Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: n4FL4pSsxk4s8wdsVY17obdCkvWxZDuSbq4WVwmkj6I=
Subject key identifier: 5E:B8:CF:95:F8:46:D8:27:80:8A:70:9C:FF:B0:B2:64:17:B5:47:3B
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 0197B7EA47AC4C9140FF6790BF19A4C87E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 115E
Signing time: Sat 28 Jun 2025 19:01:13 +0000
Manifest this update: Sat 28 Jun 2025 19:01:13 +0000
Manifest next update: Sun 29 Jun 2025 19:01:13 +0000
Files and hashes: 1: 5-1oK7ZffFqStfo7QWXqKcGuZfk.roa (hash: ae86GvhPxW1Ea0shedYB3VtmcIvsIfxJLLLA1E/5h/A=)
2: e4U8yl2fAVY2sT3p5fbr_erY7oA.roa (hash: 2KHYehyUkqT72mAQaz7HDc/red7uQn+krX6/aXcIZtE=)
3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: wraUAPXxLVBXaYR7EGfQV/t9NJUldhuaB9Uu7x1Xi9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:47:ac:4c:91:40:ff:67:90:bf:19:a4:c8:7e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Jun 28 19:01:13 2025 GMT
Not After : Jun 29 19:01:13 2025 GMT
Subject: CN=5eb8cf95f846d827808a709cffb0b26417b5473b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d9:28:de:ed:cf:ea:fc:e6:41:7e:65:94:ae:
19:4e:d4:ee:95:d2:92:18:0c:fc:2e:7d:67:38:8d:
12:8e:66:cd:69:0a:6f:cf:27:32:cb:ee:b7:d8:5e:
08:14:5b:87:59:55:e7:b6:1b:cc:60:55:f6:0f:ad:
f7:4b:ec:65:d3:57:ab:fe:13:7e:60:19:47:4a:ff:
8f:04:2e:5d:4f:04:9c:c4:34:db:57:ab:a6:8f:b0:
dd:e8:49:65:73:96:a2:00:58:45:a3:80:8a:c4:9e:
48:bd:a9:da:20:56:f8:8d:50:13:87:19:c6:e6:c4:
99:76:f6:20:93:b5:be:cc:6f:30:c5:d7:86:1f:ed:
3c:98:2d:22:70:65:3d:98:27:a8:02:27:51:1a:4a:
d1:c1:65:ca:70:cf:29:64:08:ae:29:25:12:53:ff:
f3:76:f0:28:57:37:c2:54:97:8c:d3:ac:d6:f5:77:
c9:40:cd:0e:be:0c:9f:86:39:9e:13:8d:50:5e:d8:
00:ce:99:23:22:44:f5:0a:7a:4d:2d:e8:d2:32:5b:
b1:47:ac:37:80:fb:eb:69:56:01:44:a7:df:8e:fc:
35:46:c9:2d:32:46:30:45:63:70:38:76:0d:5f:2c:
3a:66:e9:56:98:45:41:b0:df:3c:83:e1:fd:b7:15:
6e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B8:CF:95:F8:46:D8:27:80:8A:70:9C:FF:B0:B2:64:17:B5:47:3B
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3e:d7:45:b3:fc:fd:c4:2d:3a:ae:7c:49:02:27:29:05:b0:
08:ea:f7:40:22:d3:36:c0:02:97:35:97:ed:53:ff:7a:14:83:
8c:76:54:c8:66:62:4c:3d:ec:d8:2d:e2:09:99:9e:95:00:48:
8d:db:ca:27:db:5a:41:ff:f8:f8:c2:9b:83:ed:80:f1:49:ad:
ce:d5:bd:c4:03:3f:3c:76:62:d1:1c:a6:dc:e9:db:52:d0:c4:
16:d0:b8:a6:f6:c0:aa:ac:d4:83:38:c4:9d:ae:ac:89:34:a0:
f7:c9:a8:36:c3:65:98:aa:6d:b0:64:82:81:43:4e:75:b0:37:
74:b3:60:81:82:68:f0:9a:30:1a:b6:8e:4e:a4:2b:67:ce:66:
46:d7:7d:05:e2:bc:3f:b1:54:96:ae:2f:1c:e9:fc:84:26:62:
79:52:59:9b:ab:39:9e:0c:80:c2:a2:de:ba:e0:3a:25:3d:09:
e7:3c:62:29:30:0c:8b:0e:58:23:e9:72:df:5b:07:fe:dd:9b:
bc:d1:ea:e5:d7:0f:09:21:06:89:f3:5d:a0:2f:7a:6e:85:76:
75:ed:7e:46:96:91:e0:23:46:98:5e:88:05:fd:83:88:54:20:
b7:af:d0:89:74:6e:09:3f:02:ef:dd:70:4e:11:0f:96:d0:68:
62:8c:5d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:28:32 2025 by rpki-client