:6b:da:d2:c7:07:38:46:f0:6d:
ae:d9:15:44:d3:c3:43:e6:43:e9:cd:0c:ca:25:5f:
83:08:dd:43:e7:5d:51:66:84:a7:1c:2f:cd:e7:6a:
8e:60:57:14:7e:6c:64:68:8a:52:5b:72:6d:c3:33:
89:91:13:eb:ed:9f:a6:f6:84:66:68:4a:08:c7:97:
9a:24:82:f1:50:ce:a7:ec:a9:e4:33:a2:9c:e2:15:
1e:6d:70:16:49:c9:77:05:61:89:a6:1f:6b:fc:1e:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F6:0F:9E:71:1F:FF:70:E9:D6:63:A6:19:EB:CE:43:BD:A1:93:C7
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:31:6a:8f:cb:b6:91:02:b9:d5:f8:0d:a3:80:20:6b:e8:ca:
d5:56:dc:d2:29:1c:40:ce:77:f4:41:cc:f0:62:e3:8d:20:e2:
83:e6:35:af:c5:fe:60:14:a4:cd:76:3f:4d:c3:dc:f1:8c:c0:
5f:63:b3:5a:e6:fc:db:80:d8:84:9f:a8:e3:f0:4c:f3:9e:c8:
3d:33:03:d6:a1:df:a2:e6:30:78:e2:f2:52:d7:ee:2c:f5:c4:
16:26:a9:5c:30:55:7e:a9:e0:e2:59:52:50:13:67:10:c8:b0:
b3:52:7f:ba:9b:7c:38:51:ba:71:3b:e6:60:a7:e5:79:47:56:
83:96:ac:db:9d:80:78:a4:1b:b8:c8:04:a5:0b:a7:12:e7:17:
30:89:80:aa:be:af:2f:1d:09:f4:6d:14:9f:3a:f8:8e:8d:7b:
f0:d5:43:47:f2:5c:e4:d9:49:3b:b4:b5:ba:8e:70:02:7c:8e:
43:63:d7:a8:c1:ef:9d:e1:4d:c3:9b:83:a7:89:df:f2:db:d0:
79:9a:cf:3f:0c:68:fb:02:8b:f8:72:db:e5:b9:25:ea:c5:4d:
d1:df:2d:8b:fa:7f:09:65:a0:8c:e6:79:b9:96:18:c6:22:56:
34:9e:2f:75:66:e1:41:ab:6a:a4:40:89:13:38:57:b9:5b:1f:
2d:da:8d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:17:27 2025 by rpki-client