Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier: gNMpYAdfvz2HEGEteQuMfQvaZqMfb1QZ/91gBkUsRoo=
Subject key identifier: 47:BC:36:11:88:BA:45:22:F2:FF:54:20:65:18:3D:8B:41:E8:78:09
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 0197B7EA92210204921E6DE2876FADFF300D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number: 159A
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: 5dE_GC4RYmruYsEQCosEswqhvMw.roa (hash: PKjCYy3vCzlACHchkXt5SVZDwsnRqMCgtgL6CJOnCUg=)
2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: SVW1VT3oEcuIIEk/LHXzs4OHcBH9XfZ/hB+oFbvCWA8=)
3: wITBUH3fVii4QvavQf9IYQ9sIA4.roa (hash: sUVkY3RRTmkWlOCgQmin3wil/Gjs5wSpMGd2nMYWzJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:92:21:02:04:92:1e:6d:e2:87:6f:ad:ff:30:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=47bc361188ba4522f2ff542065183d8b41e87809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a6:14:e4:2a:37:be:b1:70:76:6e:1b:38:a6:
ed:cb:cf:25:12:94:40:36:96:85:e6:84:ef:82:ce:
38:6d:9d:3e:90:46:7d:84:4f:9a:30:57:63:87:a0:
77:7d:e8:e7:79:b3:49:0f:c9:f0:79:85:13:aa:a8:
2c:45:f8:fc:c3:61:06:85:f6:ea:c8:d9:47:e9:9c:
3d:cb:23:28:92:fc:a6:1c:a7:d8:ee:81:b2:da:7c:
68:51:59:21:16:08:95:88:75:19:7f:4b:64:58:0d:
7e:c3:72:de:33:8e:2d:eb:9f:63:cd:52:36:ed:ba:
c9:f7:35:33:d5:26:96:45:2b:1f:0d:4c:9f:a9:30:
74:86:5b:06:60:66:fa:e1:25:5b:0c:1f:33:b7:f9:
22:9d:e7:63:c2:b3:ce:03:7f:e1:db:cc:ac:ac:a8:
1a:c4:35:c0:67:51:4a:f7:62:b9:a5:2f:e9:03:15:
9b:3e:c0:79:2e:8b:20:dc:1b:cc:06:23:64:55:b3:
52:5a:20:c1:03:f7:7a:36:cb:b9:c5:ed:3d:d7:c1:
a6:5e:9b:9f:64:a5:f3:5c:ca:5d:be:ef:30:01:c4:
de:28:d8:b3:23:7e:5d:8d:a4:84:d0:ff:7e:bb:ff:
89:d8:f8:c3:be:34:37:a5:f3:e7:f0:08:c7:ed:83:
01:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BC:36:11:88:BA:45:22:F2:FF:54:20:65:18:3D:8B:41:E8:78:09
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a2:93:00:e4:fb:6b:89:ae:ca:f7:18:e0:4f:78:0d:27:6f:
84:3c:5f:99:78:44:a7:5a:65:b2:3d:8b:84:fd:a2:11:b9:15:
fa:d1:43:7b:52:5a:fc:6f:eb:45:20:7a:55:94:66:0f:51:96:
d2:a4:95:b3:e5:86:91:c1:89:0b:76:fd:ce:50:a2:10:1f:ea:
13:08:33:7a:53:ee:40:a0:47:cd:ea:ac:a3:c2:68:ac:11:dd:
1d:28:d0:79:fb:57:d9:c3:1a:ae:13:31:fa:b9:76:92:b0:c8:
8a:a2:8f:8a:7b:a5:40:d7:0e:ac:b9:01:62:98:49:0e:bf:48:
ff:9a:78:7d:d6:71:6b:70:eb:81:85:32:91:02:80:af:e7:a8:
9f:35:5f:18:97:27:a7:07:39:ca:96:f7:b0:ad:f0:0e:4b:42:
a7:71:b2:85:49:e5:e0:1d:27:e2:5b:26:1b:4a:74:e8:15:9f:
ed:fd:fb:d3:f0:fe:db:5f:00:5d:c8:bf:f9:54:c9:cb:40:d6:
06:df:a7:f0:c5:5a:2c:1c:ca:e9:e9:7f:87:b5:29:cb:ed:df:
27:b9:0f:2f:84:c8:8f:eb:80:38:27:c9:2e:31:58:53:4c:57:
3d:7b:23:bc:57:a5:12:cd:03:c4:a5:53:de:34:63:cc:a7:a3:
cc:ab:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:28 2025 by rpki-client