Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
File: iYh94B2LHL1Qt126yRM59mF6TYo.mft (raw, json)
Hash identifier: bafGAV++cIAeDP+AnxfoyAxhXvwNxnS4yAWtW/Xu4sw=
Subject key identifier: 7B:C9:BC:04:60:76:1F:79:D0:66:B3:03:C9:4D:86:D3:FD:A2:42:6B
Authority key identifier: 89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
Certificate issuer: /CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Certificate serial: 0197B70F146E813B26CE1B9E811A9093B697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
Manifest number: 148B
Signing time: Sat 28 Jun 2025 15:01:47 +0000
Manifest this update: Sat 28 Jun 2025 15:01:47 +0000
Manifest next update: Sun 29 Jun 2025 15:01:47 +0000
Files and hashes: 1: iYh94B2LHL1Qt126yRM59mF6TYo.crl (hash: W6qxVBSRbJKlWKYiYC3lWtzcrDXgOEKxWvn1QiLDbUQ=)
2: jAe0olQrTlqlwekCa7zU__XvOnI.roa (hash: lpxqZITJHJnTC06LkfUlinyvWGfnxykj2N1zFv1cD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:14:6e:81:3b:26:ce:1b:9e:81:1a:90:93:b6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Validity
Not Before: Jun 28 15:01:47 2025 GMT
Not After : Jun 29 15:01:47 2025 GMT
Subject: CN=7bc9bc0460761f79d066b303c94d86d3fda2426b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:d6:97:86:73:6c:02:0c:b7:eb:60:36:86:
d7:03:96:4c:d5:bd:e2:75:ca:38:c2:91:0a:33:af:
43:7b:9b:86:93:05:4b:65:aa:62:7b:39:f6:3d:cb:
b9:4c:55:c0:bb:e2:c2:b1:5e:13:83:6a:43:e4:ea:
df:7c:90:7f:47:4e:75:e2:9c:90:ed:b0:16:4b:65:
59:eb:de:37:94:c7:e7:c4:75:4b:7e:ba:f5:27:28:
92:8e:88:ee:eb:6d:f6:cb:22:d3:65:3e:9a:88:8e:
b1:a1:8b:fb:3f:f2:39:8e:e2:05:0a:aa:c3:e0:cc:
e9:ac:02:a7:34:bc:8d:e9:43:5e:36:31:fc:d6:6d:
d8:a7:5c:9e:60:e2:da:df:6e:c2:2b:f0:9f:c4:24:
41:b9:75:87:5a:27:97:1e:37:a2:51:a4:ce:5f:80:
8e:54:1c:93:91:25:62:dd:51:83:b2:96:aa:38:66:
7c:fa:ae:99:17:bd:a1:e1:26:e8:61:0b:80:0c:cc:
01:2c:50:a0:de:c3:d6:07:c3:3d:a5:55:e9:b4:f1:
d1:97:ba:2a:d8:0c:5a:f7:65:b1:6a:82:bb:7b:05:
8a:a5:50:ac:47:89:ca:05:da:f5:f1:ab:01:42:d4:
ea:84:e4:25:08:b3:f2:f1:f8:5d:bf:43:1c:7d:84:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C9:BC:04:60:76:1F:79:D0:66:B3:03:C9:4D:86:D3:FD:A2:42:6B
X509v3 Authority Key Identifier:
keyid:89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:47:47:cf:aa:bc:23:b3:79:0c:fa:32:6a:f1:c6:35:e0:e4:
c4:10:77:df:21:8b:31:00:29:f3:dc:a2:8f:fe:4d:38:e2:ec:
62:2b:2f:16:3c:a9:33:8d:be:fa:33:80:c0:f5:fb:8a:06:e8:
29:6a:88:68:e3:55:aa:b3:2d:17:70:df:7f:ab:9c:5b:33:1c:
64:cb:a8:1e:80:a4:c8:cb:ba:f9:55:da:89:4b:9b:ec:8a:04:
1c:c0:eb:e9:85:47:4b:da:f1:94:04:96:b7:55:ff:fe:77:ee:
b4:cf:75:49:5a:2b:7c:7f:18:eb:86:c3:72:6d:ca:2e:92:9d:
85:67:09:60:d6:50:fc:91:21:5f:35:1c:f0:ca:47:eb:a3:b3:
6f:f9:b9:39:8a:f7:c3:16:e2:69:c8:3f:21:2b:b1:e1:02:3e:
29:8f:22:c6:eb:f3:5e:fb:a2:7a:eb:78:b0:bc:39:22:2e:97:
e3:83:21:b9:c9:3b:d4:c8:e3:92:2f:06:8a:31:7b:04:42:c1:
6b:ba:ba:c4:54:22:7d:f2:86:77:bd:4d:39:7e:8b:cf:4e:fb:
6e:56:8d:fb:a5:14:7b:df:47:e3:e4:62:7f:37:f7:15:35:be:
90:36:11:a6:67:b9:d2:66:c8:c8:c1:c9:f3:c8:6d:d9:bc:25:
98:a1:75:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:18 2025 by rpki-client