Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
File: i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json)
Hash identifier: SSeM9k0SpJFZWP//Ek9SE6DeULRU304Oy3XdAdBOaco=
Subject key identifier: 35:20:FF:3D:65:58:99:F8:68:94:77:7E:4C:6E:AC:8E:6D:52:AE:C1
Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Certificate serial: 0197B8C5B4D848AEECDD6ADA2FE0F0313AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 23:00:54 +0000
Manifest this update: Sat 28 Jun 2025 23:00:54 +0000
Manifest next update: Sun 29 Jun 2025 23:00:54 +0000
Files and hashes: 1: deCTZwf8Lo4tPBt2V0GwD8QTdjQ.roa (hash: FyKYzrCJB3LXbVhWQRcS/ZI/wI5zOqLIDpvmKLMGaw0=)
2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: VffLDqiOWRnIUiIWb0ZP+/X0NabCreQ3PuOn8fd71ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:b4:d8:48:ae:ec:dd:6a:da:2f:e0:f0:31:3a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Validity
Not Before: Jun 28 23:00:54 2025 GMT
Not After : Jun 29 23:00:54 2025 GMT
Subject: CN=3520ff3d655899f86894777e4c6eac8e6d52aec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:c0:3c:8e:62:97:0a:4c:ef:64:ad:67:7c:
0a:06:15:a2:ca:d6:4e:10:a4:1d:f1:d2:4a:8b:de:
be:10:fe:e0:54:2a:de:bd:43:12:a2:8b:c7:9e:26:
21:10:08:1b:35:90:67:48:4e:57:ef:99:33:00:f8:
30:96:be:56:df:15:b0:60:11:c4:34:cc:cb:be:ce:
0d:f4:eb:05:b5:01:73:28:83:d4:ec:41:96:f5:ab:
72:a8:a8:dc:58:c8:23:46:b4:ea:c4:cc:1f:c4:be:
2c:3f:4d:32:7e:a8:fc:62:58:7c:8d:3c:f1:3c:84:
92:43:b4:2c:15:cc:a6:ad:f7:80:f7:ad:7e:bf:32:
3f:ed:30:c7:ee:5f:69:cd:0a:52:99:8a:19:b8:2f:
44:2d:45:e4:ee:7d:cd:8a:cc:25:28:ba:38:20:58:
48:67:91:7b:13:be:31:8d:96:63:83:8f:87:1e:9b:
89:91:05:1f:06:21:2d:16:77:fb:70:c3:ae:36:3c:
fc:31:c0:da:3b:0e:56:d9:ed:7c:e1:5a:cd:65:32:
a5:42:f5:a7:63:cb:51:4b:a9:10:f5:da:e6:82:ce:
10:da:76:ea:a3:ff:d0:56:b6:85:fd:9b:c3:6e:e5:
05:99:57:0a:13:be:ed:49:80:b7:a1:e6:4b:b6:09:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:20:FF:3D:65:58:99:F8:68:94:77:7E:4C:6E:AC:8E:6D:52:AE:C1
X509v3 Authority Key Identifier:
keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0f:53:a1:60:e2:b3:3c:6e:7f:f7:7a:9f:ff:9d:5b:0f:a0:
72:02:d0:4e:20:a0:8c:c6:d9:49:fa:11:31:9b:56:02:d1:ed:
58:46:20:ed:ca:21:f6:8a:de:4e:77:68:09:8e:36:35:48:c4:
8a:1a:5e:be:75:d4:9a:1c:e7:a5:9c:5d:e9:8b:76:fa:45:01:
8c:0a:54:00:52:c1:32:01:08:4c:ca:93:67:ac:48:f4:a6:23:
f0:0b:17:60:50:35:c4:71:67:18:e4:b1:f5:d4:2b:85:8b:f8:
13:c6:c6:78:25:69:f2:c3:38:bc:df:c9:f8:fa:fc:00:a1:46:
1d:50:31:c5:21:c5:7e:b3:3e:7f:5a:b7:03:d8:a1:65:16:d8:
e0:bd:5e:3e:4f:e9:be:32:f7:5c:e2:af:fc:60:dd:20:61:dd:
79:96:e6:81:f1:05:a9:5a:f6:53:b2:9c:46:0b:94:40:78:af:
a1:ef:46:6a:c6:0f:5b:cf:62:08:9f:d4:92:93:50:d6:27:e3:
68:72:c4:7f:ef:c7:9c:e4:be:e4:83:e8:cc:ba:e5:01:67:22:
1e:92:73:26:6d:37:b2:ca:89:21:0e:d4:e9:51:ce:ba:42:ed:
04:72:42:f7:ab:d3:ec:a4:2f:09:52:a9:4a:41:3f:e4:c0:f8:
9f:aa:63:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:27 2025 by rpki-client