Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: JWvOZaI1uuiah79TAXsqlAE3juW+DVbkVpB+bDheAG0=
Subject key identifier: 6F:DC:7E:2D:7C:E2:6F:8F:74:8B:92:D2:DD:BA:1F:4D:55:DA:14:CE
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 0197B74575CC4CA31C5AD912ABCED71B2377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0ADE
Signing time: Sat 28 Jun 2025 16:01:11 +0000
Manifest this update: Sat 28 Jun 2025 16:01:11 +0000
Manifest next update: Sun 29 Jun 2025 16:01:11 +0000
Files and hashes: 1: Io8_rALEkRmJyvwQSYZoU_nTQg0.roa (hash: IdvBLL1znSmthNlumpub/fXZwL7C6UNAlVvYWPg9Tzc=)
2: fp-LIMQ80k5YBVtTaX91n-J89eo.roa (hash: ItqEQhJ82EwpqjGgmH+0CXCKGMVgFNbNle1pM5dmqlE=)
3: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: UwkAUhD4/IfSeElLHxLfYk/xjS4RW9/m6m/9k2sG1Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:75:cc:4c:a3:1c:5a:d9:12:ab:ce:d7:1b:23:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Jun 28 16:01:11 2025 GMT
Not After : Jun 29 16:01:11 2025 GMT
Subject: CN=6fdc7e2d7ce26f8f748b92d2ddba1f4d55da14ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:43:d6:63:68:68:48:15:2c:a9:1f:8e:4c:7c:
29:ae:33:8c:a6:19:a5:59:95:01:f8:ab:75:95:fa:
03:a4:cb:4c:0a:08:19:eb:86:e7:92:06:e3:1d:37:
93:62:ca:48:03:34:4f:fe:e4:98:c4:f1:67:1b:b2:
71:e7:de:14:61:06:7c:d6:75:68:10:37:8f:9b:07:
ca:3c:04:6e:37:44:43:40:12:d8:ce:a8:01:1d:0f:
c0:20:5b:22:2c:37:91:33:c1:97:b6:aa:84:e1:2d:
c8:9f:33:42:ed:03:5d:a7:88:6a:d2:4b:55:e0:60:
9f:a8:19:ce:09:82:de:e6:36:71:bb:54:bd:16:ff:
04:8b:2e:84:cf:86:98:4e:45:5e:f7:53:39:e3:b3:
fc:03:b3:a9:e5:ee:db:66:9f:f3:8a:6e:99:13:0d:
d3:e7:77:1f:11:90:8a:c4:01:1c:0d:d8:e9:5f:81:
5f:5e:f9:2f:29:99:ad:dd:6e:2d:37:b7:d0:f4:34:
c9:74:53:c4:f0:78:4e:f7:de:b8:02:00:79:7c:8d:
f0:5b:4a:63:82:e8:21:e9:50:66:30:f3:a4:12:39:
90:c8:83:ae:f6:72:b8:b7:49:b0:35:c1:dd:81:a8:
ca:29:15:80:7e:cd:3d:71:67:a4:60:79:02:67:d5:
32:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DC:7E:2D:7C:E2:6F:8F:74:8B:92:D2:DD:BA:1F:4D:55:DA:14:CE
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:21:1e:31:a5:9a:26:a2:4b:40:07:49:fb:35:c4:e2:10:9f:
b7:3f:08:98:b6:97:ab:a8:f2:48:ec:dd:d3:95:20:24:65:70:
be:0c:d7:d5:26:07:ba:de:3e:e8:ca:f9:b9:68:45:4c:52:cb:
3e:50:89:1e:ad:7a:82:4b:02:4e:b0:3c:52:85:f5:be:d8:e7:
22:56:16:f0:5d:79:01:50:af:32:bd:97:f4:dc:7c:d7:2a:54:
55:e7:90:35:88:4a:44:ea:2f:84:78:7b:e8:82:1f:9e:ad:b0:
59:51:f4:8d:93:be:eb:99:22:29:0f:6d:41:d0:1f:fa:33:be:
58:28:5a:a1:55:41:10:f2:26:18:0d:3d:72:bb:dc:46:85:9f:
4e:ad:9b:12:34:31:fe:9d:22:dc:85:7e:85:94:08:c5:f3:b3:
03:d1:d6:bd:15:ff:8f:1f:9a:df:48:14:f4:af:ed:47:9d:09:
17:38:a4:f6:ee:50:62:01:9b:f5:98:6d:c2:cf:1a:5a:c9:33:
63:e1:2c:95:b9:af:24:8b:6f:e6:49:e6:b6:73:5d:af:bc:16:
cf:dc:e2:77:fa:cd:5d:9b:45:fc:d3:99:32:d6:d1:f1:c1:8b:
55:7a:71:5b:ba:64:40:f5:45:2c:4b:4c:3e:12:18:f2:b1:fa:
39:af:00:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:52 2025 by rpki-client